Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: GzTFTHaeETgwSE7h6cdqJx2hYaBfV9f3T6fCfTMgUWg=
Subject key identifier: C7:C3:5A:C4:33:EF:5A:03:2E:7F:20:2D:1D:65:FB:30:B7:AC:34:E4
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 019D2AE11666971CB2C721DB5A1C8FB76809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0DB1
Signing time: Thu 26 Mar 2026 16:01:27 +0000
Manifest this update: Thu 26 Mar 2026 16:01:27 +0000
Manifest next update: Fri 27 Mar 2026 16:01:27 +0000
Files and hashes: 1: fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa (hash: LXNlsf10QtsQkHE8Tm9n4uZsh/ON6f1nhNppQ718O5s=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: YVwVkpKz8PDlwZpO6w6Jt4ziFyA7CqHQhRHJuKEykIs=)
3: xG0VUDOknHsZasT5TDaZxzA4pvE.roa (hash: Xzghi2lIosJPiXM8pVY4mOf1fz9gQv7/1SCn9lu4mdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:16:66:97:1c:b2:c7:21:db:5a:1c:8f:b7:68:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Mar 26 16:01:27 2026 GMT
Not After : Mar 27 16:01:27 2026 GMT
Subject: CN=c7c35ac433ef5a032e7f202d1d65fb30b7ac34e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4d:94:36:0c:f4:45:4c:d5:a9:6f:0c:20:22:
ba:f9:3e:24:08:85:71:c2:e6:33:68:9b:0d:2e:a1:
d0:f3:06:83:ae:1b:45:a6:a6:7c:d3:7b:82:3b:cb:
85:7d:16:ff:f1:5f:4c:d4:3f:b2:3b:cc:d0:07:52:
18:ba:2f:1b:2b:73:56:95:59:ac:09:ff:36:72:70:
fe:d0:07:61:e0:f0:2f:57:7d:da:ee:e9:72:3a:d4:
b5:a7:77:80:53:fa:02:91:00:7c:bb:a8:6a:5a:6e:
48:16:d9:5f:bb:41:f9:36:84:27:d1:0d:fd:09:e1:
22:f1:10:5a:7b:c1:2a:a3:2a:e2:3a:4d:11:98:d3:
1a:56:bc:45:ed:7e:38:18:c9:9b:fd:e2:d4:51:92:
81:1b:2d:a0:30:c6:d8:23:0c:fa:29:f0:ed:17:cc:
64:4b:65:bd:d8:05:c2:f8:7d:a9:25:b1:08:b0:01:
96:53:ea:fc:95:ce:42:f3:2b:05:c6:6b:8a:d1:cf:
70:22:17:a3:2c:66:40:3c:db:2d:3e:d8:25:c7:2a:
33:ec:3d:dc:4c:d4:85:c6:72:7a:a5:59:bf:7b:54:
13:a7:98:46:b6:6a:42:d4:35:17:37:35:62:ea:17:
32:1c:c9:c9:42:c8:da:ce:d0:58:08:bd:9d:b7:ae:
e6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C3:5A:C4:33:EF:5A:03:2E:7F:20:2D:1D:65:FB:30:B7:AC:34:E4
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:da:ec:0b:0d:1c:63:ec:a5:52:b4:65:fc:3a:1a:08:c9:12:
85:c9:fe:6d:4a:32:2e:b6:a7:96:74:6b:94:e6:42:4f:e9:dd:
e1:58:38:ad:fc:a7:29:51:2c:03:24:d9:dc:ec:9a:b4:1a:f8:
8b:f0:56:bd:64:19:d1:07:55:24:97:3f:78:d1:c7:99:12:ac:
c5:4e:46:74:8a:d4:a6:90:0a:8f:de:0b:99:ce:d0:b9:39:a6:
f5:f6:be:19:1e:39:b0:8b:3a:4e:69:3c:77:a7:ad:fd:0e:63:
56:8f:02:fd:9a:f8:f7:8f:3d:57:d9:cb:1e:2e:c1:9c:5d:70:
6f:e7:a6:ec:ea:44:12:7f:bd:ca:be:35:f6:8c:cd:fb:4e:e6:
89:e4:31:f7:da:d0:f7:3b:9b:9c:94:2e:62:5c:c4:a3:6b:07:
04:e3:dd:cb:8e:b2:ed:41:6d:5b:b2:48:ad:53:19:87:87:6f:
f5:66:2c:30:af:a6:cf:e9:40:e3:81:06:d6:7f:83:ed:f1:a7:
20:d8:bc:c6:01:3d:e5:a8:97:d6:13:f3:2d:77:a8:0b:18:40:
68:91:60:5a:92:3c:f0:3a:45:13:41:35:dc:60:b3:9c:cf:8a:
f8:81:b5:d6:3c:a0:b5:09:80:76:34:7b:50:b8:9b:38:ac:94:
7e:48:c8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:18:14 2026 by rpki-client