Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier: FvnVmsyM5W60mAhNslF13K040y14VaErsGn1PTTSqdA=
Subject key identifier: 03:57:CE:BE:86:AF:42:38:5E:F4:9F:C3:64:7E:5D:64:F6:01:B1:DD
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 019D254CAE040A8D1423030C06239FE8B963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number: 127E
Signing time: Wed 25 Mar 2026 14:01:15 +0000
Manifest this update: Wed 25 Mar 2026 14:01:15 +0000
Manifest next update: Thu 26 Mar 2026 14:01:15 +0000
Files and hashes: 1: 5eB4htWyGJDJwj6zhgzJLbW_4Rs.asa (hash: AMkYMX4Ub8J6QzakBaQUECXSyVGj24SQ4egirOIAq6E=)
2: Uhdd2LHjn5iOA9Ff6w9g0pvCay0.roa (hash: GWSvUjVdu1UDo6lvgspGXIRNDtNx+fESVlxZbXeFX7g=)
3: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: 2wEHUrfwIda2sA2mhGvyEIxtBpzIeuPxYCBlxyfGfaI=)
4: lnH9C7HQoo7yeYbE56WHSLlD_TE.asa (hash: V5rxGHK5REBBYrckeqobdcgc6TTvp3rfULd5M0m28N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:ae:04:0a:8d:14:23:03:0c:06:23:9f:e8:b9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: Mar 25 14:01:15 2026 GMT
Not After : Mar 26 14:01:15 2026 GMT
Subject: CN=0357cebe86af42385ef49fc3647e5d64f601b1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:4c:e2:a8:9f:fa:21:c9:27:8d:bd:d8:4b:
a8:4c:5b:41:5c:82:ad:8f:8b:4d:10:ca:6e:dc:d2:
a4:b6:7b:5e:48:55:cb:59:8d:6f:8e:5a:22:fd:8f:
ac:4b:ab:a9:94:b6:93:c1:87:b4:79:22:d1:d6:b2:
c2:26:86:d1:e1:ee:b3:23:22:b3:93:84:0b:a7:3f:
26:78:c0:fc:52:ae:5a:c4:5d:4a:ce:1f:d4:9f:cf:
db:04:c6:8b:9f:d8:25:ab:94:78:bd:6e:41:ca:98:
6d:ad:3c:c7:84:1d:6d:14:f9:2e:02:71:53:1d:95:
61:e7:0b:cf:74:38:eb:f4:4c:0f:10:e8:8f:53:3b:
e4:12:5f:06:90:e1:1a:01:56:97:07:34:d2:bd:ee:
21:fc:0f:18:1a:02:ac:c8:dc:6a:32:d1:fa:0b:b8:
c9:32:28:a0:91:6d:7a:15:99:72:a3:ae:7a:8c:d7:
32:a6:f8:a3:da:48:9e:b5:10:c2:da:35:21:50:fc:
54:6e:09:72:c8:6d:ed:e3:a8:ec:37:a4:f5:f6:ba:
64:68:9b:d4:49:47:73:a1:2a:21:70:d8:f5:7d:7d:
c9:ba:4d:7e:09:cd:2b:04:f1:0f:5e:f3:2d:4c:f1:
35:2a:f9:b6:0b:8c:c4:16:2e:d0:76:90:a0:e1:16:
cd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:57:CE:BE:86:AF:42:38:5E:F4:9F:C3:64:7E:5D:64:F6:01:B1:DD
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0a:fb:5c:69:77:12:e2:f4:ce:f8:65:d4:ce:a3:40:1b:8b:
4e:2e:a7:81:6e:33:5d:12:a0:3f:2c:4a:8b:2c:d3:65:20:14:
14:05:5e:42:e0:14:c4:17:23:88:04:3d:1c:10:f8:9d:44:70:
a1:d9:30:07:ae:94:3d:06:74:ee:9c:28:f4:ac:cb:39:f5:01:
b7:4b:6e:00:4c:cd:a6:20:42:cd:cc:57:ee:8d:75:28:a1:ab:
14:28:02:87:43:17:06:b4:63:54:94:bf:ba:7f:65:54:8e:10:
a8:9d:d0:d4:b0:4c:0a:34:c4:5c:97:dd:0c:c6:0f:cb:4a:5a:
3e:5b:ce:23:c4:7d:b8:03:2d:74:45:90:ed:1d:9f:6b:fe:99:
8d:d5:ec:8f:23:71:7f:9b:9c:be:cd:fb:52:33:95:96:8c:08:
c7:51:c8:a7:70:57:dc:b6:ca:47:81:59:17:51:87:41:19:93:
2e:3f:1f:c2:d5:49:e3:bd:9f:b3:66:00:fc:06:dd:6a:a3:66:
05:3d:94:1e:11:63:52:15:63:4a:51:ce:0d:2a:98:d9:fc:3e:
90:a6:0c:15:c5:fb:d8:29:77:cd:e7:82:0f:1e:69:77:70:07:
a8:aa:77:cd:01:ad:b3:38:24:e0:67:82:ad:ec:22:60:b2:3f:
3c:1a:69:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTK4ECo0UIwMMBiOf6LljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMDdhOTU4ZTZiM2RmZDc4ZGEzNTBiMTAzZDNiOTAyN2Uw
ZmUzZjAwHhcNMjYwMzI1MTQwMTE1WhcNMjYwMzI2MTQwMTE1WjAzMTEwLwYDVQQD
EygwMzU3Y2ViZTg2YWY0MjM4NWVmNDlmYzM2NDdlNWQ2NGY2MDFiMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQZM4qif+iHJJ4292EuoTFtBXIKt
j4tNEMpu3NKktnteSFXLWY1vjloi/Y+sS6uplLaTwYe0eSLR1rLCJobR4e6zIyKz
k4QLpz8meMD8Uq5axF1Kzh/Un8/bBMaLn9glq5R4vW5ByphtrTzHhB1tFPkuAnFT
HZVh5wvPdDjr9EwPEOiPUzvkEl8GkOEaAVaXBzTSve4h/A8YGgKsyNxqMtH6C7jJ
MiigkW16FZlyo656jNcypvij2kietRDC2jUhUPxUbglyyG3t46jsN6T19rpkaJvU
SUdzoSohcNj1fX3Juk1+Cc0rBPEPXvMtTPE1Kvm2C4zEFi7QdpCg4RbN6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANXzr6Gr0I4XvSfw2R+XWT2AbHdMB8GA1UdIwQY
MBaAFIAHqVjms9/XjaNQsQPTuQJ+D+PwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZTFiNWQtNzdiNS00M2I2LTlmMGEt
M2UxNzFiZDVlZmMzLzEvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy84ZTFiNWQtNzdiNS00M2I2LTlmMGEtM2UxNzFiZDVlZmMz
LzEvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgr7XGl3
EuL0zvhl1M6jQBuLTi6ngW4zXRKgPyxKiyzTZSAUFAVeQuAUxBcjiAQ9HBD4nURw
odkwB66UPQZ07pwo9KzLOfUBt0tuAEzNpiBCzcxX7o11KKGrFCgCh0MXBrRjVJS/
un9lVI4QqJ3Q1LBMCjTEXJfdDMYPy0paPlvOI8R9uAMtdEWQ7R2fa/6ZjdXsjyNx
f5ucvs37UjOVlowIx1HIp3BX3LbKR4FZF1GHQRmTLj8fwtVJ472fs2YA/AbdaqNm
BT2UHhFjUhVjSlHODSqY2fw+kKYMFcX72Cl3zeeCDx5pd3AHqKp3zQGtszgk4GeC
rewiYLI/PBpppQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:00 2026 by rpki-client