Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: t/FxvBmv2cJ7LT4BWnuwEWQAQ9AOAQHwIkkP3HuAqwM=
Subject key identifier: 9D:94:06:A6:3D:15:05:6E:74:58:C5:F3:60:8C:5B:06:24:8D:05:BE
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 019D2772B8D80525CD306D9BDF7D6CCB588D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:02:02 +0000
Manifest this update: Thu 26 Mar 2026 00:02:02 +0000
Manifest next update: Fri 27 Mar 2026 00:02:02 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: 53b62IMPRbcivSLRMb2PT6nEssd6dj04r7yH9hLUbq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b8:d8:05:25:cd:30:6d:9b:df:7d:6c:cb:58:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Mar 26 00:02:02 2026 GMT
Not After : Mar 27 00:02:02 2026 GMT
Subject: CN=9d9406a63d15056e7458c5f3608c5b06248d05be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d3:be:94:e2:33:ac:34:1f:25:92:b5:23:97:
4a:74:f4:2e:6b:39:0d:33:6d:5d:45:4a:99:e0:71:
31:a3:11:f8:b7:0b:75:e0:ea:e4:2c:72:a9:b0:bc:
7c:65:fd:d3:1c:48:cb:a9:3f:94:f7:2a:f4:5c:84:
29:7b:c6:91:d5:93:e4:69:bd:19:bd:d6:78:58:72:
b8:a9:9b:29:f3:6f:7c:53:1b:95:3e:85:d8:a4:a7:
7c:a2:75:9b:46:ea:61:fa:7d:f2:6d:d8:05:b6:5b:
e7:cd:eb:38:ef:6a:ce:69:6b:a6:76:0e:2d:54:86:
26:16:d3:b1:09:bb:61:13:58:68:f6:c0:15:b4:3e:
6b:01:67:e9:db:18:b7:10:2e:f1:a7:cf:8c:29:f0:
22:b2:1c:29:86:5f:c9:9b:14:e9:68:5d:69:60:ce:
3e:3c:0f:16:b6:a9:cf:82:f9:83:d4:c9:8d:50:40:
f4:c3:70:5e:f0:a1:9e:62:52:6a:92:be:74:15:c4:
e2:06:69:31:98:a7:f1:39:60:ae:7d:00:7f:53:fa:
da:ac:04:15:1a:fc:cd:c4:7e:7c:cb:47:5b:3c:a8:
83:bf:f0:4d:0f:30:9d:04:9e:11:4c:cf:4d:33:d1:
e7:0a:af:3c:dd:3a:d0:e8:f8:91:e1:20:6e:3f:05:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:94:06:A6:3D:15:05:6E:74:58:C5:F3:60:8C:5B:06:24:8D:05:BE
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9b:a4:2c:c9:99:8e:17:51:6f:5c:55:6f:ed:7b:e2:e2:28:
54:cd:36:11:c5:d9:49:c0:8b:4d:e0:90:8e:8f:28:37:e1:97:
6c:86:91:8d:08:9f:c5:1b:d2:de:60:80:e2:a3:3c:59:bf:ad:
05:7a:48:6b:56:db:18:76:5f:67:23:9e:6e:8a:38:cf:e6:bc:
ec:b3:ed:1e:74:78:82:dd:da:13:22:32:75:4f:f0:82:34:5f:
ff:3f:f8:c4:f3:fa:fb:a4:bf:c6:c2:13:eb:06:0c:16:eb:e4:
5d:24:f2:7a:ad:82:7f:65:ff:0e:af:13:0e:af:df:9d:aa:66:
38:e5:4d:a4:8b:9e:18:e2:4f:c5:f1:b7:a7:95:fe:76:d8:70:
63:68:8e:21:b4:37:94:9b:f2:2a:bc:fa:c8:a0:54:f7:0d:23:
34:50:1d:ca:62:fe:bd:3a:b5:6f:d3:e9:a1:c7:ac:3d:07:a1:
18:e2:bd:66:90:1d:17:9e:fe:98:c5:85:85:44:27:df:20:cd:
40:68:0b:26:41:a4:39:f4:44:d8:57:40:03:3f:5a:d8:84:65:
0a:21:08:fc:7b:75:67:e2:36:c1:30:62:24:fa:da:46:70:ec:
53:df:b8:fd:b1:14:e4:0c:b2:1b:be:ff:1e:9a:12:38:cc:9f:
cd:e9:ae:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:35 2026 by rpki-client