Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier: Lq4tzr+C1U0bCUCm/uVrPm3dWv+IPCfNqT1SzczZsoQ=
Subject key identifier: 48:8C:BB:C8:C9:79:34:01:6E:7E:B7:0F:4C:04:39:32:60:1B:46:86
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 019D28F2C201814A3EC620A2E8ABDAF876A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number: 0DF2
Signing time: Thu 26 Mar 2026 07:01:31 +0000
Manifest this update: Thu 26 Mar 2026 07:01:31 +0000
Manifest next update: Fri 27 Mar 2026 07:01:31 +0000
Files and hashes: 1: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: 3tXfHAU27AXcpAyVSuLe2TF3jGwhuEIqIjIBahNyijI=)
2: hQ9NotylFYMkqo3bbUqE9OBXr30.roa (hash: DDGD0ACVZ8p80B8GH1cwIOOojO6HokidqY08m4jPrFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:c2:01:81:4a:3e:c6:20:a2:e8:ab:da:f8:76:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Mar 26 07:01:31 2026 GMT
Not After : Mar 27 07:01:31 2026 GMT
Subject: CN=488cbbc8c97934016e7eb70f4c043932601b4686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:49:fc:7b:eb:73:e6:c8:e5:18:c6:a6:54:5a:
2c:8f:e6:ca:3d:48:9a:0b:2e:87:41:0a:f5:59:98:
eb:ac:2e:12:7a:45:c0:f4:51:0e:37:5a:13:3d:6f:
d6:8f:38:30:48:de:5a:e8:4c:e7:d6:7b:72:2f:eb:
59:6f:78:7c:c2:1c:ce:d2:b1:06:1c:97:52:68:c1:
56:26:c8:06:34:b9:41:64:31:91:95:c5:46:5e:f3:
e3:0e:94:0c:35:22:68:ab:6f:48:56:bc:17:0f:e6:
52:47:4e:c1:47:45:77:0b:a4:18:42:3d:2a:e8:f9:
45:a8:cc:51:77:29:16:a6:86:eb:ca:4b:ff:fd:24:
b6:96:02:e8:70:80:c4:e7:e4:6f:54:67:a2:05:e0:
e2:84:15:ab:6e:8f:41:33:41:5c:8e:16:f6:50:fb:
5a:39:6b:4a:4b:ae:7d:11:7e:ec:6a:ae:85:35:55:
77:aa:fc:fe:42:07:81:13:53:10:fa:04:a3:a0:25:
43:5a:b6:3b:77:9a:19:14:a0:80:74:59:a7:f1:34:
e9:64:bf:cd:aa:91:cd:94:89:2e:e5:d9:73:2c:0a:
08:ad:28:3b:3e:87:df:f9:c5:e1:a2:df:56:27:af:
7e:63:5e:63:fc:5a:66:54:81:7b:fc:f7:cd:ca:20:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:BB:C8:C9:79:34:01:6E:7E:B7:0F:4C:04:39:32:60:1B:46:86
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:98:37:49:79:c8:95:34:92:e9:fd:1a:24:32:21:34:71:5e:
20:11:4a:4f:3e:e8:8d:21:2f:b2:b0:7a:3e:8a:2f:83:79:f3:
14:f2:f2:54:f5:fe:73:2b:f5:a9:25:ab:00:09:87:cc:77:7a:
db:2c:b4:93:fb:2c:2e:83:9a:56:21:1e:e3:a6:ba:44:4f:8d:
af:ab:8f:7a:7e:00:3d:c3:c6:ca:ec:28:ae:d9:1a:2c:94:11:
0d:80:d6:fb:39:90:b9:42:14:c0:8a:69:18:7f:08:0c:ea:68:
5f:03:75:0a:90:c2:f6:55:7b:bb:c3:b7:35:fa:91:b8:cb:cc:
71:c6:6e:23:69:40:25:27:6f:b5:ad:58:0c:07:2e:0a:26:c2:
a6:81:9c:40:8d:c3:08:e7:ce:85:e3:0a:c6:71:58:fa:a1:93:
8a:2a:4c:d5:d3:4a:2f:76:09:53:23:bd:08:66:98:00:ec:1c:
0f:ea:c1:1e:35:66:f9:13:2d:a4:a6:64:e5:ab:24:0a:41:36:
0b:b3:f4:86:4e:c0:48:0a:f8:fc:39:49:bb:ff:ba:04:af:c6:
f1:8e:82:7d:a7:05:2a:2c:c6:72:04:83:f4:8c:05:41:78:3b:
52:d0:96:7b:8e:47:a8:6c:47:16:78:71:ba:77:d7:ba:b1:da:
6c:d5:57:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:56 2026 by rpki-client