Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier: Pbrfy/r25sa+2nGy2/1cKZytOGFsmzoT7FGE0HhWvig=
Subject key identifier: 18:87:8F:0A:BA:3C:59:99:6A:A2:BD:29:76:63:C2:87:E5:C0:87:21
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial: 019D2A051874E2241004292EDEACD01601EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 12:01:10 +0000
Manifest this update: Thu 26 Mar 2026 12:01:10 +0000
Manifest next update: Fri 27 Mar 2026 12:01:10 +0000
Files and hashes: 1: _znAllcUhDUk5vaonzcpuUajgfo.roa (hash: qYtkv42oHHUxBFtOZdOaS3DV/fsi8LFPD+D7XK8B1uc=)
2: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: zqLearmzZ4jJ1a2Vzp2tIjqRI952nzKS0r8BOjoq+bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:18:74:e2:24:10:04:29:2e:de:ac:d0:16:01:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
Validity
Not Before: Mar 26 12:01:10 2026 GMT
Not After : Mar 27 12:01:10 2026 GMT
Subject: CN=18878f0aba3c59996aa2bd297663c287e5c08721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:1b:56:c4:d5:1e:1f:de:5d:ce:53:82:8d:
de:a6:5a:16:0f:12:da:86:7c:01:55:ae:50:3a:80:
d2:1a:c5:c2:9c:7b:ec:9f:b1:17:d9:ce:81:bc:db:
db:b8:c5:4a:a6:b5:98:47:9f:ed:70:a0:12:28:e0:
08:5c:12:f5:ba:dd:0f:ba:75:67:98:33:f5:96:e3:
6f:0d:6b:d6:5a:2c:91:34:3f:be:5a:ef:c3:73:bc:
87:ec:8f:cb:6e:1f:3f:ee:83:eb:67:8c:14:e5:e2:
e2:e2:5c:e3:0d:d4:a1:23:01:ad:81:3b:bd:23:b8:
2e:7b:e6:5e:ea:e1:6c:b8:d7:97:99:c0:00:90:e3:
a9:13:f2:c2:c3:04:5c:59:d2:99:5f:51:47:fa:b0:
5c:4d:02:18:74:ad:7e:e3:a2:ba:26:16:d5:24:79:
de:78:fd:0f:c7:e2:3b:46:02:4a:75:bb:12:4f:5f:
72:37:dc:31:2b:e6:81:74:b5:3e:19:a4:8d:8c:7c:
67:ee:5f:4c:dc:67:e6:1c:4a:dd:f4:16:c0:08:91:
36:dd:b8:88:ec:9c:bb:bb:40:0f:78:be:a7:e8:34:
30:6e:69:e6:ef:c9:46:fe:df:17:78:e3:88:73:ad:
d7:ea:52:8c:1e:30:a0:03:69:db:ff:1a:d2:ec:ee:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:87:8F:0A:BA:3C:59:99:6A:A2:BD:29:76:63:C2:87:E5:C0:87:21
X509v3 Authority Key Identifier:
keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:79:7d:5e:f6:87:85:0d:37:95:fe:b4:34:c5:ac:83:8a:fe:
e8:4f:a1:c4:cb:dd:92:d8:4c:73:82:f4:22:b0:00:7e:1d:30:
3d:55:a5:19:a4:f0:d8:b1:a2:8d:d6:c2:c8:1f:27:bd:12:81:
b6:0b:27:16:80:4b:c4:b7:4e:35:9a:5e:17:e3:af:2b:23:b0:
1c:9f:5e:20:34:8a:98:6a:bf:54:26:76:84:4b:2e:9b:82:82:
0a:c9:e2:85:0b:1e:9c:6d:3b:1e:9c:35:05:45:d9:4c:95:30:
e6:c5:0e:35:08:4c:00:d2:b0:c1:d5:a0:fd:db:56:98:99:0f:
9e:81:fc:65:f2:96:d4:4b:90:9b:13:f1:38:a7:1b:bb:ba:29:
b4:00:95:c6:bf:3a:c6:de:30:af:a1:d2:9f:22:ba:be:81:7d:
c5:8b:e0:78:a8:51:b1:e0:ed:b3:19:80:a7:1d:f8:7e:43:ed:
2f:cd:6f:dc:30:5d:4d:e5:26:f6:ca:f5:43:36:06:80:95:a5:
5d:d1:99:32:e2:a9:78:19:72:36:c9:de:13:c8:ac:c6:ea:3b:
fb:85:77:6f:82:f0:72:b3:69:13:c7:70:2e:57:13:cc:90:6d:
08:fb:26:01:8f:45:c1:45:c0:0e:45:52:c9:39:1e:ee:0b:6a:
0e:4f:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:44:22 2026 by rpki-client