Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
File: gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json)
Hash identifier: V9iqsAUE5JU4SiA/Nm03u7JO+GuBAPyaAEhYFGOlmMA=
Subject key identifier: 23:A1:97:93:FD:17:24:F1:5E:DB:32:EE:18:1D:69:40:71:E4:8A:70
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 019D2A3BD2E62306332ECE79494116FEBC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
Manifest number: 0F31
Signing time: Thu 26 Mar 2026 13:00:56 +0000
Manifest this update: Thu 26 Mar 2026 13:00:56 +0000
Manifest next update: Fri 27 Mar 2026 13:00:56 +0000
Files and hashes: 1: I7mi3E0an_XwM501IzP6XoSy2Wk.roa (hash: 7K4bWpncg05jTDQa+KG4OIN9CRZtSPgz2UdmkAKtJwc=)
2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: 3Hln+g5P0NYf8ANavdn2IsuJXmOGrisVcVeOYiYvoTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:d2:e6:23:06:33:2e:ce:79:49:41:16:fe:bc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: Mar 26 13:00:56 2026 GMT
Not After : Mar 27 13:00:56 2026 GMT
Subject: CN=23a19793fd1724f15edb32ee181d694071e48a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:00:0d:fc:e5:59:fb:20:83:0a:bc:9b:a8:
59:db:77:19:23:bb:af:dd:78:30:db:fc:f4:f2:71:
c0:ac:f9:ba:72:ad:7a:1d:00:f2:ac:1c:29:53:17:
9b:68:40:4c:4f:46:c6:a7:a9:6f:cf:e2:d3:c8:73:
b1:82:f7:bf:2b:88:e8:0f:eb:9a:1c:2e:2d:66:5e:
a7:ea:f2:65:93:bf:99:a2:9d:fd:1c:a6:d9:1d:32:
29:2e:ef:43:f4:cd:92:54:43:47:5d:55:45:e9:e4:
61:f7:d0:79:67:23:69:a3:8d:5b:e4:e4:50:85:1b:
23:37:6b:fc:2c:6f:5a:b1:14:58:84:59:99:bb:76:
41:55:3e:7c:c7:48:e0:55:ff:55:a8:55:12:49:38:
56:0e:c3:d8:8f:94:cc:aa:d4:cc:f8:31:4b:3e:d7:
7a:14:a9:ba:48:4d:6f:20:05:9b:c7:53:c9:fa:fa:
37:ca:ee:9f:0b:3c:ca:06:db:4a:54:07:c7:bb:c3:
63:f2:08:57:e2:d7:10:f9:8a:79:89:66:bc:db:6c:
5d:0c:11:85:c1:9f:a6:7c:14:3a:5a:04:0f:13:a8:
41:3c:97:d7:df:ba:26:b5:df:64:5f:3e:f3:86:14:
21:48:06:23:ae:b4:5b:c1:57:23:4e:17:5e:ef:92:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A1:97:93:FD:17:24:F1:5E:DB:32:EE:18:1D:69:40:71:E4:8A:70
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a9:74:4e:d3:b7:96:58:1c:74:a9:a5:dc:60:84:d3:a1:b6:
6e:44:ca:ab:b0:b1:4c:b1:8a:00:46:20:65:e2:ca:89:54:1b:
af:b0:a1:f3:be:8a:47:be:6e:01:fa:70:fb:fd:dd:e8:2f:59:
18:ec:d1:a6:86:10:1e:c7:21:35:59:67:63:a8:5a:86:1d:65:
76:68:5a:37:1c:3d:16:c2:86:e6:da:f7:34:61:95:ec:d4:da:
92:e1:47:6c:15:ba:4e:8c:6d:9e:02:a1:76:60:7d:1d:c2:6f:
85:c2:d3:c5:aa:e4:dd:f6:3b:1e:c8:92:b7:b8:36:da:b3:2f:
24:22:4f:25:8a:f6:3a:47:47:f0:82:e3:ca:7d:1b:0b:83:b2:
63:7f:7c:4b:0e:cb:5b:7b:07:5a:c2:31:eb:a1:86:07:44:af:
ad:6c:a7:d7:8b:ab:4d:eb:cd:36:93:14:f3:55:d7:84:55:81:
25:5b:8a:3a:97:79:8c:89:87:cb:e7:19:a9:9e:59:a9:94:e4:
55:d1:3e:47:bc:ed:fd:de:1e:6e:d9:57:11:61:32:0e:b7:31:
2c:63:29:e2:6e:44:ab:9b:34:2c:6f:aa:52:4b:e3:cf:6b:5b:
16:28:1c:e8:25:f8:9d:33:b8:0b:0a:0d:37:cc:84:47:f5:49:
89:39:2c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:13 2026 by rpki-client