Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier: HGfuKqZ227CdIv7YAHoBed0F85W3Aypgz9yNVdTgnXA=
Subject key identifier: CA:7E:EC:63:41:44:50:E5:45:84:BA:DF:0D:28:1A:EB:30:A9:0A:E1
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 019D28BB7661B0A41FAF18B3A6F7A1C4DE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 06:01:07 +0000
Manifest this update: Thu 26 Mar 2026 06:01:07 +0000
Manifest next update: Fri 27 Mar 2026 06:01:07 +0000
Files and hashes: 1: 8jxEfSsMBe-K4VvTnO-OwvOLMBM.roa (hash: 3hU9n5i+lk1nxy24FsPYr0quzMoUlf0Ht4DETZ7ST+s=)
2: TLlV6jW863bNfhyrt15RgS7DF4k.roa (hash: kGMIhvDQxFzFfEL8ihPcdM+a2HFqV1ObKxrxWA65PvA=)
3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: DIX0tAsOrk66F4zBi0OAlUk7uWnI9lwsSiWVrwlKIl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:76:61:b0:a4:1f:af:18:b3:a6:f7:a1:c4:de:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Mar 26 06:01:07 2026 GMT
Not After : Mar 27 06:01:07 2026 GMT
Subject: CN=ca7eec63414450e54584badf0d281aeb30a90ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:1e:35:15:78:6a:9b:5d:7f:7f:a0:b0:d4:
e5:21:49:f9:81:10:7a:54:8e:59:b3:24:fa:ec:71:
ff:ef:24:67:0b:8a:65:7f:84:e0:03:8e:44:07:cb:
76:27:e0:01:90:7e:09:65:22:41:e7:a8:9f:8d:ad:
35:54:73:0a:12:3f:86:4e:13:62:c5:71:15:93:17:
38:b0:82:28:23:dd:13:53:a2:46:e6:10:f9:8d:a0:
67:92:be:58:6a:33:0d:3c:31:3b:6e:94:39:82:34:
b0:e3:c7:12:f8:b3:01:5c:a2:73:7b:ce:15:c1:f2:
01:61:50:19:43:ea:04:d1:df:77:d2:2a:da:a2:8c:
bb:56:87:c6:13:cb:12:b3:ce:70:71:a5:bf:76:fe:
dc:e6:6b:eb:af:b4:cd:85:50:89:b0:a8:cd:e0:f5:
eb:76:9f:3d:89:fe:0c:52:99:60:44:4d:e6:b4:de:
1c:b2:fc:66:77:c1:4f:ec:5e:ee:31:fd:65:b2:45:
21:99:e3:1e:d4:fe:82:4f:08:63:89:bb:61:7d:d1:
82:35:4d:1f:ab:2b:cd:14:f6:32:a7:c7:10:02:a8:
2c:8c:b6:73:9d:fc:7c:8a:b5:5e:8e:b3:2a:5f:ee:
4a:42:9c:f6:69:8d:9a:bc:28:cb:53:12:70:7c:a2:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:EC:63:41:44:50:E5:45:84:BA:DF:0D:28:1A:EB:30:A9:0A:E1
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:27:18:2d:93:15:33:20:eb:61:cb:2b:2a:30:69:ba:4e:46:
00:42:31:82:59:a5:81:af:e4:87:9e:81:b4:30:49:fe:a7:a3:
61:22:1e:0d:7c:67:3a:16:29:f5:0b:f5:ac:56:f0:fc:6b:e8:
96:c6:3b:25:ef:1e:22:b3:10:ab:fb:ae:4c:c3:a6:5d:6e:66:
d9:c0:8d:26:80:da:be:6d:20:1a:8e:6a:c4:cb:d1:a8:db:bd:
ac:51:ac:31:e4:06:48:b5:04:b5:95:84:db:5c:cd:c6:12:e6:
f8:69:9b:cf:2e:27:0b:b4:11:87:ed:6c:f3:23:e6:99:1f:0b:
53:48:a1:24:b2:3e:36:39:74:a1:62:ef:58:aa:d9:3b:51:fc:
38:14:a3:84:d2:fe:f7:93:f6:9f:f8:dc:af:cf:3b:be:65:0f:
a8:2b:4b:0a:c0:e5:99:92:69:0e:af:bb:c6:88:2a:72:46:99:
8c:2c:a1:91:6a:99:43:47:bc:76:2d:c1:25:1c:3d:fc:37:36:
3c:27:d3:66:ec:56:63:0c:3c:8a:b9:08:84:30:7d:10:5f:bd:
fa:31:4d:1b:46:ca:b5:93:e1:19:df:39:a9:94:5a:f3:23:c9:
e8:89:58:2f:82:f6:27:7b:c4:05:64:22:39:66:46:3f:d1:6c:
d2:05:9f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:29 2026 by rpki-client