Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: Ms1TuXDShqcnTkdh59EeC6HcujIQZG90jRsy6SCgfAE=
Subject key identifier: BD:02:B0:75:F0:F5:21:DF:E6:0F:FB:24:1E:15:ED:B0:A9:62:45:8A
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 019D26CD847672D2E2748365D05BF91B4271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 1524
Signing time: Wed 25 Mar 2026 21:01:35 +0000
Manifest this update: Wed 25 Mar 2026 21:01:35 +0000
Manifest next update: Thu 26 Mar 2026 21:01:35 +0000
Files and hashes: 1: 1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa (hash: nATa+n5oWjMZXiwMho7tjE9Rx2x+4yb18TAu52HSqiY=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: ac0/7aCsFfJVan5QGUKKCUBkDX0boJjIU8j0l06N8ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:84:76:72:d2:e2:74:83:65:d0:5b:f9:1b:42:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Mar 25 21:01:35 2026 GMT
Not After : Mar 26 21:01:35 2026 GMT
Subject: CN=bd02b075f0f521dfe60ffb241e15edb0a962458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:70:4b:30:46:e1:bd:5c:bc:05:50:12:d7:
5d:c0:fe:11:f7:d6:29:15:5b:41:d1:57:d6:44:f8:
b1:5a:17:3c:56:4c:7a:37:9d:b1:b2:ab:cb:d8:55:
f9:62:f9:3a:e5:e3:6e:0e:84:94:fd:a7:25:d8:05:
bb:54:df:b2:5a:47:79:ae:f9:be:0e:be:af:44:c9:
a5:93:2f:c2:85:fc:7a:31:f4:bc:81:86:ee:14:b3:
27:37:85:71:84:36:ff:6a:ee:48:50:2f:da:0f:98:
fb:1e:f5:a4:4a:3a:56:9d:86:8d:b7:02:53:fb:f9:
9b:73:0b:7e:3c:d1:b3:11:69:08:f5:a9:1c:de:74:
72:4b:9e:16:29:0f:33:d8:be:8a:59:39:da:9d:7d:
65:53:8d:61:cb:67:2e:cf:53:5d:ff:5a:9e:d1:0a:
fa:0c:94:05:ed:6b:bb:05:06:2f:45:e6:a1:ff:20:
ec:9c:99:38:96:e3:ff:4d:b2:47:c9:8a:85:e3:47:
4d:7b:8d:68:da:b9:48:53:77:6a:3e:46:3e:1b:2b:
40:53:b2:52:37:16:b0:9d:13:fb:64:18:a2:7c:a1:
39:79:8c:c8:63:32:ac:dd:a1:39:ca:6b:08:03:3c:
99:2b:57:da:72:75:f2:33:14:02:cc:93:84:1f:12:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:02:B0:75:F0:F5:21:DF:E6:0F:FB:24:1E:15:ED:B0:A9:62:45:8A
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0e:7a:c5:88:d1:84:47:16:86:41:15:27:1c:de:87:39:b4:
4d:da:f8:9e:ce:5a:74:82:1a:6c:63:b0:78:cd:5c:be:c5:52:
d8:71:47:26:26:36:e1:69:91:e4:84:7f:14:4b:3f:4d:d2:11:
5f:36:0a:75:81:55:ba:1e:a9:b5:34:e0:34:33:74:fa:df:04:
87:09:5a:58:ba:02:ab:7c:bf:1b:6d:5b:96:46:ec:c6:e9:e9:
53:17:83:b7:73:a7:20:89:30:81:71:a2:5b:79:c4:a3:f3:52:
cc:6b:19:07:05:81:a4:84:9a:81:32:ce:c5:f7:27:8a:92:76:
7a:10:b9:b8:fe:e4:a7:d6:02:c4:88:4c:2f:67:64:7d:22:ff:
56:a3:42:f5:2e:18:39:55:3a:7c:37:f9:3f:23:1a:a4:07:db:
cc:cf:a3:51:42:a6:ac:9c:34:ce:4f:b3:22:e6:47:4b:1e:ec:
3e:b2:73:5a:56:5c:1c:ad:d3:0a:e3:0a:e8:31:3e:de:66:39:
08:1a:61:ef:9b:82:7f:bb:82:e7:fb:f7:3d:8a:4d:77:bc:d9:
a0:ed:0f:e3:7d:74:5e:9c:c4:ef:d8:a2:c0:e1:bd:48:80:93:
43:f5:4f:07:28:6e:08:5e:70:5e:c3:8e:5f:fe:76:29:ec:02:
14:17:58:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:14 2026 by rpki-client