Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
File: gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json)
Hash identifier: 8+1qV2cf6dGn0k/S09m1rZfX1MuSCISqHUG1FRIlsKA=
Subject key identifier: 2C:3F:58:87:DD:99:55:77:06:C6:C5:DC:AF:A3:8F:B7:CC:3F:9A:44
Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
Certificate issuer: /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Certificate serial: 019D265FE7AAA9F7F628661778162B54BBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
Manifest number: 1333
Signing time: Wed 25 Mar 2026 19:01:52 +0000
Manifest this update: Wed 25 Mar 2026 19:01:52 +0000
Manifest next update: Thu 26 Mar 2026 19:01:52 +0000
Files and hashes: 1: IOinLaLyJtRz6jnC6Xf3uO3dQyk.roa (hash: WrbsU2ay1yqb6dXswy4M2OA4fKF6n6NbHM9kyKcjgco=)
2: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: hjsvJsX0EYnwRGZtXYhsL+Qv+/6V4Jq1wF8FFV7a2PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:e7:aa:a9:f7:f6:28:66:17:78:16:2b:54:bb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Validity
Not Before: Mar 25 19:01:52 2026 GMT
Not After : Mar 26 19:01:52 2026 GMT
Subject: CN=2c3f5887dd99557706c6c5dcafa38fb7cc3f9a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:33:40:7c:6c:cb:74:00:00:73:8a:9f:0a:6b:
8b:80:1a:f3:1e:90:47:8f:c0:16:ce:3c:06:85:cd:
7c:fa:43:5d:e2:ee:98:6a:ab:9d:2a:26:68:c1:d9:
0c:a1:2c:ff:17:24:09:c6:a7:c0:eb:0c:20:2a:b6:
dc:81:02:eb:6b:8f:f2:2d:7b:09:a3:75:13:80:64:
37:d3:bc:e5:e7:cd:4c:9c:68:3d:b5:26:20:5c:32:
ee:78:5d:8a:66:0b:62:8f:9b:fd:48:d8:df:4a:ad:
98:0c:21:ee:ed:fd:e0:4d:d7:e9:7b:4f:b9:d5:08:
6e:6b:21:ba:39:d5:a7:7b:41:a1:ef:b4:9c:34:28:
d1:67:9d:87:0e:ad:0e:a3:b7:77:75:1b:78:c2:0b:
c2:4b:51:a0:3a:9d:1b:35:75:ff:eb:f8:53:cf:e5:
3e:db:31:eb:44:d9:00:81:86:85:b9:8d:c9:ae:9a:
8d:ef:ec:80:7b:42:e3:4d:65:01:3d:2a:62:a1:21:
67:3d:d8:90:1b:0e:48:c1:41:90:26:6c:95:57:05:
80:99:bd:97:8d:0a:c1:5e:3b:51:94:08:90:04:18:
7f:3d:c3:19:95:8c:c6:66:a8:da:9c:f5:de:8d:e7:
48:24:09:13:96:86:2a:29:d2:ac:a8:80:d8:68:6d:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3F:58:87:DD:99:55:77:06:C6:C5:DC:AF:A3:8F:B7:CC:3F:9A:44
X509v3 Authority Key Identifier:
keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:71:dc:48:1a:dd:a3:da:a5:e6:0f:ab:10:eb:cb:b0:9b:7c:
75:9c:b5:b2:de:de:5d:4b:f7:b8:29:08:15:be:8e:d0:ae:f7:
3b:34:0f:31:6e:59:62:b2:bc:5c:7d:e6:29:42:d3:79:0e:b0:
98:0e:e4:22:a3:1f:9e:91:9a:02:77:e4:82:d0:eb:b2:be:79:
cf:ae:7b:df:1f:07:ad:e3:f2:08:db:6a:60:8f:85:e1:3f:98:
da:57:3f:57:0a:4a:92:10:41:cc:16:cf:f9:20:d4:f2:76:34:
a0:66:10:74:da:a8:cd:18:94:7e:40:53:20:08:1c:f4:c2:91:
33:76:b1:60:2c:1c:c8:e7:59:bc:5c:fc:ed:53:f1:ce:7c:59:
15:aa:66:83:0d:b2:a0:36:bf:4a:d1:02:b3:9f:31:a2:c3:b6:
41:2f:6f:8b:df:dd:10:0c:4c:74:c0:03:a4:b3:32:82:3e:e3:
f8:00:96:6b:66:aa:1e:f6:0e:dc:f3:97:cf:62:be:34:6a:7c:
4d:a0:4a:1e:6c:70:6d:b0:1a:67:92:f7:20:13:cc:99:0f:99:
08:f0:49:ed:5c:1a:5f:fd:f3:3a:1f:fe:7a:f1:66:0a:f5:49:
54:84:ae:9d:fb:5d:67:67:4e:7a:88:58:5c:c3:62:8d:6f:a0:
11:c8:cb:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX+eqqff2KGYXeBYrVLvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMTZjY2IxYWM3N2M3YzAyYTRlZGU2MDZkZjFmN2VmOTcz
YTBiZjkwHhcNMjYwMzI1MTkwMTUyWhcNMjYwMzI2MTkwMTUyWjAzMTEwLwYDVQQD
EygyYzNmNTg4N2RkOTk1NTc3MDZjNmM1ZGNhZmEzOGZiN2NjM2Y5YTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TNAfGzLdAAAc4qfCmuLgBrzHpBH
j8AWzjwGhc18+kNd4u6YaqudKiZowdkMoSz/FyQJxqfA6wwgKrbcgQLra4/yLXsJ
o3UTgGQ307zl581MnGg9tSYgXDLueF2KZgtij5v9SNjfSq2YDCHu7f3gTdfpe0+5
1QhuayG6OdWne0Gh77ScNCjRZ52HDq0Oo7d3dRt4wgvCS1GgOp0bNXX/6/hTz+U+
2zHrRNkAgYaFuY3JrpqN7+yAe0LjTWUBPSpioSFnPdiQGw5IwUGQJmyVVwWAmb2X
jQrBXjtRlAiQBBh/PcMZlYzGZqjanPXejedIJAkTloYqKdKsqIDYaG1rNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCw/WIfdmVV3BsbF3K+jj7fMP5pEMB8GA1UdIwQY
MBaAFIAWzLGsd8fAKk7eYG3x9++XOgv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUt
YTk2NmFlODU2OTI2LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUtYTk2NmFlODU2OTI2
LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXHcSBrd
o9ql5g+rEOvLsJt8dZy1st7eXUv3uCkIFb6O0K73OzQPMW5ZYrK8XH3mKULTeQ6w
mA7kIqMfnpGaAnfkgtDrsr55z6573x8HrePyCNtqYI+F4T+Y2lc/VwpKkhBBzBbP
+SDU8nY0oGYQdNqozRiUfkBTIAgc9MKRM3axYCwcyOdZvFz87VPxznxZFapmgw2y
oDa/StECs58xosO2QS9vi9/dEAxMdMADpLMygj7j+ACWa2aqHvYO3POXz2K+NGp8
TaBKHmxwbbAaZ5L3IBPMmQ+ZCPBJ7VwaX/3zOh/+evFmCvVJVISunftdZ2dOeohY
XMNijW+gEcjLHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:13 2026 by rpki-client