Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: d0JCyQ2Kat5sQ5dbmJusq8fx2EqKLWvUGll0J9c3p5I=
Subject key identifier: B5:47:A5:B0:F5:A2:DE:9E:B8:42:22:AD:FE:22:49:1F:88:A4:A5:7E
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019D26CCBE895BF20658555AEC2D715BB926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0C43
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: 0Ui2ANV3MvLrakuOnJo6z1kakL9ZARHrGD30au532O0=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:be:89:5b:f2:06:58:55:5a:ec:2d:71:5b:b9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=b547a5b0f5a2de9eb84222adfe22491f88a4a57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:9d:79:64:ae:51:fb:91:e7:63:10:d6:4e:
e7:c7:34:ea:9c:1a:43:2c:43:2f:8b:6e:dc:c2:bf:
eb:a1:45:46:bc:9a:21:d1:11:f2:cc:c5:ff:83:ce:
6b:dd:60:f8:64:18:53:e5:13:76:93:b1:69:e6:76:
7e:4a:91:7f:b3:b3:05:13:fb:86:74:56:eb:32:50:
68:16:cb:90:35:4a:3d:94:88:ec:49:aa:b5:f2:59:
02:41:ec:67:89:17:3f:2e:03:1a:b2:fb:5d:d0:68:
06:7c:9e:db:6c:85:1e:32:1e:fe:5d:45:db:1d:67:
54:34:b4:0b:c2:4c:85:70:70:91:20:df:54:d0:d8:
25:b0:78:27:2d:f2:6a:3a:1e:e4:03:84:a1:15:e1:
75:26:38:23:3b:ef:ed:51:8c:bf:85:aa:e5:58:3f:
06:ae:c5:02:58:25:0b:84:7a:c6:21:e1:d8:b4:e8:
39:a4:c0:44:2f:dc:0b:60:75:8a:1f:53:cd:af:a3:
48:19:43:4d:8f:80:2f:2e:dd:de:16:42:9a:7d:96:
51:3c:74:4e:6d:a3:ee:b5:c4:61:9f:4c:d8:21:10:
a5:12:6e:99:72:8c:50:aa:0c:57:c2:9e:41:76:d8:
61:24:e5:e8:0c:1a:ba:53:c1:68:49:75:50:88:27:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:47:A5:B0:F5:A2:DE:9E:B8:42:22:AD:FE:22:49:1F:88:A4:A5:7E
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:61:e7:e0:ff:1a:82:c8:ff:65:e6:d7:c2:37:47:9e:10:7e:
77:f5:cf:d0:37:ed:52:15:fa:1d:be:27:f4:52:64:82:7f:fd:
e7:28:f0:11:e3:e7:38:0e:29:de:2a:e7:a7:6f:5d:f4:0f:e7:
f7:6b:4e:eb:88:a7:d9:9d:e2:94:a7:e4:b6:50:e7:41:91:9e:
df:de:38:97:5f:b1:c8:22:a4:ab:c0:9d:45:27:ce:57:67:91:
c6:b1:dc:a1:d7:a9:98:83:b2:c5:22:be:e4:5e:66:92:ec:73:
35:d7:8e:e0:bb:12:91:cb:4e:5b:96:3a:39:0b:45:36:ec:10:
fb:47:89:c8:6b:42:e3:c3:3a:de:e8:60:3e:bd:c0:2b:d6:71:
d0:cb:f5:51:74:a9:35:dc:3c:6d:3b:24:c3:3f:2a:e4:11:75:
2e:ac:29:17:e4:93:1c:2b:28:ef:a6:f7:ff:20:64:e8:eb:ab:
00:ee:25:37:7d:c1:7e:6d:82:a3:67:8c:01:c8:95:a3:b1:49:
57:5a:af:15:bb:f6:26:2e:56:aa:78:c8:45:30:b2:02:91:0f:
4f:14:e0:d5:1c:f6:b3:ad:ea:f5:3f:9f:2c:9c:e5:0b:58:08:
59:e0:b1:3b:a8:0f:7e:69:ef:af:95:22:f3:62:c7:05:34:3f:
e2:a7:53:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:40 2026 by rpki-client