Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
File: gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft (raw, json)
Hash identifier: 06pZ+eHxmQF1dH0M1FGKGwoIV7NT6RyPz9lV/EeLAX4=
Subject key identifier: 11:D0:08:4E:E4:D8:22:4A:E6:E6:27:95:C4:BC:69:0B:0A:9F:4B:FB
Authority key identifier: 80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
Certificate issuer: /CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Certificate serial: 019D26CD6045125E26806B97CC66B34FB982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
Manifest number: 0F97
Signing time: Wed 25 Mar 2026 21:01:26 +0000
Manifest this update: Wed 25 Mar 2026 21:01:26 +0000
Manifest next update: Thu 26 Mar 2026 21:01:26 +0000
Files and hashes: 1: BP2iTGyVFjoJIRdw7NDIH2tQQA8.roa (hash: P0fFfmYNK2It6Tl9zJcGnv6bBKn+rvutapJMqLPRBXA=)
2: gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl (hash: GjyneNsLZqLkNquT+r2J8s9puEV49b19UuuOxjCL2cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:60:45:12:5e:26:80:6b:97:cc:66:b3:4f:b9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Validity
Not Before: Mar 25 21:01:26 2026 GMT
Not After : Mar 26 21:01:26 2026 GMT
Subject: CN=11d0084ee4d8224ae6e62795c4bc690b0a9f4bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:12:84:db:ad:79:ec:51:a2:08:14:fd:a6:
28:11:51:7f:9a:33:f6:ce:fc:98:95:d0:62:da:af:
08:45:df:82:02:d2:84:d3:5d:40:07:94:a4:85:4d:
ed:29:01:b3:8d:9a:18:88:de:31:54:9f:b6:76:0c:
7f:18:a8:62:a3:36:ee:4b:5d:65:0d:67:7d:81:ac:
01:04:92:20:f5:5d:fa:3d:74:d0:33:73:c4:ec:03:
24:b3:a9:ea:81:b8:02:07:b3:21:73:05:cd:91:aa:
87:21:99:30:b6:36:c4:5f:9d:ed:fb:a8:bd:8a:c5:
25:28:93:bb:5d:f2:15:3b:40:53:ab:71:42:1b:76:
f6:5c:4a:58:3d:bf:df:1b:a6:63:47:e4:b7:ad:2f:
f5:5e:6e:7b:82:2a:03:d6:50:2e:c7:6f:68:9b:a3:
11:84:42:0d:d6:bf:2c:02:a0:76:0a:f8:ef:dc:72:
18:38:1a:c3:9e:be:7a:4e:94:eb:00:42:35:45:c6:
b9:52:b0:86:cd:16:49:39:2f:96:6f:74:8a:8b:be:
2e:20:4d:79:e8:3e:13:0d:ff:72:7f:4a:c4:d4:1a:
78:34:ad:e0:28:70:7f:c4:7e:07:49:f5:b9:70:e3:
8c:fd:96:1f:cc:99:4d:94:4f:55:e7:b7:67:a2:0b:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:08:4E:E4:D8:22:4A:E6:E6:27:95:C4:BC:69:0B:0A:9F:4B:FB
X509v3 Authority Key Identifier:
keyid:80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a3:dc:e9:96:65:76:01:5f:60:ea:94:fd:40:22:d3:b9:cf:
65:32:cd:93:28:21:67:84:8a:0f:27:26:c9:1c:be:3b:1c:35:
25:51:53:97:02:b3:de:03:92:5a:3c:9a:c7:38:0a:f3:4e:73:
08:be:ad:d1:31:75:bf:8f:a6:4a:ef:1f:08:37:e2:39:5b:fa:
f6:35:d2:de:77:f5:3d:24:8e:0b:cc:72:be:65:34:2d:41:96:
c4:d4:c9:55:7d:cf:3d:a6:76:a8:9b:3d:47:d2:38:06:a0:c7:
46:e1:f4:54:e7:00:4e:13:59:5e:2e:4b:c7:6a:34:d5:db:1f:
d6:88:ab:a9:0b:b3:eb:61:48:89:1e:05:f1:10:97:e0:ce:c5:
fd:05:c6:de:b0:c4:b5:7b:a0:2f:28:85:ad:33:ca:2a:93:e9:
02:b7:81:67:99:76:2d:69:9f:14:33:a6:d8:73:2d:79:f2:1a:
93:8c:79:5e:0d:2c:9b:00:4a:de:a7:40:c5:ef:b7:28:4b:96:
d1:a2:89:29:45:01:01:a1:19:f4:de:53:9f:13:db:a3:bc:93:
e9:54:3b:c2:6a:6c:32:f3:cd:c9:90:6f:a0:f9:92:74:d3:61:
f8:00:ab:03:84:ba:10:9d:c7:0d:09:8c:7c:9a:70:ab:e1:33:
30:5f:5d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:03 2026 by rpki-client