Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
File: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft (raw, json)
Hash identifier: KRms4hR/YLhNg0G8LoIBrwu+3XWNJ9Ca6/lyA2XTOCI=
Subject key identifier: 89:8B:4E:7B:8A:C6:44:29:39:0F:55:9F:1E:D4:0A:81:B9:C2:90:DE
Authority key identifier: FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01
Certificate issuer: /CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
Certificate serial: 019D27E04611CF59AB2A7B24D5B00F27DD88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
Manifest number: 0971
Signing time: Thu 26 Mar 2026 02:01:42 +0000
Manifest this update: Thu 26 Mar 2026 02:01:42 +0000
Manifest next update: Fri 27 Mar 2026 02:01:42 +0000
Files and hashes: 1: BLXHNzBNP3Ceet9uKHyUlqgnahI.roa (hash: ZpEPGuE+ariRNJbj5HFfYxgKn5NI2itUvKloMA1gMz8=)
2: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl (hash: 5HqykI5/461bkfEZfjjEvwcQIM+hCNtoujSs74aEv/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:46:11:cf:59:ab:2a:7b:24:d5:b0:0f:27:dd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
Validity
Not Before: Mar 26 02:01:42 2026 GMT
Not After : Mar 27 02:01:42 2026 GMT
Subject: CN=898b4e7b8ac64429390f559f1ed40a81b9c290de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:8c:28:62:1b:f4:53:76:80:f6:92:cc:56:
60:b6:10:8e:40:c8:f9:a6:e9:5b:72:fb:96:aa:ed:
85:9e:de:74:29:04:22:35:d8:77:b7:7b:b6:1c:92:
1f:8b:43:68:da:fd:fd:1f:87:d5:b0:7c:10:87:b5:
08:d2:a1:b0:bc:b8:83:0b:7c:cc:b9:91:fd:80:00:
21:04:7a:0c:b2:d2:89:2b:db:06:84:63:36:83:72:
1b:5f:63:b9:e0:4f:10:21:72:f1:d5:01:de:4e:c1:
4e:b9:91:48:24:68:9c:5a:d0:e7:ab:e6:4d:96:dd:
f2:7a:7d:c4:48:d7:d0:26:13:ce:6b:af:0c:26:53:
08:35:50:6e:d4:22:8d:6d:0e:57:8b:9e:33:b2:78:
83:36:50:b7:14:c5:2c:0b:68:fe:b2:e0:a0:87:05:
6d:4d:0d:2c:c5:9f:f8:d1:cd:5c:76:bb:5f:6a:33:
7b:ad:68:b0:49:ba:5f:49:be:39:40:9c:4c:8b:c0:
36:3a:96:db:c3:f1:91:90:46:5d:fb:68:af:b1:2d:
d7:a7:ec:df:30:4c:05:cc:f0:52:e4:70:5f:79:f8:
d2:fa:81:0c:35:2b:48:be:46:c9:fc:4f:f5:f6:13:
cd:c9:02:f5:ca:10:02:4c:c4:33:4e:8e:a6:0d:59:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8B:4E:7B:8A:C6:44:29:39:0F:55:9F:1E:D4:0A:81:B9:C2:90:DE
X509v3 Authority Key Identifier:
keyid:FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c4:91:4d:fb:d5:8a:f4:53:4c:6c:62:08:10:5b:5c:ae:00:
5f:61:a7:83:9c:ac:90:2d:6e:97:c5:65:aa:ca:25:8b:83:de:
53:ec:bc:00:d4:1e:f0:8e:a8:e6:cd:62:a6:46:d8:1e:2d:d9:
d7:44:fe:a6:03:fb:db:78:88:d5:c7:0e:2a:17:c9:46:9d:41:
14:99:88:90:f3:47:c3:04:fb:61:36:91:8c:53:0e:f5:ce:d3:
6e:59:03:3d:38:e7:5c:6f:4a:d2:46:18:40:df:63:a6:db:a6:
c8:c1:8e:96:e7:21:74:ff:bf:e1:b3:fc:6b:54:a9:66:cb:a5:
4a:6a:bb:c4:6f:2e:d5:3f:50:8a:35:bc:b6:b1:a6:7c:bb:32:
ed:a8:48:10:69:cf:bf:99:e9:98:fa:db:bd:37:08:5b:0b:50:
40:96:e7:a2:35:73:dd:41:fd:ab:99:d6:51:08:8b:bc:6d:1c:
cf:5e:12:c0:8f:ae:65:d7:f9:e1:4a:e6:a3:6b:65:ed:c9:ab:
e3:09:cc:fa:78:56:fd:43:c5:7a:aa:2c:52:fc:89:d5:31:43:
07:6c:27:a8:81:d4:09:3a:c6:a9:0d:3e:75:81:b9:0e:1d:05:
f4:b3:57:7b:9a:cb:e2:ae:6a:6d:60:fb:9c:4b:ff:73:df:3a:
d4:6c:c5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:18 2026 by rpki-client