Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: zcGXHOX4m5QMFe/CsMELhpUUqfhi8aKSOIFgHt4e65U=
Subject key identifier: 15:E3:4D:2F:B6:BE:1F:02:77:23:D7:6D:B4:97:EC:CD:4E:B4:B5:39
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 019D27E00D6A46754BF2B7CBDEE36BB05E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0E0C
Signing time: Thu 26 Mar 2026 02:01:27 +0000
Manifest this update: Thu 26 Mar 2026 02:01:27 +0000
Manifest next update: Fri 27 Mar 2026 02:01:27 +0000
Files and hashes: 1: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: jlxQ2XH/84/QgcD88tbBt4VMOMVaY1ZLCZhoElzOZmA=)
2: ioSKJKkF_4HM_F6u6RJnkLY1uWU.roa (hash: WbXNH1FTymiYyoPgw712is108gr5GM8N98thfxq0yjg=)
3: s7B9p4vTJAow4sBYhbnToQXwFKo.roa (hash: nHDCoe/MNgEdbVoOhEHnJFTP5BTnyS6pKwNLw3+w7aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:0d:6a:46:75:4b:f2:b7:cb:de:e3:6b:b0:5e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Mar 26 02:01:27 2026 GMT
Not After : Mar 27 02:01:27 2026 GMT
Subject: CN=15e34d2fb6be1f027723d76db497eccd4eb4b539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:88:54:b4:78:0b:a7:cf:7a:a0:3a:cf:83:
7d:ef:34:d6:65:5d:f1:b8:a4:c8:e5:85:34:2a:05:
c3:c9:18:b0:b1:39:33:11:d5:b0:26:be:35:a2:02:
56:e3:eb:1a:e1:28:58:d1:ce:06:5a:e4:3d:9b:51:
80:77:41:57:66:d1:79:aa:ac:09:af:15:a7:13:11:
71:dc:b7:89:aa:02:3d:2e:2b:d3:29:c3:e9:94:34:
ef:f4:e9:54:e3:d9:e5:a7:9e:c4:fc:42:c1:4e:de:
51:2c:f1:b9:44:8d:5e:a7:2c:34:b9:fa:0d:3e:50:
31:25:02:05:45:a6:d7:98:47:d9:9c:0b:9a:b5:31:
43:2f:07:ac:f3:64:10:92:df:ff:36:43:f8:6c:d2:
f8:4f:b2:68:3a:e8:78:ec:47:79:48:b8:31:e4:66:
22:81:0d:72:f1:7c:54:72:3f:55:83:69:89:12:96:
49:13:5a:aa:f9:43:68:55:bc:15:81:10:5b:3d:58:
2e:2c:5b:b1:a2:6b:da:7b:e5:e8:4d:7a:4e:bc:c5:
6b:03:d5:f2:ce:43:53:2f:4c:78:9d:14:30:d7:2a:
05:bb:55:7c:4e:80:fb:03:23:ef:e8:d5:3d:9a:fa:
2f:bf:9b:78:1e:45:d4:3d:ee:57:82:fb:03:40:5a:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E3:4D:2F:B6:BE:1F:02:77:23:D7:6D:B4:97:EC:CD:4E:B4:B5:39
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b4:5a:cf:03:b1:e1:47:56:18:7b:37:12:e6:dd:1b:83:59:
e3:1f:79:5f:9e:97:55:80:a7:f5:39:13:b4:66:67:cf:c9:5b:
89:94:71:30:dd:f1:3e:ee:f3:0d:6d:ed:8d:80:be:77:e7:91:
5e:96:49:a4:07:b7:f0:a5:95:c0:51:62:16:64:20:f0:4d:5d:
26:07:1c:78:9e:10:93:e5:92:c2:6d:af:dd:8e:75:dc:d1:71:
a0:9f:20:a3:69:84:ea:1c:46:7c:d8:bc:77:37:f8:3c:d6:5a:
ed:11:d1:88:55:67:12:d6:43:50:00:fd:c6:21:ab:f7:b8:16:
45:7c:b8:18:66:60:9f:73:64:32:20:4c:f9:73:be:57:73:bf:
57:8e:e0:6d:a5:e2:7c:36:34:fc:04:35:8b:36:6e:e2:ae:3c:
5a:5b:c2:c3:09:a2:f5:9f:91:d1:7c:ff:7d:f5:02:12:30:c9:
cc:c7:15:5b:fd:d9:44:fb:42:bb:8a:98:80:ea:12:5d:e4:98:
33:ee:34:e8:07:b6:53:86:9b:2b:e8:25:b9:83:b5:37:b6:16:
92:20:b5:4b:6a:18:f9:54:fd:59:fc:06:e2:34:2e:c9:4f:c0:
c9:80:df:d2:94:f4:39:b7:f4:7b:8e:de:c5:6d:2c:bf:12:30:
5f:03:14:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:52 2026 by rpki-client