Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
File: gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json)
Hash identifier: pNlY1UoQhcIS+F9NXZ6qjtPOIcHJpgY48JTORLId468=
Subject key identifier: B6:DF:1C:4F:D1:E3:BD:CA:95:BF:CF:DE:55:A9:C2:89:28:B6:B1:67
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial: 019D2997765D7FD210535A0C016CCE7DF2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
Manifest number: 13AB
Signing time: Thu 26 Mar 2026 10:01:25 +0000
Manifest this update: Thu 26 Mar 2026 10:01:25 +0000
Manifest next update: Fri 27 Mar 2026 10:01:25 +0000
Files and hashes: 1: 3CKrmM_5W9qGNwDPT707OalHLD8.roa (hash: 2NaLVNwjCsDKmG9seV4wmBk1JF4GhywwWN0SoFKjTJk=)
2: 8QowToFWOkypHOOmOlay9H9m3cI.roa (hash: FEurkgF3+aXJgB8qUw5KyF+e2MK/WZfbCLqpt4IVc9o=)
3: FV-pMv8EGTaMa6CCbtYT2e9XnxQ.roa (hash: oCIb8FIypKIz4AB8jOeyTjsmMStjtBdK3bvDo7a5vjg=)
4: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: goSDniB+xrzzbhWNXQ8xcidF6YIy5CQhlHyiD6oRMLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:76:5d:7f:d2:10:53:5a:0c:01:6c:ce:7d:f2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Validity
Not Before: Mar 26 10:01:25 2026 GMT
Not After : Mar 27 10:01:25 2026 GMT
Subject: CN=b6df1c4fd1e3bdca95bfcfde55a9c28928b6b167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:cf:fe:44:29:a7:16:58:fd:4c:3e:ff:fc:
05:e2:2a:4b:53:8f:3a:ca:b2:dd:1e:04:ae:aa:49:
da:fb:30:82:f8:76:5f:b5:91:7f:c7:95:28:bd:25:
df:1f:03:db:35:1f:d8:76:98:40:dd:eb:8b:95:a3:
f5:2e:52:fc:a8:3b:d0:70:a0:fa:14:7c:2e:86:50:
dd:46:b8:1b:0c:a5:8d:1f:51:33:1f:00:d3:92:de:
d2:7c:ce:a5:51:0a:1d:ad:28:dc:ce:49:3a:80:ae:
0b:01:e2:a6:e5:1a:f4:be:af:8b:df:07:b8:ca:34:
d0:e9:0b:77:6b:cf:64:75:2e:63:c8:d1:99:a9:02:
c6:59:42:b1:21:21:b2:3d:1d:b6:8f:6a:63:14:14:
fa:e0:98:b9:a8:ec:a2:48:81:bc:12:5a:24:e0:cb:
fc:ab:25:5e:88:40:32:45:ec:9f:78:f8:cb:c6:18:
ae:0b:f7:72:7e:ee:88:a3:ba:2a:2d:81:83:6a:f2:
6e:24:fb:06:32:ca:9c:b5:39:81:17:d7:e7:96:b7:
22:37:d5:75:73:b1:95:67:57:5b:d3:72:f8:0c:15:
35:5d:a1:88:19:8b:f2:e4:38:fd:01:8f:f9:a4:b5:
b7:d2:e5:96:a5:e1:55:90:9a:98:c5:1e:00:be:47:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DF:1C:4F:D1:E3:BD:CA:95:BF:CF:DE:55:A9:C2:89:28:B6:B1:67
X509v3 Authority Key Identifier:
keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:cd:fe:55:46:47:bc:0f:3d:24:cf:c0:52:57:13:63:0b:45:
9b:2b:40:c9:f8:10:3a:94:23:e4:49:f0:35:a7:fd:26:29:af:
a1:cc:70:d1:79:f6:4b:83:f1:b3:33:52:40:e0:0b:57:f0:2c:
1d:cb:7f:99:1f:f2:cf:92:ad:14:bf:37:58:1a:c7:3a:40:fa:
3f:0d:f0:22:8f:3b:6e:24:c3:f5:c0:70:e3:2f:33:29:13:8d:
c0:6b:13:3c:25:86:e3:a2:c3:d5:d0:12:d4:07:90:d6:11:db:
39:03:f3:8c:7f:41:09:dc:55:98:9d:45:bc:39:06:9e:ae:6c:
13:a0:75:8b:68:b0:ee:72:e1:d1:ac:3a:ac:d4:92:05:d5:bf:
58:66:fe:35:2d:f7:99:b1:85:67:73:87:23:f9:fe:ee:30:f2:
62:50:61:ce:d9:39:bb:8a:25:0e:70:46:36:5c:a1:63:db:2f:
01:12:12:f4:85:24:aa:45:cf:15:24:fd:1c:41:e0:d6:b3:5a:
e7:f7:77:c9:fb:c7:14:16:72:b1:d0:f5:80:3f:cd:2a:98:82:
fe:13:d3:95:a6:c3:0e:46:17:28:c5:6c:5c:8a:0e:19:11:a2:
22:c0:5b:fc:c9:55:88:1d:26:00:58:24:6b:0b:a9:15:1e:d0:
73:2b:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:43 2026 by rpki-client