Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: b5dgpq8iHUiusTemGS5zOax6kVvIBsv/viS4j5sfShQ=
Subject key identifier: 92:8D:DF:B3:FB:F9:EF:F2:58:5D:B9:4F:AD:F2:CC:C2:C9:D3:6B:FB
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 019CE4B5F27B5EBD983A859669BFE6CCB469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 0285
Signing time: Fri 13 Mar 2026 01:00:55 +0000
Manifest this update: Fri 13 Mar 2026 01:00:55 +0000
Manifest next update: Sat 14 Mar 2026 01:00:55 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: UOTMAPxyld0R7d3Ny9REU970aCPmThZcAmtrjqvaIyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:f2:7b:5e:bd:98:3a:85:96:69:bf:e6:cc:b4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Mar 13 01:00:55 2026 GMT
Not After : Mar 14 01:00:55 2026 GMT
Subject: CN=928ddfb3fbf9eff2585db94fadf2ccc2c9d36bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:be:6b:03:d9:fc:7e:19:31:6b:6e:dc:77:
3b:c6:25:18:3e:b1:db:f9:e5:aa:5c:14:70:1b:92:
4f:8a:56:c0:2d:6d:38:2d:de:06:33:63:01:e0:8a:
d1:82:90:08:0f:04:9c:f0:02:82:1b:8f:14:2a:bb:
70:0c:42:ec:fd:f7:37:48:25:32:1e:6d:ea:50:72:
fc:8b:e6:a6:49:41:29:90:32:f1:8f:a0:d4:5b:23:
ce:85:52:65:8e:9e:1a:c7:7b:16:30:5f:48:ae:90:
ec:44:09:38:2c:39:b0:98:52:76:d9:d8:db:ed:b5:
6a:c3:2a:b1:83:14:3b:be:a4:07:c6:f5:fe:33:46:
6b:0d:9f:d8:02:1a:57:22:2b:0c:98:21:97:f9:c2:
85:67:39:ab:2e:c6:03:68:72:57:c1:e0:b7:cd:eb:
25:ea:d1:28:ed:5d:8d:26:a0:13:72:60:5a:24:df:
72:07:7e:e4:55:d2:61:12:4f:eb:eb:39:8e:20:3f:
57:22:e5:8b:8b:08:d2:42:82:26:9f:27:72:85:c3:
6e:b5:0d:ca:0b:b8:30:21:f5:56:fd:c6:2d:d2:39:
58:02:44:e4:12:4a:1f:be:c4:8e:13:5b:8c:5f:c8:
54:94:9c:c9:aa:df:23:d4:62:c6:ce:bf:f9:4f:25:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8D:DF:B3:FB:F9:EF:F2:58:5D:B9:4F:AD:F2:CC:C2:C9:D3:6B:FB
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:26:4a:a5:b4:b2:fe:13:9c:d8:ce:ad:99:1b:44:be:44:2b:
01:81:a4:9e:69:15:ea:df:88:16:5c:30:54:61:30:58:ac:a7:
95:0d:9a:2f:24:24:2f:a0:18:0c:01:ca:cd:d7:e4:ca:da:e1:
d5:8d:a7:cf:ce:5d:e1:de:b4:a0:a9:97:0f:80:5b:11:28:0e:
7a:91:76:5a:56:f2:8f:5c:c3:14:7d:3c:d6:3a:33:75:25:93:
d3:f3:bf:5e:88:ce:dc:07:c2:a3:ed:a8:0d:e4:12:a8:58:8d:
c8:92:80:8d:99:34:34:5e:bf:79:ad:a9:68:1b:e4:62:42:51:
b9:db:a3:a1:a0:3c:a5:05:62:1b:5b:3b:d0:9c:6e:f6:44:bf:
6d:75:31:78:af:1a:05:0b:4e:2d:d0:e4:3c:31:1f:1d:3e:6a:
2d:37:c1:b0:64:d3:8f:27:9b:e3:06:21:54:54:df:85:32:51:
47:bf:e6:ba:7e:cb:4b:49:86:59:98:34:a5:e4:bd:11:a2:39:
a2:fa:46:08:46:91:88:e2:f1:bc:93:98:98:de:cd:9b:70:7a:
b8:27:e7:95:37:81:26:1c:c9:bb:a0:77:d5:66:1a:24:19:4f:
72:ba:bb:56:f2:ec:bc:4d:cb:3d:ab:d7:98:d9:6f:14:85:2e:
df:1a:4b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:50:29 2026 by rpki-client