Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json)
Hash identifier: z2lVDOGUPHXWl3FEbVmT8wPgVOiHTgcFzNPxl9C6kfQ=
Subject key identifier: E2:0F:DF:21:5B:65:A5:0D:18:9E:F6:7E:0D:EE:68:E4:6F:44:DE:D1
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial: 019D3AC13027822F7ACB9A1E754268722911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
Manifest number: 0C04
Signing time: Sun 29 Mar 2026 18:00:32 +0000
Manifest this update: Sun 29 Mar 2026 18:00:32 +0000
Manifest next update: Mon 30 Mar 2026 18:00:32 +0000
Files and hashes: 1: IVL7dLrg6wGDU1LsfYsBBP5fLww.roa (hash: nXXz2gE0BqsxA3+AlASgnT6agymsn4mqf9G776nMdI8=)
2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: HIVr/FWYJ7frXDbSGd15LUYXEnaK10t+Cya5jJdo4G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:30:27:82:2f:7a:cb:9a:1e:75:42:68:72:29:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Validity
Not Before: Mar 29 18:00:32 2026 GMT
Not After : Mar 30 18:00:32 2026 GMT
Subject: CN=e20fdf215b65a50d189ef67e0dee68e46f44ded1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:c5:f7:1b:74:f1:68:3c:a1:47:71:68:8b:
74:4d:6f:4c:7c:63:b9:cd:f4:8b:5a:89:a3:76:48:
cb:c4:ae:ec:e3:f8:09:0e:8f:d0:ef:3b:10:e8:36:
38:d5:a7:29:36:61:e2:50:5e:cd:59:d4:7d:24:e9:
e0:d5:c2:d1:a6:18:04:e3:aa:03:ee:0c:78:d9:fd:
50:d9:d8:55:8c:0a:d0:38:66:04:f8:c7:5b:a4:97:
3e:97:99:20:56:ef:87:13:ed:86:2b:aa:9f:dd:4d:
ad:79:03:84:8d:8a:fb:a5:c5:92:dd:f6:03:4b:71:
83:39:5c:49:74:14:f5:a4:0f:02:5e:6e:e3:19:0c:
40:c4:3e:ab:c3:51:87:43:10:65:7c:dc:ea:f8:8a:
8e:3c:ab:3c:1c:e2:bd:24:b1:14:16:b2:6f:c6:9a:
28:ea:a1:b8:81:7b:c7:5c:10:d0:c9:1e:e6:20:bf:
a6:b3:ae:d4:37:69:ed:28:4f:c2:47:b2:fb:2e:29:
ab:b5:3b:b2:c1:d8:b1:7c:01:73:29:c1:cb:7c:22:
01:25:b9:23:33:46:b9:c6:d5:d4:d6:43:9f:52:e9:
b6:58:2f:5f:91:c0:b7:3a:a5:31:bb:3a:41:18:7b:
a7:53:58:d3:aa:5d:fe:22:5f:e3:91:05:11:d4:2d:
cf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0F:DF:21:5B:65:A5:0D:18:9E:F6:7E:0D:EE:68:E4:6F:44:DE:D1
X509v3 Authority Key Identifier:
keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b1:a0:08:1d:4e:50:e8:e2:c9:a5:78:53:46:41:b3:0a:35:
34:ec:a4:40:06:5c:63:50:50:f2:ea:bc:f2:38:a1:95:f8:c0:
b4:94:00:d7:40:97:19:8b:34:57:18:5d:00:56:dc:f8:d5:4e:
5e:c5:e9:96:d8:aa:37:aa:58:5d:55:ca:78:d0:2e:83:c8:6f:
10:6f:32:68:13:45:e4:e6:20:72:7d:90:d6:1b:a4:3d:76:05:
19:fb:7f:0c:be:43:5d:2c:28:be:23:15:98:99:0e:c6:2b:be:
c3:be:a4:08:ff:7b:06:25:43:a5:1e:68:47:dc:94:d3:d8:22:
62:1e:b0:a0:51:25:de:43:7f:6f:aa:c2:2e:56:5c:18:c2:af:
fa:e1:d6:ed:ec:6a:12:31:60:42:26:19:63:40:2c:ce:66:7b:
5a:5e:a8:a1:f4:86:bc:22:80:e7:ee:db:a0:a2:76:e5:b9:be:
b9:c2:31:00:3b:27:c2:e4:39:2e:5f:ec:ab:0e:df:61:01:0a:
6d:05:b5:0d:78:2a:5b:46:2e:ff:20:51:1c:3b:90:35:4c:ed:
c4:07:9b:9e:35:97:d9:55:db:28:a2:a2:b9:e2:06:3f:83:f3:
3d:c8:97:d8:5f:cb:d5:c8:ab:64:77:21:48:c8:d5:28:e0:26:
b0:3f:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:06:12 2026 by rpki-client