Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier: f/VaR/w6G1FLsT+eHcFxbWKkq7hZAMzt1Lb6x4b2G1k=
Subject key identifier: BD:D7:8D:49:33:EC:F5:C8:03:75:73:9A:FF:EA:3B:AC:36:81:1E:07
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial: 019CD7D58476ECD308AEDF7DD3A9227A9ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number: 0402
Signing time: Tue 10 Mar 2026 13:00:20 +0000
Manifest this update: Tue 10 Mar 2026 13:00:20 +0000
Manifest next update: Wed 11 Mar 2026 13:00:20 +0000
Files and hashes: 1: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: 4y5+N7WDP9e3OwPVu7IhT8ghiOgFUEofq8De4dFW4+s=)
2: pJgLulMLIKvMMO7AdCTNd61W_Qo.roa (hash: d7x2/EMQahiRCVzVwOaCAyZfFY39+nEtyCz6GzOW0VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:d5:84:76:ec:d3:08:ae:df:7d:d3:a9:22:7a:9e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Validity
Not Before: Mar 10 13:00:20 2026 GMT
Not After : Mar 11 13:00:20 2026 GMT
Subject: CN=bdd78d4933ecf5c80375739affea3bac36811e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:60:7b:da:ab:16:92:1c:d5:cd:9b:b7:70:
00:18:b7:64:2d:ff:05:a0:7a:50:66:20:77:e4:bc:
7c:ec:55:92:a5:76:f0:f8:3c:9f:65:ca:fe:5c:2e:
08:ca:ad:46:f0:58:46:16:28:56:f1:55:0f:e0:87:
5c:ea:54:6d:3c:d9:0f:bc:82:04:ad:5e:b6:91:32:
23:09:37:ca:53:4e:67:f1:68:20:f5:f9:b6:57:be:
00:f2:e8:f1:d2:13:08:ea:e8:0b:ee:f9:fb:d5:a3:
f9:c0:3a:1c:33:65:8b:01:f5:28:b4:43:7c:f5:83:
db:77:83:5c:eb:af:90:c3:83:0b:62:a7:08:4a:c2:
c1:a4:7e:c8:6e:2d:e1:d2:1e:9e:cd:4d:e4:e7:f6:
3b:09:6e:93:9e:67:e1:b0:04:da:be:a7:fc:85:e6:
a9:b8:34:05:89:b4:be:10:8e:8e:d4:2d:b5:ff:af:
43:fc:cf:6a:65:16:4d:d9:0f:21:9e:7b:32:1e:fb:
f8:6c:f8:e4:18:ce:7f:50:8f:52:20:52:b8:af:2e:
b9:e2:7a:f1:28:ff:19:03:92:67:db:f4:35:f4:e4:
49:1a:5d:1d:fc:71:65:16:07:34:6e:11:49:e5:b2:
10:c8:d7:de:47:43:50:e4:a7:64:37:55:9c:d2:32:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D7:8D:49:33:EC:F5:C8:03:75:73:9A:FF:EA:3B:AC:36:81:1E:07
X509v3 Authority Key Identifier:
keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4d:dc:bd:e7:e7:30:cb:6a:1d:b7:0c:47:46:e8:99:03:43:
13:14:ce:52:2a:04:e1:9d:e7:2a:5b:c3:7f:5c:7d:d9:6e:81:
7e:f8:c4:05:d9:fc:c5:49:63:e4:ff:3d:68:c0:2d:d2:b3:cb:
19:42:a4:6d:69:71:67:5e:ee:d2:e3:5a:9d:df:a3:18:72:5a:
58:50:57:b8:47:f1:22:91:f9:3f:4e:74:09:ad:45:50:d3:86:
b5:23:37:a9:04:85:60:ec:01:74:96:1d:1a:9f:2c:b8:a1:3e:
9f:8e:a6:8c:ec:5d:4e:80:df:03:da:98:2a:41:02:a6:bb:71:
b5:62:82:2b:e2:19:a2:27:84:af:49:77:f9:c1:f7:a9:92:2f:
80:51:89:c4:12:34:16:72:ef:20:27:b7:57:5d:4f:d6:86:85:
9a:c2:ef:af:d4:2a:d4:75:39:d8:f5:a2:c8:4e:3f:ab:3e:57:
81:1d:b8:fe:09:84:a7:b0:df:b2:57:26:e3:bd:1b:6e:a1:e3:
d9:7d:0f:fd:25:b4:5b:1e:05:1d:88:a7:5e:29:56:1e:dd:e2:
c5:a2:83:1c:61:b1:4b:e7:7e:e2:2c:5d:4a:c6:ae:8e:50:b1:
12:f9:c3:c9:d0:9d:fa:1c:6c:11:f2:b5:cf:2b:5f:25:62:91:
68:42:94:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 17:42:40 2026 by rpki-client