Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
File: gNZ6hECc7boCLusDW9itYg1oPqc.mft (raw, json)
Hash identifier: GZ1JBZ3X89TwFcLqy+eEDOQo84a1dSVWmRXqq9sPlRw=
Subject key identifier: 80:52:93:21:4E:DA:75:7F:16:63:BF:BF:68:B2:4A:AE:B8:63:33:00
Authority key identifier: 80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
Certificate issuer: /CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Certificate serial: 019D3977D547A7169A48C698B0C8E7B66209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
Manifest number: 1825
Signing time: Sun 29 Mar 2026 12:00:47 +0000
Manifest this update: Sun 29 Mar 2026 12:00:47 +0000
Manifest next update: Mon 30 Mar 2026 12:00:47 +0000
Files and hashes: 1: _Yb7IW78SKZuD4V1IkJEZwe6uu8.roa (hash: 14e7sG8qVox+8SMefeXpeF7AFL8AbwbjJc3kCO+AHdc=)
2: gNZ6hECc7boCLusDW9itYg1oPqc.crl (hash: BHlHrlObPrBFkIyoSjpRN5/3rkTyEPEIVbHtmWr+IPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d5:47:a7:16:9a:48:c6:98:b0:c8:e7:b6:62:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Validity
Not Before: Mar 29 12:00:47 2026 GMT
Not After : Mar 30 12:00:47 2026 GMT
Subject: CN=805293214eda757f1663bfbf68b24aaeb8633300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:24:69:f0:36:2c:b9:b0:38:08:27:e9:11:
de:be:b3:67:85:59:5c:d1:c2:68:6f:b5:5c:3d:60:
92:dd:ce:95:3b:8a:01:29:bc:45:e3:00:99:ad:ae:
6a:9f:c0:4b:cf:df:df:55:ed:68:91:82:ad:ce:32:
3b:dc:77:9f:3a:52:39:d9:38:ce:75:7f:45:2b:d3:
87:90:3d:3f:6e:a6:94:6f:bb:75:2f:de:fa:51:60:
e2:b7:57:a5:05:a5:62:4f:58:be:1b:6b:51:79:d2:
4e:80:30:26:59:d6:11:e7:34:10:0d:a5:f3:a8:0c:
ed:9d:6d:71:95:35:c5:ec:96:ec:75:f2:ad:82:da:
88:eb:58:ad:31:4f:83:8b:23:b9:bd:ac:48:28:11:
0a:9b:a1:ab:e3:b4:01:12:50:8e:fb:be:77:87:92:
94:75:e8:b5:19:4d:f1:e1:36:91:6a:ab:1a:95:47:
6c:81:ef:e2:0b:21:e4:f6:38:1c:26:e6:8f:7f:79:
57:fc:0c:c1:dd:7b:f0:36:b3:fb:5a:7d:67:11:9b:
ef:cd:b7:b4:b7:97:ca:f3:98:d8:b1:ff:68:a5:7e:
cc:6a:6f:f1:1c:4d:ea:dd:7e:e8:fa:eb:14:ff:28:
10:c2:25:ec:c4:9e:91:f4:82:7a:7e:85:ac:03:4c:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:52:93:21:4E:DA:75:7F:16:63:BF:BF:68:B2:4A:AE:B8:63:33:00
X509v3 Authority Key Identifier:
keyid:80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1f:78:b1:68:7a:48:c0:ed:35:46:89:a3:96:3e:74:15:88:
44:22:c4:79:b2:1f:14:d6:f6:91:49:80:89:2f:2a:e9:eb:94:
82:6d:26:0c:b2:3d:e4:88:09:a6:03:1a:92:2a:e4:2e:5b:00:
71:99:d7:15:a4:1d:b5:44:c8:ab:79:4f:7b:97:09:bc:5b:35:
7f:8f:8b:ac:16:28:2f:7a:4b:92:3a:fd:39:77:00:1c:35:1f:
65:7d:ae:13:15:9a:7e:08:19:aa:d1:c5:85:26:f8:87:2c:1a:
17:6b:2f:8e:58:bd:9e:cf:f7:48:34:a5:ae:c9:2d:7f:90:2e:
29:b2:c2:7b:1a:66:c7:f1:f4:8e:6b:88:52:a1:4b:32:b9:24:
48:58:3e:7a:a1:94:bc:88:bd:d1:6b:20:7b:96:ce:04:c5:74:
eb:6e:ac:20:b4:ac:54:b3:73:0a:85:f3:9c:01:ad:24:54:1a:
c2:65:28:f0:ce:85:6b:f9:a5:d9:5e:e8:f7:3e:27:64:8f:67:
64:ac:25:70:2c:b0:54:56:8d:1a:e0:c5:e1:51:66:dc:99:56:
71:33:46:fb:d5:72:d8:14:b9:4f:e3:fb:02:df:f3:a3:3d:95:
60:ce:6c:69:1a:b8:7b:b6:52:e4:30:21:fb:fa:da:0a:40:b2:
5a:a8:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:12 2026 by rpki-client