Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
File: gvjR2XuYaTmDMZTuI04MTZW1KJM.mft (raw, json)
Hash identifier: d72Qs7L3ZhQJsdd7pcwmSU2QpSFRF25bV82xH2GVDGc=
Subject key identifier: 0C:3D:58:62:98:36:49:B7:3D:8C:44:C6:A9:FB:8A:A2:E6:91:DD:87
Authority key identifier: 82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
Certificate issuer: /CN=82f8d1d97b986939833194ee234e0c4d95b52893
Certificate serial: 019D390A1E23E71812FEBAE03DFD01604569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
Manifest number: 0513
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: IxrbbUnr4NlEBFXv08akYoNTGj0.roa (hash: 8fPL/kdOuu7kLO2qxK2P+1Epd0kmxJSFJNXEkM34RBM=)
2: gvjR2XuYaTmDMZTuI04MTZW1KJM.crl (hash: Axq/pVU9pEfw75/i1K/X509prCP0c/PPyYUaFFsPpaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1e:23:e7:18:12:fe:ba:e0:3d:fd:01:60:45:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f8d1d97b986939833194ee234e0c4d95b52893
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=0c3d5862983649b73d8c44c6a9fb8aa2e691dd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:8f:6d:61:ac:e3:7c:b0:19:16:cc:d9:53:
9c:98:af:2c:ba:26:d7:8f:f5:cb:a7:b7:80:35:56:
36:cd:2a:78:6f:52:50:9f:1b:eb:b2:88:e8:ca:3a:
6c:bb:eb:05:0d:e4:e8:97:12:f5:b3:65:c5:f0:b9:
24:a2:5e:d9:6b:f0:0d:4d:f0:21:a8:e1:70:49:12:
2d:51:f5:91:bf:c9:c4:59:78:35:2d:fb:ce:54:f0:
5b:43:bb:51:61:d5:70:c9:d2:06:f7:4f:5e:af:ee:
51:63:db:0a:5e:2e:ca:c0:bd:91:96:9b:8c:0e:79:
92:7f:1c:2f:1c:24:b6:c3:e9:71:98:aa:88:4e:0f:
cc:1e:77:20:63:4a:c2:be:8e:aa:5a:4e:ac:94:51:
be:84:c0:87:85:18:98:02:74:3f:b6:35:6d:c0:2d:
49:fb:f3:eb:bc:7b:8a:ab:fc:2a:a6:a4:2f:d2:e0:
6b:b1:a9:a6:36:46:3e:b2:fc:88:ac:05:a4:67:6b:
4f:08:21:f9:2f:c7:06:a8:88:7d:71:1f:67:f0:a4:
ed:19:b9:c6:40:40:0f:37:ad:a3:b2:65:45:64:f3:
8a:fd:d0:34:aa:8f:7a:be:65:bf:da:c5:01:f4:28:
5a:08:53:10:76:e7:93:f3:bb:6a:5a:2b:ad:0d:c4:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3D:58:62:98:36:49:B7:3D:8C:44:C6:A9:FB:8A:A2:E6:91:DD:87
X509v3 Authority Key Identifier:
keyid:82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f1:c9:04:04:ce:48:e9:be:d1:e6:0c:2d:86:d0:2c:71:3b:06:
b4:be:45:46:0d:70:d8:fc:b8:0f:6d:a6:eb:05:80:df:ed:e1:
66:c6:5f:b0:c8:31:3f:20:1a:87:a2:5e:64:f2:3b:11:da:c6:
f4:42:5d:bf:e9:9a:ce:32:58:6b:0d:a8:02:c5:85:f1:a3:ec:
4c:a6:1e:db:c1:97:06:fb:0c:83:1b:80:0a:4b:b5:7c:fb:8f:
56:fc:95:11:37:b5:19:9d:da:c4:b9:42:91:86:3d:35:ec:21:
42:20:2a:27:b7:59:cd:90:d4:5a:30:e4:e8:b3:7a:1c:41:1a:
20:4d:81:42:14:6c:37:1f:2e:fd:28:06:f9:49:bb:09:12:63:
ef:2b:c7:37:69:4e:a3:c4:99:71:5f:f0:a5:fd:a0:7f:a9:19:
a6:02:6b:ef:1b:97:04:13:8e:da:92:8a:92:c0:9b:d2:40:04:
bc:77:e1:42:c1:99:3e:a7:4e:73:36:54:cb:91:fd:7c:b1:4d:
16:b0:7f:94:c9:63:bd:0f:99:e3:ae:9b:e5:9b:b3:54:aa:08:
a5:c5:ba:fb:17:01:fd:be:97:b0:cd:2c:33:59:4b:1d:3c:0c:
b4:de:4a:d1:9a:ab:9f:64:b5:9e:63:da:6d:9b:f9:ff:8e:a4:
4e:c6:35:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:56 2026 by rpki-client