Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: +HBKkYOqDpwOjQNSgmYAgPiAHfQRxgUuehjHOFZkFy8=
Subject key identifier: 89:1A:AA:BB:8E:D1:CC:BF:7C:81:D5:00:5D:23:54:74:A8:C4:A1:C6
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 019CE59109BA72CD66F5C4126F3E74F7A5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 05:00:13 +0000
Manifest this update: Fri 13 Mar 2026 05:00:13 +0000
Manifest next update: Sat 14 Mar 2026 05:00:13 +0000
Files and hashes: 1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: SVFpT3AHzOCtKZ62MYuuv4xJTtOVzdAkMwPiC1FlP4Q=)
3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:09:ba:72:cd:66:f5:c4:12:6f:3e:74:f7:a5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Mar 13 05:00:13 2026 GMT
Not After : Mar 14 05:00:13 2026 GMT
Subject: CN=891aaabb8ed1ccbf7c81d5005d235474a8c4a1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:8e:ca:06:85:79:8a:7a:dc:ea:11:45:59:
92:2e:b7:01:f6:14:98:b0:60:84:db:e3:d1:7b:a3:
fc:82:9c:37:eb:b9:ab:5d:67:65:43:76:63:73:6b:
9f:11:4e:86:56:49:1a:34:32:9b:d8:ec:21:a5:53:
ad:d7:45:ad:55:e5:78:2b:b9:1d:a7:2b:91:0e:d5:
e4:ea:9a:e4:ee:0e:bb:6f:20:07:dc:68:26:5e:1e:
31:db:92:83:44:e5:e1:60:ba:61:a5:c0:5f:81:8e:
b1:b9:4e:34:4b:30:3b:3c:2c:e1:62:23:8b:d6:5f:
73:22:47:82:62:1c:a7:79:d0:9b:8d:ce:07:e1:ad:
cf:9a:df:f0:56:21:63:3c:27:b2:2c:57:67:64:0b:
5d:a8:f5:03:f2:48:61:4a:61:3a:b8:f7:75:61:70:
55:8a:61:67:a0:7f:93:8b:27:72:ff:22:d2:cf:5e:
8f:62:27:81:63:99:45:d3:66:73:ce:c5:1a:49:9a:
a3:7c:ea:47:d1:b2:4f:6a:23:ec:d5:70:08:c4:ee:
ab:1a:d6:41:ae:bf:7f:f9:16:8d:f9:e2:17:de:73:
79:aa:83:19:b4:b6:07:63:2b:84:4d:c6:d6:40:6d:
0d:59:88:68:44:f5:8b:ac:dc:09:70:36:cb:4b:72:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1A:AA:BB:8E:D1:CC:BF:7C:81:D5:00:5D:23:54:74:A8:C4:A1:C6
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:62:96:29:5d:3b:b4:d5:dc:fd:73:48:3b:9c:2e:0c:c9:51:
d4:e1:6b:76:a6:73:ed:1d:22:5d:54:84:1c:20:43:8d:91:73:
d9:58:88:7b:df:e1:e4:95:03:31:c6:52:b4:a0:3d:22:40:b6:
dc:6c:83:c2:67:04:12:9e:26:4a:cc:21:9a:74:a9:c7:0a:90:
5a:15:b0:2e:03:12:a2:16:c2:93:2d:ba:fb:19:f8:6a:bc:43:
89:5c:e6:2f:f9:4c:d0:c1:91:2d:cb:ae:ec:09:8f:07:7b:9b:
1e:be:53:89:5b:63:7d:bd:c2:a3:01:b1:3b:4b:e4:1b:57:43:
0f:1c:9f:b2:9e:f7:68:9e:76:8b:f7:6f:12:31:48:08:ef:a0:
80:f2:d6:50:a8:48:eb:9a:0a:ed:1f:88:8d:18:2d:eb:a6:d9:
a1:f5:02:f8:1a:04:ea:77:ec:b8:0e:14:56:3a:a0:46:df:13:
19:7a:e8:66:4e:8a:fe:1f:4f:1c:f1:3e:3b:e7:6e:50:31:c5:
6a:28:08:27:09:e1:2f:c9:65:52:c5:93:7b:f2:e4:6a:f0:03:
99:fb:35:c7:88:c4:cf:73:59:24:fa:3a:94:8a:5b:8c:b7:4c:
95:58:0a:c7:59:01:38:92:33:1d:40:29:2a:f8:83:df:e5:4d:
c0:01:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:46:21 2026 by rpki-client