Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: YQcP7z7xCaA+OPenlKbDCO7UyPLBoSKgCtLA7b3NJ1I=
Subject key identifier: 2F:92:B9:E0:3B:69:54:B8:DA:4D:07:26:5E:F8:90:08:06:80:09:AB
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 019DCF3DCDF1AD2A941C7CF9E48465B5CD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 14:00:27 +0000
Manifest this update: Mon 27 Apr 2026 14:00:27 +0000
Manifest next update: Tue 28 Apr 2026 14:00:27 +0000
Files and hashes: 1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: T9bSY5LNVq3N6Yi8OgsQziTvZ3sQZ1uy3VxRStYaNUo=)
3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3d:cd:f1:ad:2a:94:1c:7c:f9:e4:84:65:b5:cd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Apr 27 14:00:27 2026 GMT
Not After : Apr 28 14:00:27 2026 GMT
Subject: CN=2f92b9e03b6954b8da4d07265ef89008068009ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4d:63:1b:98:b8:62:cf:9a:97:67:92:5e:dc:
c1:71:66:3f:7e:8f:8b:99:ee:79:43:05:2d:fe:c2:
99:6d:d9:c3:f2:39:da:f0:76:13:64:48:27:e3:8c:
19:27:b5:f8:d5:c9:9d:73:ed:a5:9b:36:49:0a:53:
b6:9a:dd:09:5b:ae:09:d3:7b:a9:df:7e:2b:1d:69:
6e:3a:44:ae:d2:44:ff:d7:50:0c:63:d0:6b:17:c9:
78:ee:dd:5d:32:fa:01:30:03:fc:5b:68:9c:80:6c:
c9:77:ea:d6:54:77:57:0a:15:b1:f6:42:c4:e5:67:
8b:e7:82:7b:b6:35:ff:10:84:fa:c5:9f:bc:b8:23:
19:de:83:7c:10:ba:79:fe:41:8a:dd:e9:3e:b6:22:
8b:8c:bf:1f:27:a8:f6:da:6e:b7:0e:24:01:93:49:
ed:e6:b6:12:d9:9c:b9:42:81:7d:f1:c3:d5:75:6c:
f8:45:7d:fa:0a:15:8c:8e:c7:87:25:cd:c7:59:aa:
64:70:10:92:33:7b:d7:46:73:b4:48:94:03:6e:d1:
19:cd:be:b8:91:d3:8c:ea:5b:ac:61:25:0a:ea:f9:
f7:0c:53:b6:8c:49:eb:5f:4a:60:a2:50:81:40:62:
c2:5e:f4:bf:2c:39:de:3e:0a:78:85:9f:dd:fd:3d:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:92:B9:E0:3B:69:54:B8:DA:4D:07:26:5E:F8:90:08:06:80:09:AB
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:73:70:09:eb:d8:2e:aa:2f:6d:66:73:36:0e:4f:e1:02:5b:
76:35:1b:b7:1f:9f:ec:7a:b1:ec:31:ad:39:4e:75:4d:f0:d5:
11:88:ba:30:c3:25:b6:b1:5a:6c:d1:51:59:05:26:1b:98:c8:
ec:3b:84:5e:e3:bf:a1:9d:15:4c:01:f0:f2:c2:8d:e4:9d:73:
f7:bd:0d:21:bf:c3:81:2e:4c:b6:d1:f8:f7:bc:62:9d:78:3a:
5c:55:89:87:75:25:20:12:05:d4:0a:e6:e3:22:fe:bf:ed:f5:
c5:d4:98:c9:34:ed:15:4b:0d:13:86:cb:cd:ae:dc:42:b7:31:
6d:21:88:2c:97:99:72:bc:9d:c6:51:c7:f4:56:40:c1:6f:63:
70:b7:d4:71:20:2d:f6:09:7d:02:b1:51:a2:24:df:75:ae:34:
71:76:de:d9:82:75:4d:2c:25:ee:47:6e:d5:4c:53:84:d6:7e:
d0:38:7e:11:e0:84:74:05:89:d7:f1:a8:a1:b0:01:ae:87:dd:
33:d4:5c:1b:9a:a2:3c:ad:d8:0d:fe:d1:07:22:43:84:82:06:
92:a7:46:01:61:6e:df:88:73:08:aa:4a:d0:f5:7c:f2:47:1a:
be:92:59:e3:ed:d2:da:75:e5:11:42:3e:d2:80:2f:1b:00:fe:
37:5d:b7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:12:11 2026 by rpki-client