Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: +F57hVaNgX8EmSsaUd7XS6yeLmrxpDG+48q4RDCrJJo=
Subject key identifier: FD:0F:67:A2:4C:83:4C:58:1D:2E:F3:D6:E4:3B:55:1A:87:64:42:C8
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 019D3909C6F30B4DA319E9F03855F9A551E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:35 +0000
Manifest this update: Sun 29 Mar 2026 10:00:35 +0000
Manifest next update: Mon 30 Mar 2026 10:00:35 +0000
Files and hashes: 1: 5gSf1-VDKOYVBkqkgnQrEMypzTg.roa (hash: z6ZcdBsDa7Hg3rkYAPzvBooMd+rknZS/02yCZUcFlGI=)
2: CmZeg0QZClyASLrlfEFcbEqzniE.roa (hash: hxAFIZw4RCC07UgvikV6JR0Y6MOvZuFKg3XrUhhJ604=)
3: Ih_bDVPWPg40meMVUQH52Q_SiqE.roa (hash: WQr9CRYz6MHyRZSZGa17nV7pgtE8mhzsKExO1LfYlFY=)
4: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: GkapXySgTNxZkLoxYrk9GjWfkG6IMRvj2TPU3lJCdd4=)
5: yhvjZUqxn_FUY-Mlri4ogZjyLBM.roa (hash: L0ywjyagm2bruEE3Ewodq3fXEbUNJSk+4fnvkwsHn6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c6:f3:0b:4d:a3:19:e9:f0:38:55:f9:a5:51:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Mar 29 10:00:35 2026 GMT
Not After : Mar 30 10:00:35 2026 GMT
Subject: CN=fd0f67a24c834c581d2ef3d6e43b551a876442c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:c8:79:8b:31:f6:e4:e0:49:cf:5b:96:5f:
09:f8:47:7d:9e:06:fc:c4:5a:99:ac:7e:2d:7d:e5:
5d:0c:6a:87:47:57:cd:08:9e:a6:b9:2a:3d:8e:22:
89:f3:73:9d:57:75:11:b4:5f:57:57:53:37:1f:61:
af:96:3c:58:3f:df:97:0f:c3:8f:b3:b8:a5:0f:9d:
ae:b2:54:f0:cd:27:be:89:4c:2f:ab:b6:33:c7:ff:
7d:53:f7:bd:29:7a:cd:7b:1f:c0:9d:01:bd:f1:47:
73:03:91:a3:93:35:b7:7c:f6:8c:d0:03:bb:df:01:
1a:f3:a4:e7:78:d5:aa:46:31:09:3c:bc:53:02:63:
5f:a0:c3:c3:72:b8:a5:dd:ba:ee:45:2b:30:fe:30:
1c:13:0a:f8:aa:b3:6d:e1:44:9b:fa:30:c1:04:d3:
67:26:31:b2:ed:83:8a:22:c9:bb:b2:cc:f8:c3:63:
be:68:2c:8e:ff:99:b9:7f:59:5f:4b:22:08:9e:42:
c6:34:1a:e7:4c:be:67:54:77:d9:17:58:ab:3c:39:
e3:0c:6b:9f:f0:c1:b4:b3:a8:2a:b8:94:13:67:78:
33:54:67:c0:f6:ed:2a:3b:81:4c:50:52:d1:96:40:
12:c8:bc:28:6a:23:41:d5:ba:fc:e5:7e:8d:2d:cb:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0F:67:A2:4C:83:4C:58:1D:2E:F3:D6:E4:3B:55:1A:87:64:42:C8
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0c:1b:33:62:14:82:c1:43:c5:25:23:88:23:cd:df:e2:98:
2d:2d:25:d4:6a:60:b0:0e:a2:4e:a7:e7:5e:1d:16:5d:95:ee:
b6:29:0b:08:1b:17:12:c7:be:c2:d7:cb:3a:5b:72:cd:c0:da:
e2:ce:87:6a:6d:81:8d:7d:8b:db:5e:71:de:75:76:5e:47:36:
9f:4f:63:f8:46:c7:46:b0:a8:90:b8:a6:a4:4f:33:b0:31:54:
66:7a:be:ae:e5:59:48:8a:75:20:eb:14:24:a3:31:00:ca:9f:
5b:7a:99:af:72:0d:c0:86:c0:0a:3c:6b:7c:4b:42:e1:e4:10:
01:fb:12:16:65:07:22:11:67:8c:7b:77:bf:47:42:03:e8:7e:
d0:95:eb:ab:de:5b:f3:5e:ab:5e:62:c2:0a:78:d2:53:0b:f0:
0f:c1:ec:b0:64:72:33:7a:2a:e3:6d:29:36:1e:5a:4b:2c:a5:
5c:75:34:a7:b6:bd:b6:51:41:4f:e7:29:8e:1e:6c:6b:2a:ca:
1f:7f:b0:96:c3:c1:6f:c4:96:e7:cc:8c:4c:d8:1f:72:c0:3c:
9e:e3:98:1d:c2:27:c4:56:2b:68:0e:aa:f4:4e:fe:f7:fb:91:
27:01:e2:85:68:ec:92:9c:55:42:1f:c5:f0:f3:ad:fa:ca:2a:
60:69:46:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:27 2026 by rpki-client