Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: n9MD9zFCr/cxaXFgMS0J2EM8Ji+XPfGG3pV3ofwUEks=
Subject key identifier: 4E:24:9F:C3:79:5F:F3:0F:FF:EC:63:7F:5C:87:12:E1:F6:4F:D5:55
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 019CE636AFF4A94DD0FB2F6570AD050FE02D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 0F95
Signing time: Fri 13 Mar 2026 08:01:09 +0000
Manifest this update: Fri 13 Mar 2026 08:01:09 +0000
Manifest next update: Sat 14 Mar 2026 08:01:09 +0000
Files and hashes: 1: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (hash: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: jwHEjmsl7u7SFPf8w8oZmHRifm4CjeMgzQCqwL5Z6o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:af:f4:a9:4d:d0:fb:2f:65:70:ad:05:0f:e0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Mar 13 08:01:09 2026 GMT
Not After : Mar 14 08:01:09 2026 GMT
Subject: CN=4e249fc3795ff30fffec637f5c8712e1f64fd555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:db:8c:fe:53:a4:0a:a8:c6:57:0c:98:69:
1e:08:60:f0:72:54:b5:76:47:d6:03:b9:2e:bb:97:
be:6a:2e:a1:2f:3f:5d:12:e4:09:e2:86:90:f4:22:
93:63:1b:c8:32:4f:04:36:82:22:31:f5:75:c7:f5:
f0:3c:c7:f7:b3:3b:e1:83:ed:39:02:eb:e9:bf:8d:
75:8b:70:4e:8f:ab:f3:0d:42:2f:0c:2d:e9:08:bd:
cf:69:b3:96:e0:b5:a4:28:48:2f:5e:66:3a:e3:44:
86:36:2d:46:7f:f7:8f:6b:2a:8c:34:98:43:6a:e4:
40:93:78:ec:1e:f5:f4:3a:b0:4e:eb:eb:84:7d:45:
e5:ee:94:d6:bd:7d:09:29:cd:93:0f:06:06:96:3c:
26:ae:ed:c8:40:98:e0:37:f2:49:7f:2a:55:60:e0:
50:63:df:11:7c:ac:01:f6:a5:e3:a9:7c:d7:04:c2:
90:27:25:1d:21:18:89:a1:64:8d:ac:1a:dd:f5:02:
51:e4:d6:93:38:df:7f:9a:e7:09:e4:6d:79:4c:dd:
f6:b9:20:c1:4c:d1:68:8c:bb:11:0b:dc:d8:cd:39:
97:4e:12:bd:28:12:e1:7a:43:72:30:29:a8:31:5b:
3c:53:4f:dc:aa:97:22:3e:22:3e:bd:28:6b:b2:1c:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:24:9F:C3:79:5F:F3:0F:FF:EC:63:7F:5C:87:12:E1:F6:4F:D5:55
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:86:d6:ee:dd:65:6a:7c:09:f8:4e:c8:03:a5:7e:34:d3:48:
da:7d:21:2b:a4:5f:5e:75:62:12:29:cc:d6:54:87:dd:08:c2:
cc:50:af:8e:04:93:3e:52:24:b6:63:62:a7:9d:28:61:c4:b3:
b8:29:f2:f4:48:78:9c:c9:a8:ae:54:a1:4c:f8:4c:8f:7e:fa:
2d:14:b9:a9:dc:3e:c5:d2:f7:d6:d9:1d:e7:20:cf:3f:f9:66:
fd:57:9d:f0:5a:88:47:02:a4:dd:2e:4e:62:41:69:35:54:e5:
a9:91:69:a1:51:1a:1c:bb:f7:38:43:52:3a:df:7a:3c:bb:0b:
9c:9c:33:f6:1c:7e:02:0a:8c:32:35:39:8b:e1:c3:d4:bf:6f:
02:ea:1a:6c:4c:da:e1:bf:4c:5b:74:ce:a5:0b:d6:9b:49:7d:
e5:5f:e4:75:79:9f:23:3e:4e:dd:cd:72:6c:ad:c6:07:2a:70:
62:99:4a:88:b9:2f:74:e6:6c:fa:90:39:14:5b:e2:22:11:4d:
c5:b4:45:b5:39:1f:ba:e1:7f:0d:bb:e7:86:f4:80:71:12:85:
50:55:71:d9:cc:c8:6d:d8:8f:58:90:48:08:2f:e0:f7:06:41:
61:d2:ba:ea:06:21:20:98:3d:aa:7b:bf:fd:5e:b4:8c:8b:b8:
f8:e9:66:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:16:28 2026 by rpki-client