Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: iLkM4GSP9oZDTLIBdi2InuQi81lUYU1gKqpvm+W+Uq8=
Subject key identifier: E0:1D:D1:FC:77:DA:24:FD:10:6C:8F:62:81:82:35:6B:A4:17:DE:7A
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 019DD1D20A04CAE7E48944C6A2A207626D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 100F
Signing time: Tue 28 Apr 2026 02:01:36 +0000
Manifest this update: Tue 28 Apr 2026 02:01:36 +0000
Manifest next update: Wed 29 Apr 2026 02:01:36 +0000
Files and hashes: 1: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (hash: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: dYw7q7zE160lzUwbVKVBHsGSYmZtyQf4z20TViNaj0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:d2:0a:04:ca:e7:e4:89:44:c6:a2:a2:07:62:6d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Apr 28 02:01:36 2026 GMT
Not After : Apr 29 02:01:36 2026 GMT
Subject: CN=e01dd1fc77da24fd106c8f628182356ba417de7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:38:e6:68:81:38:06:c4:51:53:63:e4:22:
40:69:4f:0d:06:83:c7:89:1b:2d:71:41:96:2b:7f:
4b:6c:97:f8:ce:2b:8e:fe:85:cd:2c:90:57:39:31:
b0:15:3d:99:8e:f4:9c:b6:0a:a9:1e:d5:87:3c:ff:
34:6d:cb:ab:4f:bc:1b:e5:d6:9e:ee:52:b3:a7:82:
f5:db:92:1d:97:16:73:93:2b:23:39:ee:28:7c:6e:
8b:7a:f6:0b:f9:2a:e5:d4:33:b5:04:87:f9:41:76:
d5:8e:6d:26:a8:f3:97:d2:0e:5d:96:61:ab:fb:81:
0d:e6:59:e8:46:a4:5d:0a:54:5d:1a:54:00:76:9a:
c2:05:d8:7b:54:ea:9d:60:fe:bc:45:52:ba:f2:68:
17:4b:7f:9c:e2:f0:7a:43:15:6d:e5:f8:d4:ec:74:
ac:e4:5f:4a:ff:a9:ac:3b:22:2b:a4:b6:d1:26:24:
c8:9b:1a:66:db:63:45:b3:82:1d:f2:19:e2:14:47:
c1:95:82:d4:23:68:bf:89:ca:1a:09:2e:79:41:dd:
19:1e:8b:53:14:3a:d9:ce:32:00:c8:da:ab:07:c7:
1e:c6:b6:fe:65:c9:45:9a:8e:d3:73:dc:0e:53:d7:
ce:c1:ff:9f:39:b8:a9:d9:e4:36:a9:b8:69:92:8a:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1D:D1:FC:77:DA:24:FD:10:6C:8F:62:81:82:35:6B:A4:17:DE:7A
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:13:cf:1d:3c:40:65:d3:fb:21:56:98:5a:d1:f7:ba:b5:87:
0e:6c:08:58:df:0e:ad:7d:59:af:82:cf:48:46:3f:54:d6:42:
b8:ef:ea:fc:8f:32:72:23:75:e4:9c:a6:29:3f:7d:a9:de:44:
44:52:f3:3d:36:62:73:5d:a9:a6:11:1d:31:35:b5:ea:1a:a1:
85:18:b5:76:d8:b8:b7:c2:bc:7b:59:b9:47:03:2f:8f:a4:9a:
b7:da:2a:6c:26:22:24:a4:89:94:dc:78:de:9f:c4:17:65:6b:
f5:c2:d1:81:48:94:73:50:95:86:22:2b:26:ca:b4:dc:f8:06:
0c:19:ab:e8:07:fe:ad:41:dc:8e:19:29:f7:c6:21:cd:05:65:
6f:89:b8:57:2e:3d:bc:5c:32:a7:7e:a5:28:52:47:d0:ef:63:
ac:d8:05:c4:20:8c:5b:36:7c:72:d5:01:49:60:a5:32:d4:6e:
08:c4:85:cd:35:93:bf:58:fc:92:c6:f1:cf:b8:77:d8:e5:94:
19:22:1b:cc:e2:d4:f9:51:ce:3a:35:6c:12:d7:a5:b4:66:e5:
08:14:40:eb:0a:81:af:92:ff:0a:ef:07:d3:f9:60:88:de:38:
c5:c7:95:93:d4:19:b8:34:4c:d6:02:de:4f:27:f6:15:3c:7a:
87:bf:f8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:50:35 2026 by rpki-client