Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
File: gnfY854_j7Zjj3CDq58WwEfQ02Q.mft (raw, json)
Hash identifier: ozXmjkoyzUKFdefEInG0mOnvLszi1Ze8oYpsLzhUfZQ=
Subject key identifier: 1D:3B:97:97:ED:04:B0:2B:D8:63:87:ED:8A:C6:9F:B4:24:06:AB:F3
Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Certificate serial: 019D3752E33CE4F37D936A2A2DCCBEE1566A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
Manifest number: 136E
Signing time: Sun 29 Mar 2026 02:01:12 +0000
Manifest this update: Sun 29 Mar 2026 02:01:12 +0000
Manifest next update: Mon 30 Mar 2026 02:01:12 +0000
Files and hashes: 1: ZWEjcdwIM9EyAELpOcIP5A4AjN8.roa (hash: rVWcxdUR4t77+j89visuW0FsrMuy3PkstpLbGV2iT0Y=)
2: gnfY854_j7Zjj3CDq58WwEfQ02Q.crl (hash: 3fL9ieQtJjIZ818XqyDkYtL6G4Kbj8VGtLNHtwDu1iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e3:3c:e4:f3:7d:93:6a:2a:2d:cc:be:e1:56:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Validity
Not Before: Mar 29 02:01:12 2026 GMT
Not After : Mar 30 02:01:12 2026 GMT
Subject: CN=1d3b9797ed04b02bd86387ed8ac69fb42406abf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:36:71:ed:59:00:4f:04:3f:82:43:dd:2c:
01:7c:dd:ff:b1:25:88:a2:36:24:12:13:01:af:bb:
f3:11:fe:db:de:5b:37:d1:c0:76:d8:51:f0:85:95:
0e:4c:eb:92:dc:a3:12:8f:7b:2a:64:2e:4e:c7:d3:
1a:b3:92:6e:54:ad:5d:81:4a:a6:c1:e1:bf:ec:ae:
cd:46:b9:e5:5b:25:df:e6:8b:bd:f6:74:ef:61:6e:
6c:11:45:76:70:ca:34:51:96:55:3d:9e:1a:ea:6e:
45:38:08:b3:5c:d2:50:d4:a5:2a:be:1c:d4:81:af:
65:36:90:bd:a8:8a:e0:e6:0d:f1:95:79:7a:f0:0d:
7e:71:fc:6c:12:4e:9a:a2:21:15:13:15:0c:8e:ad:
54:f7:ad:83:c6:ab:d1:59:24:9d:b7:b1:bb:72:e7:
82:c5:d5:47:88:56:37:8c:26:b7:b1:ce:2e:53:1f:
71:93:ac:76:f0:54:5a:90:93:6a:59:83:eb:a8:6e:
59:f6:4d:86:e4:c9:83:2c:2c:03:0c:d7:4b:d8:bd:
42:92:3e:07:c4:ed:f5:02:d0:35:e4:94:0d:f5:de:
4b:24:d3:0f:91:f4:6f:68:8a:54:65:d3:eb:ad:cc:
0c:1e:c2:33:02:41:9c:90:9d:5e:54:42:d7:ea:ee:
0b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3B:97:97:ED:04:B0:2B:D8:63:87:ED:8A:C6:9F:B4:24:06:AB:F3
X509v3 Authority Key Identifier:
keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0b:5f:db:34:20:df:b9:7c:38:64:71:35:ed:b6:12:9a:49:
f8:77:47:00:a2:9e:65:84:b6:89:a5:84:17:0c:0f:53:22:8e:
63:6e:1c:a0:04:7d:89:cf:bf:df:67:e0:e6:e3:97:cf:af:63:
f9:40:8c:eb:d6:62:9c:a7:15:fb:86:be:75:32:a6:9d:8d:a9:
da:21:d3:f6:42:11:d4:45:50:75:95:4d:b7:f4:5f:e6:d5:4d:
5b:c6:fb:83:d1:30:55:02:2c:47:c9:f1:08:53:2e:ad:71:83:
92:c2:8e:0b:30:6f:8a:7b:20:7d:4b:34:3b:3c:8f:d8:94:70:
1c:24:7d:21:6d:66:36:ac:4c:97:3d:34:f6:6b:42:73:53:e9:
52:b9:a0:be:17:71:a0:1b:1d:65:d3:24:41:1c:fb:e7:52:a2:
c9:30:a7:2f:ca:d6:61:b2:f1:b0:a5:f4:42:e0:05:48:e2:87:
96:1a:d6:05:b8:64:b1:b1:33:75:f7:4c:f6:4f:73:ce:48:e7:
4e:63:fa:11:eb:f3:16:6b:d2:d3:15:db:12:a6:e8:04:f5:45:
b5:f6:32:4d:b2:78:fb:15:07:7f:5a:0f:8a:01:7c:b3:d5:d3:
0c:cc:70:e1:3a:bc:93:a4:f3:40:54:59:01:6d:ff:0a:b5:5e:
79:58:f7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:38 2026 by rpki-client