Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier: LQ5IL92hxH2ispXxQLTGnizjIVsd3YDeVO2hpjjDFYU=
Subject key identifier: 5A:50:8F:66:9C:B9:4B:01:25:CC:9E:6E:DE:27:39:DA:BA:DC:D2:04
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial: 019D38D2EC680CA4530FFB2E82BE9AAAF40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number: 03B8
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: c5VawP8gFq2J4YTLmXhN0aqqgpWoZXDCFw/fC6mV0Do=)
2: rQ8HP-1CHQ2WJh4AZ9S-FHE5GNI.roa (hash: 2H9ylgH0h8jNYwcMQW9wprZPjTTUA+nJy+8c2P6cl8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ec:68:0c:a4:53:0f:fb:2e:82:be:9a:aa:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=5a508f669cb94b0125cc9e6ede2739dabadcd204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:97:cf:21:1c:1e:b6:91:b5:37:a7:89:9e:
93:07:cb:a8:e1:49:53:e6:b2:61:06:03:e5:49:22:
c3:73:22:3f:1b:e3:3b:ef:99:7e:65:9c:8c:4f:e5:
9b:87:ea:88:dc:1b:31:89:0d:13:98:81:cc:58:8c:
fb:32:36:44:eb:52:7a:19:dd:5b:73:cc:14:61:7c:
54:46:d0:60:8f:83:9c:4d:6b:8c:a1:9c:93:10:35:
b7:8a:4f:27:c3:64:ab:a4:d1:b5:a8:50:b1:2d:20:
17:1d:40:88:93:84:63:65:aa:2d:40:76:16:b5:e3:
cd:0c:5d:48:06:48:71:66:e3:ec:aa:76:f2:71:8e:
1b:d0:cb:cb:0e:77:fc:04:e2:f3:2b:36:b1:82:90:
30:49:67:c2:83:5d:51:c3:1f:f7:38:67:b5:a5:ca:
8d:47:e2:d8:24:5f:da:24:56:6f:8b:c7:dc:b0:f2:
98:c4:fb:11:cd:f5:9e:2b:65:38:9d:75:6a:65:78:
af:3d:66:2d:1c:33:e5:57:b7:39:54:6f:9f:03:ef:
5d:34:3b:ca:b7:2f:e2:b7:35:48:66:17:c5:c5:21:
03:d5:4a:6d:a8:36:6e:ae:c2:c0:76:dc:74:5d:94:
24:99:48:90:9c:07:c4:77:66:31:9f:1b:5e:44:aa:
d4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:50:8F:66:9C:B9:4B:01:25:CC:9E:6E:DE:27:39:DA:BA:DC:D2:04
X509v3 Authority Key Identifier:
keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:40:69:36:4f:69:85:91:65:9c:53:fd:9e:6f:8e:97:7c:8c:
d2:d2:19:c2:f0:aa:80:61:2d:7a:3e:2f:35:ad:78:f7:10:40:
71:e8:d5:19:0c:d7:9b:ed:83:29:f7:8d:5d:aa:f9:d2:82:46:
15:28:55:20:0e:ca:88:94:23:a3:d7:c1:f4:5f:95:37:be:92:
39:50:71:dc:73:ea:cc:94:02:21:2a:8b:f8:aa:d7:a3:7d:e1:
f8:1c:e8:24:c5:cc:60:96:0d:c4:ab:b0:ff:1f:72:fd:0c:78:
60:33:9d:a4:e0:a2:95:1a:e1:b5:c3:00:e4:4e:40:a0:92:34:
83:cc:38:95:f0:80:65:79:9a:cb:d9:ea:92:70:54:91:83:02:
5e:c4:9e:70:1c:af:f9:95:2e:23:82:d6:ee:ee:3d:51:66:f2:
14:22:44:76:48:d5:2f:a7:29:13:67:54:1e:b2:b3:f4:70:8c:
82:15:59:44:23:8f:66:fa:81:88:f1:d8:b1:9c:6c:e7:bd:43:
54:64:4a:48:3f:4a:b8:ff:cf:0a:ce:99:c5:31:c5:2f:63:8d:
bd:8f:fd:9e:55:11:fa:f0:cd:6b:ab:21:bc:c2:c8:58:08:e7:
b8:45:de:7f:49:0c:3b:e8:26:56:bd:a7:68:84:89:79:1b:fe:
8d:a7:8a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:18 2026 by rpki-client