Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: hyAOB9c2Bf3ONJzE85WCSeNY6aFvJTc/jDy1WIQf/lI=
Subject key identifier: AA:6C:4C:6B:30:94:87:7B:AA:91:6A:05:C7:4E:9E:E2:6B:BA:88:D1
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 019D39AF71DA0A80D04A0E55802904C6F4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 07E1
Signing time: Sun 29 Mar 2026 13:01:32 +0000
Manifest this update: Sun 29 Mar 2026 13:01:32 +0000
Manifest next update: Mon 30 Mar 2026 13:01:32 +0000
Files and hashes: 1: P8LunT7NWyGTGPbLtH4shJpoGP0.roa (hash: TbFuXtQTiW0SZnaPUm+pr7Lb/RImoBN9F9vrbRZOLrA=)
2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: KEF9SShfN6X9lZCu2glLO/cz64IgkXFqghvt5iym/XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:71:da:0a:80:d0:4a:0e:55:80:29:04:c6:f4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Mar 29 13:01:32 2026 GMT
Not After : Mar 30 13:01:32 2026 GMT
Subject: CN=aa6c4c6b3094877baa916a05c74e9ee26bba88d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:59:cb:44:b3:1d:7e:17:0f:d9:94:92:ee:
b8:3f:74:fe:0b:b1:5f:85:ab:c7:bd:04:01:72:86:
4f:53:46:99:75:c4:69:8e:21:60:35:67:c7:63:07:
52:51:d2:08:d6:de:ef:3a:38:04:af:34:00:68:88:
7a:24:ac:4c:72:72:af:e9:65:5a:83:34:7c:8d:15:
b8:9d:04:a0:3c:7e:14:6b:82:2c:87:1c:3a:9d:bb:
ad:6f:1f:07:59:eb:ae:89:7d:66:5f:d8:50:0c:a0:
66:7e:8c:e0:a6:cd:8d:f9:fb:88:22:57:1b:1c:a5:
c7:16:f1:b9:da:7a:8a:b2:0d:9b:da:a9:91:12:5a:
cf:f2:05:ca:29:40:56:67:94:f3:6e:89:f8:4e:23:
8c:41:87:d8:d3:63:70:8d:59:61:3d:77:8b:7d:a9:
3e:5a:0f:f0:e9:d1:ac:83:04:a5:52:2d:76:88:fe:
2b:84:07:7e:42:51:a6:bd:0b:12:27:f9:10:7f:ff:
b0:fb:36:d7:a1:af:55:99:6b:72:09:0f:d4:15:e0:
ad:bd:4b:3e:d2:e4:19:5e:e4:ff:ad:2a:f3:cb:5f:
97:fe:8a:b6:34:7f:2b:5c:ae:b5:9c:e5:c4:2f:f3:
1c:1a:06:0e:d4:ed:db:06:e6:ab:82:72:47:27:60:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6C:4C:6B:30:94:87:7B:AA:91:6A:05:C7:4E:9E:E2:6B:BA:88:D1
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1e:6d:06:dc:1a:f1:1b:d1:08:7c:04:b5:95:bc:00:ef:53:
77:81:5d:a9:67:7d:a5:0a:71:73:bf:f2:bb:3a:f2:d6:53:22:
3d:c5:c9:2d:91:50:27:cd:84:40:f1:90:ee:21:70:29:f0:4a:
dc:c3:cf:38:3c:66:62:41:20:c5:d1:87:d9:11:21:25:23:17:
ac:5f:d3:0b:70:da:bd:9e:e9:47:45:b8:9a:ae:2f:03:a6:f3:
11:6b:12:33:7d:32:82:30:39:e8:0f:d3:13:52:34:7e:19:65:
37:43:f2:56:9e:98:1e:9c:53:30:48:b2:e6:73:04:bc:70:91:
97:56:05:92:f0:2b:1c:41:e2:c8:5a:20:98:db:8c:71:a5:0f:
13:1c:7b:f1:3b:86:6f:e3:2c:ca:76:22:7b:9e:8a:2f:b4:0b:
dd:9e:a7:33:a9:cd:9e:ff:0a:d6:71:06:56:b8:79:0e:6f:12:
2e:4d:d9:71:0d:b6:4b:3f:e5:87:d6:03:f3:bc:6b:94:a8:a1:
cf:95:82:60:e9:8b:63:1e:5b:4f:fc:06:d7:32:13:64:13:a6:
13:11:fa:c0:bb:43:ec:41:b6:2b:13:82:f3:77:55:9f:d2:82:
98:52:0e:00:de:b3:9a:62:a0:e1:c0:b9:7a:2d:4e:48:96:dd:
bc:0f:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:33:56 2026 by rpki-client