Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: bLqsuXqi5J2AtQVPXzIPNOWLA8n7sRVwtM3fmKFU4KI=
Subject key identifier: 1B:6C:1A:4A:0B:A2:77:BA:15:BC:76:82:1E:98:CF:25:A9:21:5C:AC
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 019EACAF53AB840190E28C80DA7667FCB781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 08A2
Signing time: Tue 09 Jun 2026 14:00:31 +0000
Manifest this update: Tue 09 Jun 2026 14:00:31 +0000
Manifest next update: Wed 10 Jun 2026 14:00:31 +0000
Files and hashes: 1: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: ZZ2utByyZ0XfIYw+iNinYJKuotR9hfh9zY17DZyVWEg=)
2: zD728h1UCihkQAXpX92CPXnx1Gs.roa (hash: jxmfADV7fNflCtFxiDKR6culeD+Aw9hg4Dg9BnOAg8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 11:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:af:53:ab:84:01:90:e2:8c:80:da:76:67:fc:b7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Jun 9 14:00:31 2026 GMT
Not After : Jun 10 14:00:31 2026 GMT
Subject: CN=1b6c1a4a0ba277ba15bc76821e98cf25a9215cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:42:7f:23:2c:87:7e:34:16:d0:86:da:7a:
d4:f8:f2:1a:33:71:15:ec:d0:08:ca:68:b0:36:c7:
8f:47:0a:f6:a8:7b:70:c4:d2:70:66:d7:f7:78:29:
69:82:57:17:e6:ab:6f:10:f9:f7:42:99:3e:dd:86:
6f:c8:8f:1a:d8:a1:a3:3b:c2:de:d8:07:8d:1e:40:
48:4b:91:d8:6c:c5:b3:0d:24:54:d4:65:15:e9:29:
c0:16:e5:28:b1:24:75:90:14:5b:42:d4:be:67:4f:
34:e2:ee:9a:fd:89:16:8f:a4:28:13:6e:00:a3:69:
0a:98:0f:fd:d2:4d:c8:de:b9:dc:81:e9:3b:f7:18:
d9:1a:ca:e1:89:8c:d7:3d:e0:5e:be:80:4d:6f:cf:
b3:17:4f:f7:87:ca:de:6f:da:54:36:af:e0:f5:1e:
b2:ff:d5:b8:91:3a:8c:1a:a8:05:eb:38:b4:42:5b:
c9:0b:b7:1c:c7:c2:f8:99:01:b7:a5:74:c3:58:15:
7d:79:27:e9:16:a2:85:3a:fc:3e:74:d3:e5:82:b5:
45:c6:9b:0d:a5:d5:7a:4b:aa:74:61:91:f1:70:02:
20:52:ca:da:20:7d:73:41:1c:b1:89:27:6c:67:be:
32:c7:d2:c0:57:09:0f:f1:77:bf:52:27:20:40:ee:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6C:1A:4A:0B:A2:77:BA:15:BC:76:82:1E:98:CF:25:A9:21:5C:AC
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e7:64:2e:a8:67:ee:81:ce:05:49:e7:e3:d0:e4:cb:dc:3f:
c2:bd:c6:66:2a:6d:a4:40:e2:83:13:ea:13:a9:3f:1a:db:e3:
19:67:c5:00:44:28:8d:69:52:a8:71:b2:59:f4:3b:27:1e:2b:
97:78:e5:c7:24:b5:a2:b6:bc:30:20:9c:24:6c:b4:c2:5e:f6:
92:dd:9e:09:05:68:21:e9:61:74:78:4a:e2:8f:39:23:fd:bd:
6f:37:35:0c:66:33:70:92:37:aa:7c:15:66:76:13:8b:ff:d2:
15:1d:f6:10:99:4f:ff:b2:1e:2c:17:12:33:ac:b0:d1:b8:fd:
8e:43:f6:74:bb:42:61:99:6d:0d:cd:59:62:ac:67:16:bb:82:
95:15:67:92:81:50:67:0f:2c:2c:5c:48:c8:68:3a:a4:76:19:
76:23:45:c6:ed:e9:04:41:5b:da:4f:1e:f2:fc:eb:3b:75:da:
5a:be:ec:1b:40:ae:59:f8:18:3a:b3:4b:c1:61:4e:5b:9f:76:
a8:5d:a1:09:d1:5a:db:1d:28:6b:e7:c6:78:ef:e5:be:44:47:
81:31:98:6a:ac:76:8c:88:3b:c2:c4:95:f7:82:6d:2a:7c:d1:
1a:c4:77:4b:71:0a:f6:8e:9c:02:35:3d:bc:c7:99:31:96:6a:
bb:69:57:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 17:43:50 2026 by rpki-client