Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File: gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier: Q4QF/wOTZEmnBppTXi8bikoYk5h5gU95esnaQKS/Oh0=
Subject key identifier: 0F:EB:47:9C:E7:18:98:A1:8A:E1:51:F5:0E:76:D2:81:24:5D:FE:36
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 019D382DF882579E4DD08B331F0DB7BEF65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number: 1769
Signing time: Sun 29 Mar 2026 06:00:29 +0000
Manifest this update: Sun 29 Mar 2026 06:00:29 +0000
Manifest next update: Mon 30 Mar 2026 06:00:29 +0000
Files and hashes: 1: PsabYp2ySYYY4yWAvK9dKL6YUH8.roa (hash: vZfpMIjc6fu7umjV0/mcBQ6XxsIN7kJ9lIrou1yREPE=)
2: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: oGaxZrN8u0Rt3nwc4agfT9GM4aLLbCx5FWKjK+eAivc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f8:82:57:9e:4d:d0:8b:33:1f:0d:b7:be:f6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: Mar 29 06:00:29 2026 GMT
Not After : Mar 30 06:00:29 2026 GMT
Subject: CN=0feb479ce71898a18ae151f50e76d281245dfe36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:f7:63:14:8e:5b:64:f3:51:0a:5b:d1:da:
3a:7b:fc:1b:4c:7f:8b:a5:00:32:75:48:a0:2b:e9:
82:72:02:fc:20:0c:3a:86:b2:c0:f4:78:d7:4d:b0:
11:8b:eb:45:02:cf:38:b7:26:54:9d:09:e0:4f:9f:
c5:ac:cc:73:10:f6:56:0a:1e:11:76:39:35:79:db:
3e:23:fa:6b:37:60:50:9a:57:6a:b1:0f:d5:65:5b:
ed:4d:72:26:8c:39:7d:27:4c:86:da:bf:b4:c7:89:
36:b2:41:9b:82:32:65:65:83:e7:fc:b0:67:d6:26:
b8:77:c9:3b:05:e2:44:b5:55:cf:46:91:40:86:55:
7f:6b:44:df:e4:05:fd:06:bc:fe:2a:d8:9b:ea:c6:
b0:22:7c:35:ca:9e:f0:1b:76:b0:7d:b0:2c:63:b7:
ad:29:69:14:ce:07:69:f8:1e:dc:79:5e:7c:ff:54:
c1:2a:72:53:47:2d:d6:5f:53:01:0e:67:70:19:cf:
46:b6:be:e1:a4:e6:58:5c:04:de:92:bb:d3:0a:7f:
95:10:f4:6c:82:f6:2c:c3:03:9c:0f:cf:b9:16:59:
db:4b:d2:41:66:71:35:fe:81:38:53:b1:af:80:e6:
a5:d6:54:a2:ae:ca:95:62:fa:fb:c1:14:d0:34:55:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EB:47:9C:E7:18:98:A1:8A:E1:51:F5:0E:76:D2:81:24:5D:FE:36
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:45:2c:3b:a8:2b:61:f7:3a:7e:3e:8f:0f:94:5f:8f:42:1c:
9a:be:b7:f8:5d:37:44:d6:36:ba:41:2c:ab:29:ae:0e:98:9a:
27:92:f4:75:d6:52:7e:7c:6e:3b:af:7d:ec:38:b2:9a:d7:32:
6a:e2:90:3c:eb:b1:57:b1:2b:65:79:ee:c7:e4:18:df:1f:ec:
5b:74:21:88:dd:ce:5c:7a:de:f0:cf:d1:4a:d2:b3:72:7f:4a:
6a:ba:c7:ea:ec:51:be:d1:64:e8:57:05:69:bd:cf:6c:e3:12:
37:59:8c:f1:50:96:7b:dc:49:b3:37:41:4a:ef:f8:ff:08:0a:
e9:3a:6c:a6:f3:6c:74:7f:bd:c3:e0:15:90:de:4d:24:2f:12:
58:5a:80:55:77:71:01:9d:46:2c:5c:1c:94:0f:b2:77:4a:5f:
79:32:4c:93:19:b2:39:e9:bd:e0:e6:5c:e2:75:5b:a8:5e:1b:
57:1e:ec:0a:00:bb:67:d7:91:18:50:b5:13:4a:97:d9:81:93:
38:63:ab:5d:97:ac:45:1d:48:14:11:37:7b:00:96:72:eb:23:
ad:32:78:98:e2:ae:af:b7:4b:7e:c6:9c:38:17:91:3c:8d:0c:
04:70:b1:40:a5:76:9c:d5:c6:1c:be:da:69:69:01:1a:a3:1a:
47:c9:47:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:42 2026 by rpki-client