Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
File: gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft (raw, json)
Hash identifier: kxFte0HrhLl8Shzh0vGdYZLhKntm0/EyDa9t7s+v7xI=
Subject key identifier: 71:4A:52:5F:37:B1:83:B2:9E:18:24:45:98:A9:C9:1B:65:E2:EC:27
Authority key identifier: 81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
Certificate issuer: /CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Certificate serial: 019D38D32135B01598D4C11C9CAFEF6BCFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
Manifest number: 101C
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: 7ly9B-spICGtf03biM302y-qv8c.roa (hash: Q9wd8lqO1aqbdvOMhFFtm6Se5dFT3mbOpspfd9Kex7s=)
2: gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl (hash: +ihTpxkISdz4/81sbRb7leptm2jBHDeIC/FNwjFOG78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:21:35:b0:15:98:d4:c1:1c:9c:af:ef:6b:cf:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=714a525f37b183b29e18244598a9c91b65e2ec27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:ff:bd:e2:b2:aa:56:b7:f9:50:f1:ce:c9:
9e:9d:64:6e:25:3a:b1:26:76:85:91:0d:55:aa:a5:
7d:95:da:23:d3:f6:3f:bb:f0:8e:e3:fe:5f:6e:ec:
e4:e5:c6:4d:fe:ba:ce:d6:b8:b9:e8:b8:47:7c:b8:
77:f9:61:2f:46:07:16:5d:0e:8d:2c:38:56:dd:fc:
73:be:f5:b4:8f:0f:76:e0:bb:2f:d3:4d:28:93:06:
bb:78:cd:81:54:18:3c:a1:d6:ec:d5:50:18:a8:d2:
96:2f:5b:4c:3c:b4:9c:c8:1d:3c:72:76:6e:70:03:
d2:58:7f:62:45:99:f1:cb:e9:ee:11:59:83:1a:65:
c7:b2:d6:e2:3a:11:31:96:8e:f8:fb:77:fe:99:fb:
a1:a1:87:f3:87:bb:fe:26:25:43:cb:b4:dd:59:69:
2c:9d:1f:88:05:42:41:97:17:c2:a1:4b:b1:b5:ed:
85:65:62:df:8d:b6:bb:92:51:b4:60:10:a8:fc:b8:
f5:0d:74:9c:59:0b:c9:a1:60:0a:16:83:61:a7:c8:
ce:80:ca:10:9b:08:7e:16:79:9b:9f:64:b2:60:36:
8a:9b:17:cc:89:56:7e:dd:ae:01:2e:e0:af:98:c5:
81:0d:c7:1a:89:cd:07:b6:b8:b2:7f:c0:81:8f:45:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4A:52:5F:37:B1:83:B2:9E:18:24:45:98:A9:C9:1B:65:E2:EC:27
X509v3 Authority Key Identifier:
keyid:81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:03:6a:ff:cf:83:8e:57:02:5b:20:a1:54:94:96:51:dc:eb:
40:7a:a6:47:ee:a0:48:30:15:7d:7f:7c:99:1c:1d:f0:d5:39:
22:64:ac:5a:e1:7f:dd:e5:f1:d5:5b:0f:0c:0f:6a:cd:49:06:
ea:e6:db:5d:22:c5:81:5a:2f:1b:3d:fe:d6:1a:2b:76:e3:c4:
2b:1b:2e:ed:a8:cd:2d:18:25:03:ef:7c:01:c4:7b:7a:3a:02:
5d:cc:c5:f7:7f:a2:92:2c:1a:4b:f6:2c:30:f9:9f:5e:b6:19:
0c:97:a9:1d:7c:7f:7e:d4:47:ef:0c:03:a3:3c:47:a8:5c:5b:
3e:4c:c4:b8:05:90:42:d5:c9:dc:fb:31:6a:0d:ed:e4:00:4d:
74:38:ad:d3:7e:03:f9:74:c1:6b:ff:17:3a:94:e1:9d:4e:72:
09:ce:0c:94:fd:22:04:9e:18:82:1c:54:ce:91:7c:a1:65:c5:
48:d9:90:31:eb:34:c4:11:56:7e:49:ca:b4:d9:f0:77:95:2d:
ba:d1:5d:cc:78:ba:30:a9:59:fd:7c:b5:86:66:af:00:a8:10:
b3:71:33:9c:d2:d8:36:5d:bc:86:1e:d0:98:ae:5b:62:7b:f3:
a4:d4:d8:0f:ea:f0:12:aa:14:37:9b:90:93:34:55:67:24:20:
01:b0:d3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:44 2026 by rpki-client