Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File: gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier: H1t+1fKWaNMoqv1TOMC7ZkvltgZtxM9HRDcDw5IhV0k=
Subject key identifier: A4:A9:E0:F4:7F:1D:95:A3:0D:F3:4A:86:26:65:93:EB:B4:1F:44:0F
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer: /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial: 019D37F725B7273D5ADDECAD5AC43EAF22C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number: 04DA
Signing time: Sun 29 Mar 2026 05:00:37 +0000
Manifest this update: Sun 29 Mar 2026 05:00:37 +0000
Manifest next update: Mon 30 Mar 2026 05:00:37 +0000
Files and hashes: 1: 9VgFj1U5AyYKHqnm3AK0iZ8EyZY.roa (hash: y0d6gj7QyX83YX1GU3wakz/LTeS7oSLMM+wcVlzLLQc=)
2: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: 8NFh8bv4EnPCq1lVIu4WQn+LaDStdhXtF+HyNVkVrWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:25:b7:27:3d:5a:dd:ec:ad:5a:c4:3e:af:22:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
Validity
Not Before: Mar 29 05:00:37 2026 GMT
Not After : Mar 30 05:00:37 2026 GMT
Subject: CN=a4a9e0f47f1d95a30df34a86266593ebb41f440f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:12:cd:8c:b5:67:7c:32:ac:db:6c:30:58:
72:77:0d:0a:c0:95:b8:d7:90:cd:1e:2f:30:0d:d5:
e7:a1:3e:a6:a6:04:4e:d1:01:20:e1:f4:b4:70:3b:
0f:0e:65:d5:0f:df:29:3c:4c:5a:4e:82:15:d1:6d:
d6:29:a4:42:8e:45:8a:67:56:d6:8e:69:b7:5d:03:
a1:a0:a8:1a:71:9d:33:a4:d7:2b:85:d3:bd:7e:0b:
83:7a:eb:50:77:cd:94:87:32:a8:9a:75:e7:b8:51:
dd:5d:75:16:39:3f:55:1c:a9:28:78:80:e3:07:3d:
4d:10:f1:02:41:d6:64:cc:12:07:09:b9:ba:44:45:
1d:ab:79:a5:74:90:0b:16:9b:63:af:1d:97:b7:0f:
e8:ad:93:4e:27:29:7b:98:05:7a:03:f1:d1:79:5f:
d1:6a:b6:0a:e2:da:c8:a8:74:4f:53:fe:ec:2c:d7:
97:96:9b:83:b2:ed:b9:2c:4d:24:83:28:27:73:25:
65:e1:a4:9d:53:1e:a2:d3:68:53:9b:81:9c:27:71:
e6:4e:0b:65:11:0a:c0:d1:f4:4e:41:38:7b:2d:5e:
3d:ce:a1:e0:8d:42:9e:92:4b:96:cb:04:ca:f4:34:
21:ac:ab:38:40:fa:9b:6d:50:00:85:d9:1f:17:96:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A9:E0:F4:7F:1D:95:A3:0D:F3:4A:86:26:65:93:EB:B4:1F:44:0F
X509v3 Authority Key Identifier:
keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9a:ba:d0:27:0c:b4:6e:a0:b0:2f:20:82:01:02:09:e2:6a:
d6:4c:e6:80:28:8a:d8:54:5f:4c:33:de:db:71:65:9f:b1:16:
29:f8:92:64:5e:6f:58:71:dc:99:52:35:81:fa:32:13:e1:10:
30:ef:2f:83:e2:49:e8:4c:fd:d3:dd:7b:70:52:05:d6:54:55:
7c:fc:2b:33:de:73:ec:4b:79:45:c5:05:36:43:e7:7e:90:a8:
fa:74:e5:57:5c:7e:2a:4a:aa:6c:77:75:92:b6:c0:bb:7b:bd:
96:a9:ec:6e:7d:f1:c2:50:e0:f3:3a:a9:33:46:bd:9d:11:67:
ef:ca:21:1c:28:27:3c:72:34:73:03:ad:b2:70:65:4b:e6:60:
1a:09:f5:0c:dc:28:3e:aa:4d:e6:91:b2:73:56:fc:ec:d8:3b:
c1:a5:17:a4:59:27:1a:7b:a7:20:14:77:3c:e3:2d:03:dd:38:
17:7c:8e:44:74:81:60:8c:bb:dd:7f:30:8f:c9:68:3c:35:bc:
1b:95:13:06:0f:58:d9:97:a9:22:a9:75:98:4b:81:59:4d:09:
58:aa:f3:82:70:1f:24:b1:b2:b1:9c:f8:34:3f:d0:78:87:5c:
3b:bb:7a:ae:e6:3b:15:28:bc:fb:70:9d:11:84:16:23:96:cd:
74:f2:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:02 2026 by rpki-client