Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
File: gs1f087z4cqiC7ph-i1RtrlOtU0.mft (raw, json)
Hash identifier: 025jLwgUhUjqAQEmAtO94GnhL8tOylLfks1ctnDCz34=
Subject key identifier: 09:55:7C:4D:35:00:EC:10:05:EB:72:FC:28:B7:5C:13:D7:BD:AB:B8
Authority key identifier: 82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
Certificate issuer: /CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Certificate serial: 019D38D33F2F55E1C67E28A73C146A950AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
Manifest number: 0A0C
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: 18OuO3YLBaVeqqlU-R18PjcKR2o.roa (hash: NlnhsswwnMpwMkpGryqI6bDof76aAgmGxVw0Adxc50I=)
2: gs1f087z4cqiC7ph-i1RtrlOtU0.crl (hash: rmxBwRx7Qekoal972eQVI+3mbHfx69E7FlSao7Ejd2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3f:2f:55:e1:c6:7e:28:a7:3c:14:6a:95:0a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=09557c4d3500ec1005eb72fc28b75c13d7bdabb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:41:c2:a3:e3:53:c6:ca:4f:cc:a1:45:73:
58:02:de:69:b8:40:bc:28:ef:cf:33:fd:0a:59:d5:
10:81:c5:52:05:79:63:93:3d:56:56:d6:e4:4b:9b:
11:2f:c1:bc:29:80:53:12:7c:3d:bf:f0:c9:6f:30:
e9:b4:a8:8e:37:7e:8a:61:b6:28:a0:df:25:19:07:
6a:dc:8d:f4:e5:d3:5e:85:61:50:b4:39:8d:a2:ad:
80:65:21:92:46:3f:c6:cb:84:b1:9c:99:b4:24:c4:
dc:46:cc:cb:ae:41:d7:8e:6c:be:b7:2f:15:00:1b:
83:a5:5e:28:86:16:85:e6:bc:cd:c6:f4:30:6c:49:
22:68:2d:c4:62:90:cc:a8:d3:55:f3:8f:64:bd:ef:
8b:de:3a:76:4e:d9:bf:10:fe:ef:a9:04:c1:bd:83:
55:f8:82:4a:e5:dc:8a:26:d4:82:34:44:89:7a:09:
b4:79:bf:bf:66:2b:4d:65:ae:86:be:5e:fb:d4:ca:
bc:68:2d:fc:7a:3a:29:3c:4e:2c:0f:0b:eb:47:64:
a3:a8:66:a2:9f:21:bd:3e:d7:90:99:4b:f0:8a:82:
82:c6:63:7c:54:20:e3:8c:5c:2c:1a:fc:a4:b1:92:
2d:c1:4a:ce:4d:1b:05:2b:77:53:de:06:8e:1c:72:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:55:7C:4D:35:00:EC:10:05:EB:72:FC:28:B7:5C:13:D7:BD:AB:B8
X509v3 Authority Key Identifier:
keyid:82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c4:c0:33:7a:13:d3:4d:8c:6b:e5:08:0e:f0:c8:97:f5:30:
ee:20:c7:40:54:eb:7b:78:dd:ad:39:7e:60:11:95:6d:2a:f2:
df:1e:52:cc:c1:19:3e:2e:68:0f:58:16:9e:23:a3:73:d9:61:
20:f3:03:4d:d2:90:58:13:24:da:a3:4d:ad:d9:42:80:6e:d8:
36:47:74:84:9f:36:03:74:a4:53:67:d1:ff:04:59:30:eb:a0:
85:c5:31:ef:12:27:56:a3:bd:d9:f7:1c:45:fa:64:74:11:ad:
88:c9:e2:67:aa:30:50:d6:ed:9d:6b:e0:a3:ef:cf:f8:fd:04:
07:89:44:aa:cc:86:03:4e:61:09:d0:0e:99:0f:73:cc:40:e0:
5a:9d:0a:3d:7c:6f:f4:95:f8:5d:a8:e7:16:15:95:df:97:e7:
c1:e8:86:c4:71:48:b8:25:54:b5:d1:fa:d4:a0:a0:85:b9:73:
aa:ff:10:df:00:d2:6f:95:ff:4d:64:23:0e:e3:cd:65:a3:54:
29:93:70:0e:23:ab:90:d3:84:83:09:63:cf:fa:35:77:de:e4:
d5:54:ce:22:ec:e3:af:1c:0f:97:15:17:0b:64:d8:f7:95:6a:
aa:fa:c0:0c:dd:57:35:0f:2d:75:1b:e9:b0:aa:79:63:1b:c6:
e0:a9:93:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:45 2026 by rpki-client