Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: AdKJpRXknAkITZIG/ea7Fr/+zSs3HGGgi4oIQRI/zac=
Subject key identifier: B6:EB:03:AF:2B:89:27:E6:10:CF:F5:FC:91:95:CF:89:EE:63:71:C2
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 019CE447F64954414C92558D57AD9372A87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 1385
Signing time: Thu 12 Mar 2026 23:00:47 +0000
Manifest this update: Thu 12 Mar 2026 23:00:47 +0000
Manifest next update: Fri 13 Mar 2026 23:00:47 +0000
Files and hashes: 1: MKLnBwEoTvJQ6Ll9HAStk_6b-lo.roa (hash: UcMYN8ihICS5eRjwAvcwUGC2jCQeNNKHfqsuNIFnBhE=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: VkyXL6RC8lrncv9jOjk2OA1YQ8q4NNIxlbaBi1SoI1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:f6:49:54:41:4c:92:55:8d:57:ad:93:72:a8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Mar 12 23:00:47 2026 GMT
Not After : Mar 13 23:00:47 2026 GMT
Subject: CN=b6eb03af2b8927e610cff5fc9195cf89ee6371c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:53:3e:e9:36:17:fe:9f:72:3b:c9:81:dd:63:
91:cd:da:08:c1:e9:3e:b3:99:fd:23:50:11:c9:55:
d6:84:ea:6c:ab:50:2f:00:41:1a:25:7b:7d:f5:2a:
7a:d5:86:b4:27:f8:63:9d:1f:56:5f:90:3e:f0:a3:
f0:2c:c2:9a:9a:9b:19:6c:8b:11:4b:ef:e1:5c:85:
6e:bf:d9:82:8d:b1:f6:3c:8f:95:8d:6c:ef:2b:8d:
0e:40:e0:d5:9e:47:b4:1c:b5:e8:5a:fd:2c:71:d8:
8c:ac:3e:b0:54:3f:0b:55:37:59:55:78:52:2e:01:
be:58:6c:ac:c0:24:90:e7:3e:b3:77:f9:a7:d2:4d:
55:de:86:4b:0c:c5:53:dd:87:91:04:28:08:d3:35:
a5:57:ed:6a:d7:c0:f9:f3:77:4f:6f:5f:e9:eb:c2:
f7:4c:ec:0a:6a:5c:03:06:cd:b5:1d:98:d2:e9:47:
2c:b0:0e:5f:54:c3:18:c8:6e:67:ca:29:77:8e:cd:
30:4f:2f:5a:52:fd:2b:6f:db:78:99:65:ba:73:4e:
bc:11:96:bd:6e:4d:88:1f:b7:cd:7d:cc:d5:08:48:
61:37:cb:7c:64:0c:27:64:ca:3d:52:96:81:51:4a:
37:bf:4a:6f:0e:c9:30:a3:2c:93:86:02:d6:36:6a:
cf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EB:03:AF:2B:89:27:E6:10:CF:F5:FC:91:95:CF:89:EE:63:71:C2
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:44:2c:69:3a:d9:88:56:c8:37:85:25:04:b8:0d:e2:f7:8c:
ad:16:8d:55:7a:7a:e7:cc:96:c2:5d:72:c1:82:dc:3b:31:e8:
32:7e:85:29:be:03:c1:31:12:b9:0a:b3:db:d2:7a:37:86:02:
8e:a4:39:11:01:1b:3e:ae:1a:1e:7f:74:15:8f:52:a9:1b:d2:
25:0b:8d:8f:b1:5b:56:86:ed:47:84:38:b2:77:85:92:f1:ba:
a0:28:8b:60:c4:d0:f8:80:b4:79:87:96:54:c3:70:97:27:be:
54:dc:6e:40:51:2e:27:18:34:06:9e:e0:f4:fa:a8:ec:2c:af:
c2:40:41:63:64:0c:cc:df:f0:43:f6:aa:b5:1a:66:d1:7a:8c:
10:42:dd:e9:01:2a:61:9d:dc:ec:d6:c3:2b:3e:7e:7c:e4:f5:
69:d0:0e:b0:82:5d:60:38:b3:ae:8d:ac:19:0b:43:f1:71:72:
04:60:3e:64:02:e5:26:ec:4c:35:2a:bb:b6:a9:1e:b0:46:a6:
01:9c:1b:51:1c:ef:b7:ae:8a:f9:ca:9e:fc:5c:b5:48:b7:48:
de:6d:9b:61:b5:e8:1f:f9:90:f9:02:50:4e:05:51:44:5c:e0:
21:90:cb:6b:bf:fe:f3:35:f1:a8:32:53:ee:ad:82:4c:53:76:
5e:8e:5b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:41:04 2026 by rpki-client