Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File: gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier: D6uYv4B6Q49I8F3XOzpWUn3XgKh5fPczuBGGP+zS1Do=
Subject key identifier: 35:3F:29:B4:7E:D7:51:81:04:7F:BE:7E:AF:A9:0E:D5:6C:81:0B:1F
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 019DD49BF3DCFC5ACFDC9378528457D4B4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number: 1918
Signing time: Tue 28 Apr 2026 15:01:23 +0000
Manifest this update: Tue 28 Apr 2026 15:01:23 +0000
Manifest next update: Wed 29 Apr 2026 15:01:23 +0000
Files and hashes: 1: LYrAh5-r5zfHa2U4I2LQcfLsXLM.roa (hash: jNJpzhfWFexwPEvm3W+RsLKQ3L2mSc+llJoqxO6bOhI=)
2: WvR_PyZn7HQBLy1Van9znwED4dU.roa (hash: 5FqxeqmUCHn2vzUhg58G9qJL/lfqVbvp/uqG5bnLGIU=)
3: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: IwVINz7Q3TB5GaZRf5lZjUfbObUWtLxDcDyGs3Z+rDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:9b:f3:dc:fc:5a:cf:dc:93:78:52:84:57:d4:b4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Apr 28 15:01:23 2026 GMT
Not After : Apr 29 15:01:23 2026 GMT
Subject: CN=353f29b47ed75181047fbe7eafa90ed56c810b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:16:d5:fa:42:d5:f6:49:f1:3e:2e:af:d4:
74:f9:2e:55:19:bc:45:a0:5f:a5:6a:ee:63:ad:63:
0b:46:df:ee:0e:f6:c6:bd:51:8e:c8:58:3e:cc:3f:
be:2f:23:7c:ac:33:49:a2:5b:e9:c1:e7:37:8a:c3:
2f:d8:4e:c6:a5:77:39:92:dd:f5:a6:be:00:8e:70:
34:ef:f0:e2:c0:65:d4:74:eb:88:50:61:a3:f6:58:
15:05:ab:1a:b5:53:38:1e:5e:d9:2a:ed:09:6a:7e:
43:d3:b2:69:9b:c9:b8:96:a6:c5:03:ea:f4:22:82:
c4:c5:57:ed:9e:de:93:4c:0e:46:ea:e7:21:3f:27:
5f:0f:20:69:6f:5c:f4:e3:8d:32:68:2c:66:c3:a4:
a6:3e:b7:12:48:d6:1f:3f:36:c3:43:cd:66:4a:36:
51:6b:40:fa:bd:6a:8a:09:a8:18:37:33:d8:0f:de:
0d:7a:17:b6:0a:74:b6:a7:b7:cb:f8:16:d7:4d:9c:
ba:21:55:7d:3f:d4:b3:79:ba:05:3d:7a:5f:14:34:
85:d8:47:fd:34:a0:59:aa:3c:c9:0e:76:49:50:40:
46:76:07:b0:6e:82:09:5d:a4:c5:fa:e4:c6:62:88:
c6:e2:24:a4:87:06:80:9b:01:d6:5f:8e:22:4f:3d:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3F:29:B4:7E:D7:51:81:04:7F:BE:7E:AF:A9:0E:D5:6C:81:0B:1F
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f3:4c:5b:60:d0:f8:7e:0c:18:83:97:45:5a:21:df:e6:ed:
68:52:7a:bb:6a:91:0d:03:99:82:d1:16:89:ac:34:30:0e:0c:
fb:4f:e3:fd:c3:4e:16:a8:fb:0e:61:79:3c:dd:a7:a7:6e:66:
f6:f0:84:4a:0e:6a:64:ae:c7:eb:46:32:8b:e2:13:e7:a1:31:
65:47:1d:31:da:f8:20:bd:83:d5:09:99:78:d1:52:be:8b:70:
bb:f4:6c:5d:9c:35:1e:7f:4d:10:b6:31:1b:16:73:6f:a5:68:
22:ea:6a:c3:cd:aa:b8:16:2a:12:f3:69:32:2c:c6:d5:c6:d5:
fb:db:49:7a:5e:3f:69:1f:de:8c:8e:0a:31:2c:cf:3d:b3:3b:
39:f1:a5:13:a2:81:11:20:71:bb:44:42:50:80:1e:18:7d:7e:
68:c8:20:05:5e:9b:f1:01:af:b8:40:c4:06:c3:cf:31:0a:c9:
d5:36:17:7e:af:ed:da:3e:91:4d:e4:c6:7d:f9:cc:d8:c3:bb:
df:7e:f9:55:82:c7:8b:64:36:60:53:43:33:c1:74:4d:1a:d9:
97:b4:17:d6:9c:71:ea:03:44:d9:a8:0c:fc:6c:6b:3c:8b:a3:
b2:f3:3c:0f:27:6b:be:a2:b1:0b:29:c3:3a:f9:2d:6a:6b:63:
2c:be:ea:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 18:42:58 2026 by rpki-client