Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
File: gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft (raw, json)
Hash identifier: VF2w7BtEDE/9tzWxWMmso2KXR1l8pKuPSlXwT73qVuM=
Subject key identifier: D5:AC:E3:10:0C:93:1C:2A:86:6C:89:FF:BB:41:C7:C5:40:A7:6C:B8
Authority key identifier: 81:32:DB:9D:15:66:CC:D7:7E:3C:6B:16:81:F4:DF:A4:1F:63:C4:61
Certificate issuer: /CN=8132db9d1566ccd77e3c6b1681f4dfa41f63c461
Certificate serial: 019D382E23BAE40F439869A73E336013F9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
Manifest number: 01AA
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: FVoVHpn4Qw4M_Fq1r7plRt7Lnrg.roa (hash: 9CN//cNUBbRB1+vFVB2QUaRbXhK9uNEcpq3PjuRDWqE=)
2: gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl (hash: mp/a6Rd7YvG3l0N6J0Ppvj7qlpFNXuJAFcSCRED9r1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:23:ba:e4:0f:43:98:69:a7:3e:33:60:13:f9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8132db9d1566ccd77e3c6b1681f4dfa41f63c461
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=d5ace3100c931c2a866c89ffbb41c7c540a76cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:67:83:61:f6:b4:31:a2:09:96:72:99:88:
71:68:63:25:16:8b:86:3a:2c:5d:87:90:b7:66:b4:
f0:d7:5b:77:8d:33:af:02:b0:e1:33:37:3d:a5:b4:
1b:d8:01:21:e1:d7:a4:fb:d9:4d:e4:ba:3d:83:d9:
aa:9c:29:69:db:d8:9f:b8:45:bf:0b:6c:18:77:54:
7d:f4:d5:12:16:ec:78:ed:12:9b:eb:0c:a9:4e:dd:
8f:f9:e6:fb:45:22:e8:97:d9:4b:a7:52:a6:d4:c1:
66:55:9f:1a:58:f5:4e:f6:59:14:c1:06:2f:37:67:
df:3b:57:f1:73:99:ab:4a:9c:f6:7b:55:59:c7:16:
da:a6:ea:69:1b:18:3a:4a:10:09:98:42:c7:b3:e2:
4c:1e:3a:01:0a:66:af:52:20:97:31:c2:6b:cf:0a:
1f:04:fa:c7:3f:f6:8e:c8:e9:25:97:10:fe:2d:f9:
42:82:aa:73:f7:f1:3c:de:ec:ad:19:a3:66:04:7b:
30:4e:b5:34:5a:70:7a:4b:c8:4d:12:95:ce:65:e6:
42:78:70:b7:b1:4a:7b:53:41:00:ba:cf:a8:98:e2:
98:5b:c7:82:b3:b3:26:27:6d:fb:66:17:ce:c5:f6:
22:3f:74:4e:36:ef:b5:ee:e4:7a:a7:17:bc:cc:25:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AC:E3:10:0C:93:1C:2A:86:6C:89:FF:BB:41:C7:C5:40:A7:6C:B8
X509v3 Authority Key Identifier:
keyid:81:32:DB:9D:15:66:CC:D7:7E:3C:6B:16:81:F4:DF:A4:1F:63:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:95:21:ab:77:5e:a5:f0:1e:51:8f:02:92:aa:d0:03:65:2d:
df:98:6a:4a:16:4a:52:0e:ed:f3:06:42:e5:8b:1d:11:77:72:
89:dc:e1:94:dd:dd:e4:36:b4:0a:fc:6b:3c:04:4d:97:64:77:
c6:97:96:95:d6:c2:34:ef:7a:9e:6d:4c:0d:0c:a2:ac:bc:f9:
04:48:df:eb:ea:08:00:1d:50:95:51:89:f0:5d:47:3b:1c:07:
aa:68:6b:d8:98:56:19:ee:c8:90:c5:be:2d:06:ff:24:1d:76:
0b:53:8c:bc:a8:90:f8:84:e6:bf:f7:68:5e:fe:20:9a:b9:2a:
85:14:ea:5a:7c:b8:4b:33:07:fa:80:13:32:e5:ca:0f:c7:51:
05:8b:fc:06:34:ce:e9:53:22:1b:98:9a:de:dc:c6:49:fa:4f:
e3:d2:e1:78:04:f8:3c:88:81:f5:6a:bd:fb:66:86:d7:5a:bc:
87:f5:bc:97:09:52:08:36:c2:53:df:d9:f6:0b:04:e1:f1:a1:
43:26:ca:bf:d3:34:86:86:54:ef:39:14:d2:f9:e9:9a:94:b1:
ca:89:5b:63:b7:1e:07:58:91:2e:4f:8e:1f:fd:a6:da:b5:61:
78:94:e6:60:2a:4c:4e:f7:24:8a:5f:f8:e5:60:8a:1d:09:f2:
e0:ec:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:49 2026 by rpki-client