Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
File: gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft (raw, json)
Hash identifier: in/+PUeL5XaAPhjHsWUeGObT+tcSgqyR7oSfDAJ/910=
Subject key identifier: AD:D3:7C:F8:99:A2:51:A2:5C:8D:DF:03:59:95:BB:D0:12:E9:38:36
Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
Certificate issuer: /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Certificate serial: 019D3940C953FABAE957330F1928F4489E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
Manifest number: CB
Signing time: Sun 29 Mar 2026 11:00:40 +0000
Manifest this update: Sun 29 Mar 2026 11:00:40 +0000
Manifest next update: Mon 30 Mar 2026 11:00:40 +0000
Files and hashes: 1: BNfWhef-AH3Hj51_e3WKaO0eMGc.asa (hash: u14YsvwGhBCXtoL/jKVRUWsIFwxVP+jxqzPXhU4hG6g=)
2: gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl (hash: Ax3hS0V+ZdbW+8+BsojkTD+He0J1MCLmxawgfbAR04Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c9:53:fa:ba:e9:57:33:0f:19:28:f4:48:9e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Validity
Not Before: Mar 29 11:00:40 2026 GMT
Not After : Mar 30 11:00:40 2026 GMT
Subject: CN=add37cf899a251a25c8ddf035995bbd012e93836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:e8:6b:6c:75:6c:27:cd:84:dc:23:e9:68:
50:bc:29:29:05:ca:f1:2e:44:c3:59:30:52:e6:60:
dd:f2:65:5d:e1:2d:62:d0:b2:28:89:4e:d2:f2:fb:
27:de:dd:45:90:f4:6a:60:7f:1f:d4:6c:17:53:1d:
78:fb:b8:68:87:ec:a8:b1:d9:28:91:76:c2:1e:fe:
43:a8:fa:a1:ef:a0:7f:85:fa:55:bf:1d:0b:13:62:
9b:b3:eb:8e:6b:86:35:e7:1e:97:8a:06:f1:37:2b:
04:a3:6f:3d:39:95:f0:ce:65:f8:ae:d9:91:e9:7e:
f6:20:55:5d:ae:f7:1d:26:2a:e8:15:11:38:47:3e:
ee:e8:6c:36:43:aa:e5:36:0b:17:32:c6:a8:6c:d1:
73:0e:09:55:cb:33:27:c6:d9:b7:c1:49:20:ab:8e:
b9:23:c6:5a:9e:6e:2a:e5:29:1e:ce:6d:aa:6c:05:
a2:4e:87:f9:fb:9c:e9:24:8b:2b:1e:2c:9f:0c:b3:
41:98:c8:0e:98:b5:4d:83:89:da:de:36:cd:53:ae:
5f:7e:43:e5:2b:39:ae:61:13:dc:e3:e6:50:d0:5e:
57:14:f4:92:73:76:02:93:8e:a1:30:85:28:26:f7:
a1:e8:50:fc:16:ad:9b:9d:b0:e5:8c:03:59:07:95:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D3:7C:F8:99:A2:51:A2:5C:8D:DF:03:59:95:BB:D0:12:E9:38:36
X509v3 Authority Key Identifier:
keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ce:b7:5c:86:a1:08:c7:66:9b:cb:e8:21:aa:34:cf:dc:b6:
ab:25:d2:8e:8a:3e:fd:c5:70:fc:55:12:05:18:5e:08:ff:a6:
30:32:a8:dc:e0:a8:94:8b:12:af:17:31:a1:f9:6d:c0:72:0c:
c3:60:64:6d:1d:60:1b:bd:c9:30:6e:d9:36:97:b5:10:4b:ea:
42:47:55:f2:74:8a:8b:96:e0:a8:a2:da:a8:11:d5:ca:7f:b6:
75:ba:8f:6b:88:bd:fc:54:97:91:41:8f:c5:34:e6:a3:af:66:
e2:e0:4d:ab:ed:98:52:f5:f5:97:8c:a8:72:25:a0:f8:ea:39:
23:61:5d:a3:2e:dc:41:85:70:2b:36:41:a5:06:aa:e6:64:0a:
d2:c2:b1:1f:3e:35:6f:3f:65:eb:05:98:6d:e8:15:1b:da:fe:
f2:0e:45:de:ae:f6:80:99:9e:d0:45:44:31:ad:e0:e5:9d:c8:
9e:46:93:5f:3a:68:d7:e7:c9:6b:c1:21:80:30:f2:13:82:78:
fb:4a:92:f7:3b:26:d6:54:4a:3c:b4:42:2d:4c:a4:13:44:24:
50:75:ca:e5:23:0b:3d:d4:b9:e9:27:74:c7:5e:d7:39:a1:9a:
ef:7e:77:0e:b9:ed:b4:84:6d:77:ac:12:29:96:5d:6f:6c:36:
b3:7b:c0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:15 2026 by rpki-client