Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier: AVXDRlsg+WBLMYIg+9pXeQWR+4GR3ALRcnZA8QV7Mc4=
Subject key identifier: 95:6F:86:7E:A7:0D:25:41:EB:6B:D9:18:37:B1:8E:50:44:3A:4C:2A
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 019D3789AEF6A46E2EF8014A7D1D1412DC7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number: 0F82
Signing time: Sun 29 Mar 2026 03:01:03 +0000
Manifest this update: Sun 29 Mar 2026 03:01:03 +0000
Manifest next update: Mon 30 Mar 2026 03:01:03 +0000
Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: D5n1UgxuRAkdxVZfPbrPC3wPJdPtCaaZHH1dgstG8XM=)
2: kUYY1Q4-v9Q6exQgCpt_jTplt24.roa (hash: L8NHXT8Vz2l7Z8N60RDMTVs4PiVsANYIsY9CEDH7bQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:ae:f6:a4:6e:2e:f8:01:4a:7d:1d:14:12:dc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Mar 29 03:01:03 2026 GMT
Not After : Mar 30 03:01:03 2026 GMT
Subject: CN=956f867ea70d2541eb6bd91837b18e50443a4c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:77:15:15:b7:af:35:0c:2d:34:64:9f:c0:
ee:7e:20:d3:e8:29:bd:8b:25:84:05:4b:9c:af:e5:
e6:b8:d4:a2:f4:5e:5d:7b:f6:83:b7:8d:2d:e7:b1:
7e:b5:f5:27:5d:ce:12:29:c0:03:b3:04:b3:d5:1e:
e0:b6:48:99:f0:e3:0e:5d:e1:29:e2:0d:11:50:4a:
0a:48:5f:c9:1c:6a:b7:6d:f0:81:7c:a9:75:e5:67:
3b:92:c1:e9:f6:ef:4c:a8:f6:bd:ad:c8:9e:87:b0:
f3:e3:97:60:74:0d:ce:92:2f:c0:e5:84:df:02:36:
51:e1:c7:6f:39:33:9f:52:58:0f:42:84:41:ed:e7:
b9:4e:88:49:89:44:b8:32:bc:b5:88:7a:55:32:51:
49:77:e9:20:56:99:08:63:ff:cd:f7:e1:f3:a6:bd:
8a:61:15:5b:94:26:24:8b:8e:7a:ee:87:df:16:54:
45:5d:d2:ad:31:98:64:e0:28:a1:ff:7c:ff:10:d5:
e1:a0:0b:c9:e5:71:b9:9f:0d:e0:5d:87:5c:00:8e:
b1:06:99:21:1c:d2:40:1b:e7:71:de:d9:95:96:e3:
d1:5d:1e:a8:e4:3d:c4:3e:62:c1:62:65:03:ed:11:
ac:04:fb:42:f1:28:02:e3:17:b7:8b:4c:7e:fb:08:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6F:86:7E:A7:0D:25:41:EB:6B:D9:18:37:B1:8E:50:44:3A:4C:2A
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:02:f0:75:3c:ce:35:e0:08:cc:ed:ab:de:b3:b2:b1:44:27:
2c:ed:d5:11:10:6a:6d:ef:6e:93:02:c7:1a:a4:ef:97:41:b4:
a4:cd:c2:9e:42:39:f1:31:50:06:97:63:93:bd:f7:ef:05:fc:
77:f3:e5:1d:53:ac:d8:0c:ff:23:66:15:02:80:ad:dc:53:47:
c1:89:99:2b:1a:4f:6c:f9:ef:71:6b:00:95:a9:7f:18:06:e5:
d6:80:07:97:28:cb:6f:7d:de:6c:52:b0:00:5c:6c:a0:fe:3d:
12:c8:7e:ce:7b:a6:4d:e9:44:f6:e9:2e:2b:aa:47:8d:23:fb:
e6:96:0d:6b:f3:2f:8f:04:e1:15:29:14:52:f9:6f:0c:e2:6a:
bc:ff:25:22:b3:bd:87:62:1e:ab:92:14:b4:4b:83:ac:be:f1:
d6:75:d5:88:f5:69:db:44:99:9d:39:0d:26:b5:31:03:ee:51:
bd:dd:e0:5d:9f:51:fb:fc:15:f3:46:8b:39:76:65:fc:a9:67:
d1:13:28:85:4b:77:aa:be:f8:d9:eb:35:18:03:74:cc:02:d6:
ff:77:90:11:54:32:1d:49:b6:f5:0b:d9:40:37:76:56:e4:8c:
e5:ad:7e:be:3a:9b:96:5d:78:fe:1e:7c:06:b9:35:b0:4e:00:
7e:cc:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:58 2026 by rpki-client