Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: 5jRmtca6wewk4pwpgPilngOh6+HHfOV/urqZ8dFuXrw=
Subject key identifier: 62:FC:CC:1F:4D:67:F0:7F:A0:89:44:4B:81:FD:57:57:45:F4:89:B5
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 019CE6365D2ECDCE2A70A99C457379579F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 186D
Signing time: Fri 13 Mar 2026 08:00:48 +0000
Manifest this update: Fri 13 Mar 2026 08:00:48 +0000
Manifest next update: Sat 14 Mar 2026 08:00:48 +0000
Files and hashes: 1: 6YPsOlRZXzuXQifr40HsQHwppWA.roa (hash: 9XfpJtIAsjA2wiVUM5ZPG8hWeFlnclvOECDaYGybS4o=)
2: azo6oNDfWvxjhbTnCLvYx7uGQEg.roa (hash: LHMP4JoVnCkP5xgr60RpByWPQJHL/KBW7CXT+FDaByU=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: YjYT4oANaphm12nxwgw3gbiw6Bu+nqmMfLI+stait9g=)
4: xXiMv43g5gZyliPARvzZ7xyyW2k.roa (hash: lpdFA5yCXN5/FwIwDvBqyIeXJAPjPFSrUa0qNDgv7fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:5d:2e:cd:ce:2a:70:a9:9c:45:73:79:57:9f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Mar 13 08:00:48 2026 GMT
Not After : Mar 14 08:00:48 2026 GMT
Subject: CN=62fccc1f4d67f07fa089444b81fd575745f489b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:11:36:51:6d:2a:a7:29:e5:d4:31:4a:40:
20:18:31:59:6f:1c:d1:a3:57:d8:d3:45:b1:1a:c0:
82:65:07:99:0e:7a:b9:79:d3:d5:3d:ac:83:7e:78:
5a:03:d1:bf:1c:67:c2:f4:7a:09:2c:d2:16:79:ad:
59:15:10:f3:b5:32:36:ea:f3:bd:31:7d:25:63:eb:
cd:06:24:c6:9d:78:11:d9:43:a6:b5:2d:3e:f3:e2:
e1:32:11:b1:db:3d:87:1c:9e:49:69:9c:e9:7d:b5:
a3:25:0b:5c:20:a3:62:bb:b9:69:00:68:70:56:69:
60:e6:55:17:28:c6:4b:3d:70:ad:1f:c3:90:8f:65:
3f:6f:d9:46:ce:02:4e:20:47:7b:8b:a8:f4:3f:d3:
bb:4f:a2:6b:79:30:2e:8a:2f:cd:ba:c0:49:13:de:
17:53:4f:98:11:4d:64:ca:2e:00:ec:53:09:a0:2c:
24:c1:3f:30:b0:f5:2e:3e:10:0d:e3:01:27:1e:9c:
11:34:f5:57:01:70:58:77:75:fb:e4:6a:6e:50:15:
76:ab:c5:dc:d4:73:5e:92:cf:b2:52:fc:98:ac:4c:
5d:92:86:00:13:63:42:1b:da:d4:3a:24:ab:6f:19:
a0:48:6a:f6:41:e2:db:76:98:b6:3b:2d:40:6b:d9:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FC:CC:1F:4D:67:F0:7F:A0:89:44:4B:81:FD:57:57:45:F4:89:B5
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ab:06:e4:f4:fb:d1:a3:f1:bb:1a:ea:69:7b:06:c1:7e:24:
95:dd:83:61:4f:d4:19:e3:22:20:ff:20:d9:67:f3:29:2f:4a:
ce:96:cc:84:bb:b0:51:10:c8:8f:d8:47:36:24:c6:78:6c:24:
4f:f7:75:91:8b:c8:82:27:8a:1f:0e:da:fe:d0:ae:5c:d9:bb:
ec:4f:23:1b:be:57:74:af:88:8e:69:4d:69:9c:95:22:cc:a5:
48:fc:15:30:51:53:0d:7e:ef:ec:2c:35:5a:74:8f:52:68:81:
f7:5b:0f:65:52:7d:a0:f0:d0:a3:e7:57:b3:ef:c6:70:af:74:
18:f5:aa:17:64:fe:4d:48:14:44:a3:58:c7:0a:29:d8:6e:d6:
a1:4c:d8:fb:03:ae:41:a0:cc:4c:5d:50:cd:39:a2:6e:fd:3f:
74:89:fc:21:09:1e:bc:68:62:5a:9d:dd:b4:c5:cf:e0:ce:58:
e5:44:2a:58:f5:c8:63:c2:f1:ce:4a:af:0e:14:d3:92:eb:da:
6d:a2:0d:36:6e:fb:62:a7:37:47:91:7d:cd:f6:1a:1f:c7:c9:
0e:7c:86:a5:5a:0b:3a:ee:cf:95:8c:b7:6d:28:9f:be:32:6d:
60:72:2a:c4:64:60:99:9a:f0:f0:6e:b0:b8:e3:97:a8:df:5a:
f7:de:db:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:38:00 2026 by rpki-client