Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
File: gvWThvzeWW90WQde3qTXTBmwHKI.mft (raw, json)
Hash identifier: 5sbtBG223hjNIYr1Mg1PsiihNnvg2LxblaihhvwhhmU=
Subject key identifier: 95:2A:8A:64:44:7D:42:BF:89:F4:F9:3B:C2:F6:51:4E:C2:12:8F:01
Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Certificate issuer: /CN=82f59386fcde596f7459075edea4d74c19b01ca2
Certificate serial: 019D382E5248677496D60B05EDC2B2B0A286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
Manifest number: 0B2E
Signing time: Sun 29 Mar 2026 06:00:52 +0000
Manifest this update: Sun 29 Mar 2026 06:00:52 +0000
Manifest next update: Mon 30 Mar 2026 06:00:52 +0000
Files and hashes: 1: gvWThvzeWW90WQde3qTXTBmwHKI.crl (hash: vNAGI7cAZuhYPEkGmAswkNFVTcseG0+WExQqwOGjCuE=)
2: oNme18aqaGDrD5K5b2ZaxV8XqFA.roa (hash: jX5vfMnloLvbY3zgwIk6xP963slmPBqIZT69KIJCHjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:52:48:67:74:96:d6:0b:05:ed:c2:b2:b0:a2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2
Validity
Not Before: Mar 29 06:00:52 2026 GMT
Not After : Mar 30 06:00:52 2026 GMT
Subject: CN=952a8a64447d42bf89f4f93bc2f6514ec2128f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a1:62:b3:58:d6:1d:2b:4b:f8:34:29:33:74:
87:18:51:76:15:f2:c7:ca:0f:08:29:35:e5:ad:4a:
9d:d7:39:a4:37:e0:8c:f2:d4:83:1b:ef:46:58:af:
1c:41:7e:3f:ba:c1:af:cc:2a:be:92:b0:0a:89:5a:
b0:71:a7:dc:44:cd:83:fe:93:4b:23:13:da:7a:a1:
f6:14:a0:c6:89:b8:96:89:f7:46:04:a6:50:ff:52:
21:3b:6c:df:cc:27:e6:3a:3b:fe:69:06:76:54:2c:
ef:e3:72:db:85:21:dd:67:e1:98:29:ee:cf:ec:56:
ab:7a:9c:ff:36:a8:3c:2f:13:ea:bb:5f:de:38:10:
94:74:00:4d:09:aa:15:cd:5d:31:c7:fa:12:6b:bc:
ed:d2:ca:40:6f:35:ce:76:9d:24:1f:ae:ba:d6:ca:
22:2c:cd:42:fa:b6:b8:d2:85:a3:a2:81:98:9f:cc:
31:20:07:c6:97:01:68:07:b6:1d:b5:3e:8a:03:d3:
71:35:19:54:25:d3:95:f8:8d:21:5d:a1:37:a5:9e:
60:1b:0f:71:59:a3:d2:6f:2b:a0:8c:89:df:d2:cc:
30:0f:17:31:f5:ba:73:93:18:94:6b:c7:0b:5b:96:
19:1c:2e:0f:ac:b0:23:4c:48:9e:9e:37:a5:13:84:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2A:8A:64:44:7D:42:BF:89:F4:F9:3B:C2:F6:51:4E:C2:12:8F:01
X509v3 Authority Key Identifier:
keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7f:60:a7:40:80:64:fd:69:17:4b:10:2a:04:e1:44:04:7c:
32:4e:f4:e7:87:e8:19:ff:63:a0:10:1c:b8:5d:64:19:a1:76:
41:4b:69:92:f6:f9:7c:2c:34:55:b8:87:42:97:e2:c8:4d:1b:
94:b4:1d:9c:fb:62:aa:d6:3e:a0:da:04:13:3d:40:09:4a:cf:
fa:8f:05:ba:d5:35:78:c0:e2:61:52:47:d8:de:e2:20:46:25:
79:05:0d:bc:27:12:76:15:bc:bc:9b:66:e3:0d:63:9c:f6:f0:
97:46:43:fb:1f:d7:79:49:0b:f0:44:e1:1d:73:6f:f2:21:4a:
a2:87:b7:70:22:27:02:3c:0c:91:4f:cb:c2:d2:54:eb:26:b7:
f2:89:43:58:f6:71:b9:85:69:17:bf:68:14:0d:21:ab:35:57:
5e:23:4e:c5:23:af:8a:e0:0e:f0:ac:98:d3:07:e6:3e:7a:c2:
89:ec:a7:71:b4:94:a9:0b:ad:b4:72:4f:44:23:58:c0:a0:84:
f0:93:65:2c:df:4b:26:2f:90:ae:87:b2:44:a1:4b:7f:7a:65:
2d:54:72:fb:ef:1d:b8:ab:03:77:e6:23:b1:34:f5:3b:bd:cf:
5c:ee:d4:88:4e:f9:94:17:0a:12:41:69:56:4b:1c:b3:20:1f:
c9:29:d2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:01 2026 by rpki-client