Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: 90eniraXwsEH6p2MA54FKhi4pgisuDrevLGsPrwChXU=
Subject key identifier: 04:40:83:92:80:EE:C2:5F:9E:38:CB:DE:92:A8:1E:B8:FE:92:03:A8
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 019D3865848090B7D8330E2246F71D31BD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0DB8
Signing time: Sun 29 Mar 2026 07:01:10 +0000
Manifest this update: Sun 29 Mar 2026 07:01:10 +0000
Manifest next update: Mon 30 Mar 2026 07:01:10 +0000
Files and hashes: 1: fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa (hash: LXNlsf10QtsQkHE8Tm9n4uZsh/ON6f1nhNppQ718O5s=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: +dQ3BLElUdvgJ/tRGHYZzg0TnwyhAGkEtuN3ibLlNtc=)
3: xG0VUDOknHsZasT5TDaZxzA4pvE.roa (hash: Xzghi2lIosJPiXM8pVY4mOf1fz9gQv7/1SCn9lu4mdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:84:80:90:b7:d8:33:0e:22:46:f7:1d:31:bd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Mar 29 07:01:10 2026 GMT
Not After : Mar 30 07:01:10 2026 GMT
Subject: CN=0440839280eec25f9e38cbde92a81eb8fe9203a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:31:b4:77:97:3f:e3:16:4e:8a:1e:94:ee:
a1:a6:7b:92:f4:1e:d9:1c:e4:54:a1:78:04:9a:b8:
2f:b3:fc:69:22:f6:a1:76:c4:2f:ef:6d:c5:0c:d7:
c6:88:da:37:64:b3:3f:e3:0f:7c:9c:e6:be:bf:6a:
56:e7:e8:e2:a4:6c:cc:6a:9e:c9:87:f5:d8:ef:20:
83:8b:81:7f:22:2f:09:22:c4:f9:d2:41:33:b0:32:
27:f6:09:87:17:b1:28:a8:ed:56:b8:d6:f6:6e:67:
38:4c:e9:02:1c:b0:c5:11:16:4d:f9:57:42:cf:48:
cb:62:3c:41:35:7c:52:f7:07:10:87:87:10:77:fe:
18:e6:78:4c:33:51:51:f2:65:a6:ac:34:04:29:a4:
bb:7d:63:65:aa:59:40:90:15:77:69:e8:44:a0:a9:
39:dd:1c:eb:21:f4:80:67:22:de:7e:aa:79:3b:cf:
e4:a5:21:0f:26:26:7b:19:c1:4e:16:f6:1f:0f:c8:
d7:72:03:c3:44:db:72:2f:c9:46:35:c5:39:1e:fa:
d7:a1:fc:80:8e:2d:af:55:71:3c:de:3b:82:60:2e:
90:99:8d:be:6a:de:c4:c0:8f:a6:e2:03:ee:2e:8c:
51:0c:ba:88:f5:f7:6e:ab:84:45:90:fe:75:bd:6c:
61:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:83:92:80:EE:C2:5F:9E:38:CB:DE:92:A8:1E:B8:FE:92:03:A8
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fc:b8:de:8d:d3:ff:1d:5c:7a:3f:f5:40:58:c6:ec:f5:5c:
93:78:4d:a3:b0:55:61:a8:d5:6c:e6:c5:33:b0:59:0e:7c:a9:
5d:d2:8f:28:e8:c7:4d:f0:46:97:2b:40:83:15:29:38:4f:c9:
26:68:2e:7b:19:f5:ae:91:39:c7:68:bf:8c:96:4c:59:2b:ec:
a7:37:ea:a0:28:6e:28:3b:e7:88:90:d2:a7:75:42:60:27:98:
c3:96:8b:cd:5c:18:36:2d:86:3b:7a:fa:9b:6f:b8:04:2f:c0:
c5:67:3a:30:d9:e8:4f:df:de:1a:90:24:41:99:43:71:6e:96:
a2:49:a0:16:7b:14:34:82:f8:aa:97:25:91:06:c5:e2:7e:9e:
61:9b:b1:f1:4e:31:f2:56:7b:a5:dc:9b:c3:f9:74:76:a9:d4:
0b:86:c7:db:f5:bc:1e:91:c4:5d:26:28:69:72:82:90:82:14:
5a:f2:3f:48:48:99:ca:41:38:9a:d0:e9:2e:42:1c:c2:4f:e0:
bb:59:27:2b:4b:3d:1d:4b:a5:a0:63:ef:ab:bb:d5:f8:61:0e:
7f:33:52:e4:c5:ff:21:26:8f:73:79:7c:35:20:0e:4f:8a:47:
f6:fd:ce:ab:f8:d4:94:0e:fa:eb:ed:be:45:f4:93:b6:b2:cb:
17:33:84:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:01 2026 by rpki-client