Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier: VsFPPPfbcaf8t2s4nBR8qmOTTv4fqc0d0Qfdghd8ntY=
Subject key identifier: B0:61:EE:E8:66:0B:87:53:E9:1A:20:66:51:29:7C:78:A8:6F:45:E6
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 019D389BCACB0F8A936D5DC4C680D61D5728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number: 1288
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: 5eB4htWyGJDJwj6zhgzJLbW_4Rs.asa (hash: AMkYMX4Ub8J6QzakBaQUECXSyVGj24SQ4egirOIAq6E=)
2: Uhdd2LHjn5iOA9Ff6w9g0pvCay0.roa (hash: GWSvUjVdu1UDo6lvgspGXIRNDtNx+fESVlxZbXeFX7g=)
3: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: DmTHD8ZEueEkm5fHe5vNs2wntKWnq9n71ASe82PdQPc=)
4: lnH9C7HQoo7yeYbE56WHSLlD_TE.asa (hash: V5rxGHK5REBBYrckeqobdcgc6TTvp3rfULd5M0m28N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ca:cb:0f:8a:93:6d:5d:c4:c6:80:d6:1d:57:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=b061eee8660b8753e91a206651297c78a86f45e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:2c:2e:04:56:37:38:52:64:8d:0d:3e:9e:
88:f7:4a:b1:89:aa:1d:68:e8:70:69:5d:90:b4:1b:
fa:52:aa:74:29:50:26:ff:ba:5a:cb:ba:c2:44:b1:
c4:be:a5:d4:7f:11:76:5f:d6:9b:10:92:31:1b:d2:
61:30:6c:97:dc:a2:64:a8:fa:1e:d5:b0:84:b0:82:
bc:5b:b7:ce:be:64:94:76:54:5f:40:c0:59:cc:a8:
66:ca:5d:9a:2b:49:7b:9a:76:85:8a:a6:07:ea:bc:
3f:e2:3d:1b:bf:4c:9a:06:a2:29:22:7f:9d:9e:7b:
ae:82:e4:21:13:3e:95:ad:2d:37:07:03:99:a6:27:
0b:d1:1c:56:e1:80:59:3b:bd:34:2c:bd:76:45:c6:
25:76:e8:cc:4a:3e:43:85:53:be:9b:20:c5:da:b4:
31:1e:60:5d:d5:25:71:7f:8e:d6:7d:40:11:65:b4:
af:09:0e:dc:c0:f3:c6:d6:76:d0:2a:17:da:4d:0b:
53:3d:05:03:45:16:89:1b:e2:06:a9:5e:1d:9c:27:
a4:99:90:18:7b:a8:79:02:78:ea:a7:45:95:77:39:
f3:b7:63:5d:3b:14:96:33:23:db:35:e2:ca:58:d1:
52:fc:d2:5f:ea:ec:0f:ed:a1:fa:ff:61:16:a9:33:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:61:EE:E8:66:0B:87:53:E9:1A:20:66:51:29:7C:78:A8:6F:45:E6
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b9:19:fb:f0:b1:79:a3:9b:55:88:8d:60:92:f7:56:ef:43:
84:c5:c2:ed:62:7d:a9:ab:d3:3c:b0:43:74:7d:f6:1c:56:67:
8f:bf:5d:0c:27:cd:62:4e:57:9f:dc:ba:e3:81:0b:bd:da:35:
0a:26:41:83:c3:e8:a9:5a:40:95:86:20:18:b3:eb:6c:b6:ef:
69:26:c8:01:83:24:ff:01:5e:1d:eb:2a:d0:d3:a2:d6:bc:65:
04:fa:c3:6c:26:29:13:fa:12:29:ae:a6:07:63:7e:c8:4c:65:
91:3c:75:41:b2:4a:a8:e7:fb:88:6e:4f:2c:84:d2:fb:48:d1:
ff:12:a7:da:81:52:03:01:b0:fb:a6:cf:f0:e7:ab:a9:0c:b6:
72:51:65:db:4a:12:33:d3:8d:3b:c8:6e:d2:68:4d:11:5a:37:
fc:48:cb:bd:8c:a3:82:40:1f:7a:57:92:dc:cb:79:24:80:96:
20:91:04:16:39:58:bd:51:94:e3:33:af:73:e6:3f:5e:9f:8d:
e1:4d:e0:84:e3:a1:a3:20:a7:6b:7f:1e:7c:e9:4b:c7:94:55:
47:9b:cd:aa:f9:c1:99:e7:ad:d3:c2:0c:43:0b:e1:06:cd:a6:
9b:42:a5:ab:8e:a0:a2:56:0a:ba:a7:32:95:a4:09:a2:b4:ad:
6a:0e:fb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:37 2026 by rpki-client