Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: OsdBZPrTaaWz+plk3zkSlprTurT++NJ/WyHDmLoHz/I=
Subject key identifier: D8:F0:B3:BA:75:77:4C:62:D0:ED:C1:BA:DE:08:49:26:61:16:C7:87
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 019D38D3D825B95D4DA3A171D0651C441F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:40 +0000
Manifest this update: Sun 29 Mar 2026 09:01:40 +0000
Manifest next update: Mon 30 Mar 2026 09:01:40 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: Ftvb+XBsG+vLJj+WDbg37dM5wF4S8Bj5D2aBiael880=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d8:25:b9:5d:4d:a3:a1:71:d0:65:1c:44:1f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Mar 29 09:01:40 2026 GMT
Not After : Mar 30 09:01:40 2026 GMT
Subject: CN=d8f0b3ba75774c62d0edc1bade0849266116c787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fd:56:46:f1:61:30:95:c9:0e:e2:f4:55:23:
ae:66:cd:1d:26:c0:a4:dc:e5:45:58:13:5a:6f:26:
d0:b4:0e:70:e1:33:df:01:c8:c4:84:c4:49:30:f1:
11:a9:32:20:66:d3:17:33:39:1a:89:a6:39:10:2e:
17:a4:c2:93:20:c2:8a:ec:26:0c:96:dc:9c:84:b3:
6b:60:1f:96:5d:1e:68:f0:25:ef:44:43:2e:06:fe:
b7:36:34:5f:88:c7:e8:13:c7:f8:5d:b8:fb:4f:13:
db:1b:ef:1c:ae:7f:31:66:36:10:49:35:79:39:8d:
7e:24:e7:c3:80:94:8e:8f:0e:aa:9a:c4:e1:07:24:
f9:62:00:6e:44:07:86:cb:86:5f:98:8c:62:e1:fa:
5a:65:4a:c2:83:78:46:0a:74:d7:08:23:c2:f0:77:
ca:d0:47:d1:4f:1d:db:bf:ba:8c:fd:bb:25:e5:33:
ed:a6:f6:7a:e1:cf:68:91:2c:29:1b:77:37:17:c2:
4a:5e:91:bf:ae:e6:0a:4a:8b:b0:d0:39:e3:79:78:
a7:57:5c:dd:da:f5:b4:ed:73:51:67:c5:01:71:90:
dc:d2:96:b4:f3:5f:17:41:3a:34:21:22:43:15:85:
0a:a6:78:7a:ae:a9:d0:9f:4a:45:2d:16:8b:2a:a5:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F0:B3:BA:75:77:4C:62:D0:ED:C1:BA:DE:08:49:26:61:16:C7:87
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:79:ef:0f:ac:01:50:ec:2c:0b:5c:cb:61:f5:6d:3c:be:7b:
3c:bf:16:4b:58:20:c8:ca:52:bd:4f:3f:2d:78:cf:96:3d:52:
a7:50:7b:17:88:2e:35:c9:b1:b9:b3:9a:b3:c5:ea:cd:91:80:
0a:b9:a2:22:ae:a3:3c:ba:0a:a4:90:46:7a:3b:53:46:33:a2:
c0:1e:d2:bc:84:db:b2:f3:ba:b6:10:a7:c4:76:4a:62:42:79:
1f:5f:00:18:56:f6:e8:b6:bb:bc:25:15:fc:1e:7f:90:be:18:
f5:eb:de:fb:6e:d7:c1:ef:09:b8:02:c4:53:15:ab:17:83:3e:
db:cc:11:a5:56:b9:23:24:a3:51:6c:21:85:84:b0:f9:95:8f:
54:83:89:2c:58:eb:c7:9e:6c:b6:0e:02:31:a8:25:63:7b:03:
0b:9d:77:05:08:d3:42:93:71:98:56:61:36:5c:42:88:7c:60:
c9:da:5a:59:18:2c:a9:5e:eb:91:b1:b9:74:85:ca:3e:f0:ff:
9e:1c:91:22:90:ba:f5:b8:d8:67:cd:52:09:7d:d4:ea:fe:a9:
04:cb:2e:84:39:ac:df:8f:41:bf:9f:79:d2:f1:b4:ac:0d:be:
d3:21:a8:70:19:ed:7e:ec:a5:d5:35:c0:3d:c2:8c:74:2a:ca:
f4:c5:8c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:05 2026 by rpki-client