Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier: yoA7kNFNULW9sdIXHKzu6hlQlgazWybAvqXoPON8Eew=
Subject key identifier: 4A:BD:86:48:63:9B:73:00:1C:A1:E3:5E:3E:33:D6:22:27:F0:D6:3F
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 019D3865DD0485BF3BEA5FA991032397997E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number: 0DFA
Signing time: Sun 29 Mar 2026 07:01:32 +0000
Manifest this update: Sun 29 Mar 2026 07:01:32 +0000
Manifest next update: Mon 30 Mar 2026 07:01:32 +0000
Files and hashes: 1: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: kK6Kf+4Mb3xf0PnaW2x3Za1p7vU9FgkTkc8avbPz84Q=)
2: hQ9NotylFYMkqo3bbUqE9OBXr30.roa (hash: DDGD0ACVZ8p80B8GH1cwIOOojO6HokidqY08m4jPrFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:dd:04:85:bf:3b:ea:5f:a9:91:03:23:97:99:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Mar 29 07:01:32 2026 GMT
Not After : Mar 30 07:01:32 2026 GMT
Subject: CN=4abd8648639b73001ca1e35e3e33d62227f0d63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:7a:6b:ee:37:f4:e7:b5:f6:74:7b:56:d1:
20:dc:ae:32:be:ee:d8:ed:d7:a9:4c:42:7f:e5:76:
e7:0b:cf:f2:f9:b5:0e:74:7f:b1:28:67:d1:bb:1d:
5a:38:0b:8d:fb:35:0a:cf:dc:68:90:8f:9b:f1:16:
1b:0c:e0:42:ca:49:30:63:9b:42:cd:66:21:c3:4b:
62:fa:65:e2:cc:f6:7c:27:08:13:1e:64:49:f5:54:
a0:81:dc:46:8d:95:36:3d:2d:21:89:ae:29:fc:1a:
2b:34:d4:95:95:9f:a9:d7:f6:80:a3:27:7d:5d:4a:
75:68:79:32:a3:f0:2c:40:f9:ea:df:de:5e:78:fb:
bd:9c:ea:cd:72:17:59:7f:83:01:00:02:2b:83:9f:
24:d3:1e:eb:36:0d:b7:2c:b0:a1:05:99:53:ba:90:
2d:d4:a5:a2:b8:99:8a:23:56:a0:81:a6:18:18:45:
3c:52:6d:5a:d3:f5:b5:78:18:a0:78:26:94:7d:db:
4c:bc:a2:cf:fd:b9:00:11:9b:51:f8:bf:96:6d:09:
1d:b0:3a:c4:ce:78:cb:5a:67:9b:82:e1:2d:4a:f3:
67:6f:99:c8:f3:4f:5c:cb:79:95:38:e2:92:54:ef:
96:c5:c0:2d:b5:d2:db:ca:7d:02:e9:5d:50:80:91:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:86:48:63:9B:73:00:1C:A1:E3:5E:3E:33:D6:22:27:F0:D6:3F
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6f:bb:96:76:86:8f:7e:de:8a:31:72:86:ed:8a:99:e8:e0:
1d:09:92:a1:f2:31:44:c8:a2:cf:d7:8d:78:7a:82:c8:f2:00:
8a:e3:6c:d8:bb:29:60:01:43:2e:78:51:17:e2:bd:70:48:c8:
33:c8:0a:9a:1a:0d:98:4a:07:e3:37:b3:ef:a0:0c:27:78:8e:
d8:6c:58:e1:f2:75:9f:55:b7:31:52:ea:d5:c4:4b:1c:0b:21:
a3:5a:7e:9d:82:c9:84:2c:f7:f1:08:fd:1e:74:5e:ff:33:2a:
bf:cd:5b:18:8a:d8:7a:70:87:7a:af:32:00:88:ca:16:d2:d7:
d1:c7:f8:4d:52:95:c7:ff:79:53:68:6f:39:4d:97:d9:e4:5a:
1d:cd:0f:a3:de:3a:ef:5d:6b:9e:5c:24:8a:c7:57:62:8f:db:
f1:87:c1:98:00:24:5f:0b:3c:34:78:67:ec:10:fe:bc:88:03:
69:f8:65:e0:2e:1c:a4:09:f2:75:b5:64:37:21:07:11:b8:f5:
4b:8c:a6:51:7e:32:29:03:05:12:e4:6e:54:45:17:99:d0:45:
47:74:d5:ce:70:21:6b:a6:79:cf:ed:07:37:b1:30:b2:13:e5:
81:70:b8:93:14:d3:43:14:4e:dc:53:27:69:f1:b7:15:01:e5:
e9:5a:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:37 2026 by rpki-client