Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
File: gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json)
Hash identifier: hvzS3Hr4qp8jSPSU2ql75XDpd91vPoeKQ1thA4YKaD0=
Subject key identifier: E9:97:49:A9:1A:6B:B5:60:C4:69:3D:4D:24:50:F3:7B:34:21:4E:BA
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 019DCCE23B3CFE80EF3E23EBCE69F7E64E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
Manifest number: 0FC2
Signing time: Mon 27 Apr 2026 03:01:11 +0000
Manifest this update: Mon 27 Apr 2026 03:01:11 +0000
Manifest next update: Tue 28 Apr 2026 03:01:11 +0000
Files and hashes: 1: M16NJT8ocHcFhdxLajdl5OmYfWg.roa (hash: OCbF5Tgm3E71OlvzY1cYnxinuqaWID2lU/O06sRIcAE=)
2: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: Fy1MqEVncaFQBH0EystUPhOuIwvSxOKdksOaAwXGNDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e2:3b:3c:fe:80:ef:3e:23:eb:ce:69:f7:e6:4e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: Apr 27 03:01:11 2026 GMT
Not After : Apr 28 03:01:11 2026 GMT
Subject: CN=e99749a91a6bb560c4693d4d2450f37b34214eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:b0:65:37:45:77:5f:8f:ff:fe:40:83:a3:
e3:9f:c9:ba:17:04:82:c9:19:69:e2:b4:23:a8:e3:
c6:f8:3f:2e:1a:b7:60:9e:af:b1:53:67:bc:69:59:
c2:05:04:ee:05:95:46:27:90:a8:ed:3d:e8:71:3f:
a5:06:ad:48:e9:09:e1:53:80:23:47:e8:32:4f:cf:
e3:9a:bb:e6:e5:35:47:97:fc:70:24:2a:82:69:c3:
38:9b:7d:e6:00:81:50:a0:21:48:ec:8d:7c:ec:62:
49:f9:87:41:e6:fc:ea:48:55:5c:e7:1a:a7:9c:a7:
be:10:5a:bc:af:6b:ab:8f:8d:cb:ef:0e:a4:4a:72:
37:2e:a7:5b:e7:0f:10:05:87:85:99:cd:21:ff:c5:
35:46:11:cc:88:76:51:47:4a:d6:5c:17:33:88:35:
dd:63:d8:92:cc:08:40:96:b8:5c:6b:9b:2f:0b:e3:
37:b2:fb:2f:a2:c9:d0:db:62:6c:c9:d0:2f:5e:45:
b8:94:22:4d:f8:74:cd:b5:8a:fe:5b:09:31:8c:9d:
07:c2:50:49:a1:06:f4:2e:42:b5:37:25:6f:8b:fb:
95:a0:d3:82:4d:b7:66:2c:b8:9b:86:c9:5c:38:e4:
8f:0b:99:73:47:fa:b1:d9:eb:6e:99:9b:49:a2:04:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:97:49:A9:1A:6B:B5:60:C4:69:3D:4D:24:50:F3:7B:34:21:4E:BA
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:da:c2:bb:25:ad:f1:a1:ec:e0:48:7c:37:fd:fb:33:07:08:
97:ff:68:07:fc:17:9b:32:12:7a:02:7f:4b:2d:a7:f4:36:a2:
c6:83:6c:90:1d:54:57:50:ee:17:d9:85:98:1a:af:e4:e1:84:
e1:1d:60:56:5f:67:1e:de:d2:bb:0a:33:a2:09:6f:fd:96:bf:
9d:30:10:3f:32:9d:77:5c:b5:68:e4:8e:72:b0:ef:95:88:55:
b8:b3:3a:ff:71:d1:f6:86:ee:7a:36:69:76:58:1d:78:9e:6e:
f2:a1:76:0c:60:50:6d:45:4c:67:37:0b:cc:a3:38:91:3d:78:
1c:16:08:3d:5b:17:dd:c2:d1:2f:f5:a6:b7:93:ee:4f:c3:df:
29:51:12:0c:01:09:90:b4:05:bb:cb:9a:bf:31:4b:41:7b:72:
13:06:77:00:e5:aa:b7:b1:a6:ec:09:ed:b1:11:00:51:3f:9b:
05:93:94:62:1f:41:da:81:2b:40:d2:6f:df:b0:f5:58:03:79:
8c:ac:07:06:3a:7c:e0:09:2d:d7:f3:e5:1a:89:cc:b5:36:2b:
1c:9b:ca:fe:1b:b3:10:85:bc:f2:a7:ad:0b:58:13:82:7e:1c:
94:0c:66:fb:06:95:f8:60:64:8d:2d:dd:38:49:60:dc:de:3b:
bf:5f:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:19 2026 by rpki-client