Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier: OY2i8pf9G/UutQvbWhT4EoP6wcIsIcbcI0o+JddRF90=
Subject key identifier: B8:13:90:4C:7D:E1:A3:82:FF:3A:3D:37:0E:36:3D:54:FF:DB:C6:28
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial: 019D3789457D3CF6963864D1F196C2706CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number: 1289
Signing time: Sun 29 Mar 2026 03:00:36 +0000
Manifest this update: Sun 29 Mar 2026 03:00:36 +0000
Manifest next update: Mon 30 Mar 2026 03:00:36 +0000
Files and hashes: 1: _znAllcUhDUk5vaonzcpuUajgfo.roa (hash: qYtkv42oHHUxBFtOZdOaS3DV/fsi8LFPD+D7XK8B1uc=)
2: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: gdoCNl38+D6E17aThm2kIELPGELT0nKY9a+99Mp8CtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:45:7d:3c:f6:96:38:64:d1:f1:96:c2:70:6c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
Validity
Not Before: Mar 29 03:00:36 2026 GMT
Not After : Mar 30 03:00:36 2026 GMT
Subject: CN=b813904c7de1a382ff3a3d370e363d54ffdbc628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:3e:b8:dd:65:74:ff:b1:36:93:96:bc:cf:
a2:2b:e7:49:fd:04:cc:19:4e:95:67:72:16:ec:b7:
d8:04:ad:7d:82:cd:a7:10:d4:0c:86:aa:08:d2:24:
5a:cf:62:9a:72:b0:a0:01:48:e7:9d:2a:70:09:5c:
79:40:52:48:b3:8b:74:1c:ce:0f:41:b7:d7:ca:b2:
5b:4e:c5:18:86:16:b0:5e:1b:4e:1d:80:b3:fa:e2:
69:0d:9e:07:98:81:18:34:01:e7:c3:06:9a:69:ff:
62:4a:62:7d:d5:c6:8b:5f:bb:f8:6c:c3:7a:19:ba:
b6:f3:23:97:2c:a2:10:75:c2:16:c3:d8:e3:4a:a2:
af:dc:ac:25:23:8d:2f:b9:c7:6a:fa:72:81:51:a8:
59:88:2b:6a:f9:24:77:de:c0:77:22:59:05:cb:07:
9e:64:eb:41:c9:eb:1e:cc:ee:83:8c:26:52:67:db:
d8:42:63:e8:0a:43:65:2e:7f:b8:b3:ce:5b:35:de:
a8:ad:94:d5:8e:7d:45:26:df:40:96:6a:21:41:d3:
35:31:1c:0a:34:0d:b3:42:f4:54:2f:b4:c8:b3:4c:
af:b0:b3:08:8e:d5:0a:df:78:11:12:9b:6e:a4:45:
29:db:23:8a:ad:af:1d:6e:f9:5a:a7:7e:de:11:16:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:13:90:4C:7D:E1:A3:82:FF:3A:3D:37:0E:36:3D:54:FF:DB:C6:28
X509v3 Authority Key Identifier:
keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0b:2b:ed:1e:2e:82:3c:76:83:2e:95:ee:00:3b:84:c6:3c:
53:3e:7e:5d:3e:6b:47:04:b6:26:cb:af:43:90:80:bf:62:45:
4e:d1:0e:ef:cc:a4:fc:8b:d1:07:fc:69:1b:e0:d9:96:89:27:
18:5a:66:30:88:2d:8b:22:f5:68:db:70:b0:1f:07:5a:94:57:
67:07:94:24:0a:7c:36:4c:e8:27:7b:9a:32:89:61:02:e3:25:
16:a1:40:30:d1:f7:78:69:7b:dd:d4:87:e6:35:61:07:8a:7e:
63:d4:25:13:37:4a:16:61:99:15:7d:18:1d:c3:79:54:d1:28:
3c:e9:1a:3f:e1:0d:fb:fa:8f:9f:09:ff:e0:71:b0:f1:5e:3a:
d1:ef:e2:18:be:d8:46:80:eb:72:f1:b5:f0:85:3c:8c:12:98:
eb:2f:b5:5f:81:fc:45:b3:4f:5c:a5:ca:d2:48:ee:56:93:f0:
bb:e4:e9:ae:85:da:20:83:dc:95:8e:54:41:ae:c6:07:b5:0b:
a0:07:1b:3e:10:3c:7b:e0:e1:27:6b:9a:78:e9:16:0b:ad:39:
98:a3:38:48:f8:cb:75:09:ba:97:a0:f7:62:ac:33:6a:ef:8b:
61:bf:c8:3f:06:c8:59:e1:82:89:79:35:98:11:55:a1:3b:18:
c4:21:0d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:55:09 2026 by rpki-client