Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
File: gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json)
Hash identifier: 8b93f37OddbVfa2NxYDjgur/bmYsd0hM9uUC6A9tSDA=
Subject key identifier: 74:2C:BF:A7:7C:2C:59:D4:12:85:CA:FA:C0:A6:28:1B:FC:46:FF:22
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 019D37C01617907E0FF3C21F908C94373276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
Manifest number: 0F38
Signing time: Sun 29 Mar 2026 04:00:28 +0000
Manifest this update: Sun 29 Mar 2026 04:00:28 +0000
Manifest next update: Mon 30 Mar 2026 04:00:28 +0000
Files and hashes: 1: I7mi3E0an_XwM501IzP6XoSy2Wk.roa (hash: 7K4bWpncg05jTDQa+KG4OIN9CRZtSPgz2UdmkAKtJwc=)
2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: t9Amm2dh5b5jStCVRvNt1wX91ogUE8m6rkmWwHIWNJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:16:17:90:7e:0f:f3:c2:1f:90:8c:94:37:32:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: Mar 29 04:00:28 2026 GMT
Not After : Mar 30 04:00:28 2026 GMT
Subject: CN=742cbfa77c2c59d41285cafac0a6281bfc46ff22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:51:f2:a3:66:06:9c:44:4c:58:d9:46:12:
3a:b9:8a:61:7d:20:d2:d3:7e:67:fd:99:d6:ab:93:
5a:94:33:4c:f0:73:74:a5:a2:b4:2e:45:33:29:90:
10:a2:df:8a:b1:25:a9:fb:8c:e9:52:b5:a1:c5:19:
4c:e2:ae:c9:6e:60:49:c6:2b:a3:a9:c7:63:49:bc:
e1:9e:29:2d:79:17:ed:53:22:19:80:ab:43:bd:fd:
a7:7a:e0:c2:bb:6b:0c:5d:42:11:76:21:35:14:33:
d8:40:28:b1:20:cd:13:43:6a:aa:03:8c:f2:93:f1:
d7:38:63:d8:83:a3:df:28:88:62:27:38:9a:fc:bc:
59:f6:97:f3:c7:81:97:84:9d:45:69:d6:76:9a:80:
b8:be:de:4b:8a:70:8f:b6:66:f8:80:26:bc:cc:d9:
bf:38:61:45:ed:61:dc:a4:aa:be:91:86:69:03:9a:
7e:65:65:a3:94:2b:32:d6:7b:7a:a4:a6:51:da:d0:
66:9e:2b:64:59:ff:35:74:c9:f6:d6:cd:20:da:b7:
3c:1a:68:6f:bc:fd:57:10:4d:26:08:4e:91:1e:ab:
12:d4:08:b8:46:79:b3:2e:00:bd:03:20:0a:ab:32:
96:a8:8e:d9:40:cf:1c:3f:cd:4a:b5:dd:e3:45:a7:
04:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2C:BF:A7:7C:2C:59:D4:12:85:CA:FA:C0:A6:28:1B:FC:46:FF:22
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5c:d3:f9:5b:7d:22:5f:55:64:ab:e8:28:af:38:b3:9e:c5:
58:05:6d:02:67:fc:86:cb:36:08:87:0f:f8:8d:d2:af:24:19:
2a:61:67:6f:60:a7:07:75:47:82:0c:41:0d:15:c9:b3:ab:c0:
db:c7:2d:78:8d:0e:01:e4:2b:05:f3:c4:9b:6c:3a:85:98:65:
b3:6e:58:9c:f0:e9:44:3c:98:17:57:92:2e:03:2f:23:e4:9c:
21:e1:d5:81:01:6d:87:a3:07:5e:7d:1a:f5:1a:c8:00:59:bc:
eb:64:1f:74:e4:43:ee:4a:ad:c0:8d:da:a7:62:03:0d:1c:2b:
a1:4f:95:62:6f:63:e0:07:6d:fd:c0:a2:1c:f2:ab:d8:93:a7:
49:60:13:78:eb:01:4a:ac:2f:0b:96:f1:02:63:aa:9f:a5:13:
eb:0a:38:5a:22:4e:d5:53:9b:2f:f4:7f:be:96:7a:5c:0a:cf:
e7:a0:e2:ee:03:5d:ba:95:b9:8d:b9:52:a6:fd:b6:33:3a:94:
84:ad:b2:3a:51:3c:59:8f:f4:4a:88:71:58:b0:2e:e1:cd:fe:
12:53:b6:09:84:a2:49:49:ae:c0:47:c1:7e:6d:67:8d:fd:c3:
e9:14:b1:c2:8f:44:ea:79:f0:64:dd:e0:69:4d:a5:0c:c7:79:
7f:d2:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:46 2026 by rpki-client