Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: qJ/us34402cPIoZj4X6z5GeNVgjC2QIMzd9hhEwx9nw=
Subject key identifier: 9E:F8:16:FB:EC:B7:D5:8B:B1:78:02:A4:03:61:C2:51:CF:5D:A3:E1
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 019D2DAA74498B17E713D4EDB40AF0E64CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 1843
Signing time: Fri 27 Mar 2026 05:00:38 +0000
Manifest this update: Fri 27 Mar 2026 05:00:38 +0000
Manifest next update: Sat 28 Mar 2026 05:00:38 +0000
Files and hashes: 1: 6K4rT6VCuHtrpHkb6XBvfHzGcts.roa (hash: rcgp9RRt2ZMAtK8hgAgj71whrGluIkO7wLBZN77JUi8=)
2: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (hash: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8=)
3: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (hash: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00=)
4: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (hash: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo=)
5: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (hash: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso=)
6: aLeBPPf7ugWBDmXZtGstFAYR5d8.roa (hash: WCjwJf715go5YX++trIsBUfbf3PUAGqQfhdqAZp7NwQ=)
7: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (hash: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI=)
8: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: Iguu7uikBr8hLErzZqcIRt64G0CHiI/Tp/SIeLNYppM=)
9: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (hash: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:aa:74:49:8b:17:e7:13:d4:ed:b4:0a:f0:e6:4c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Mar 27 05:00:38 2026 GMT
Not After : Mar 28 05:00:38 2026 GMT
Subject: CN=9ef816fbecb7d58bb17802a40361c251cf5da3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:4c:35:45:29:60:56:af:8b:ce:15:85:41:
8c:5d:a4:89:11:a4:8e:4e:a6:51:19:c6:f4:d7:49:
21:91:ae:c6:c6:1f:6f:9c:53:9b:3e:65:0b:aa:d1:
58:89:01:6a:2a:26:8a:8b:6a:a0:3e:07:ca:04:e3:
77:6a:b9:ce:b6:38:49:01:fb:7d:01:8b:44:4c:67:
b9:70:ae:27:4f:86:74:66:da:96:e8:a8:51:98:18:
bd:d2:ff:b3:c5:83:78:00:e3:e8:d3:18:8c:34:23:
bb:e3:7a:a1:f3:e0:f7:03:da:bf:5c:d3:f1:06:3a:
38:6b:8a:53:c5:dd:3f:12:61:e6:4d:1f:c6:3b:ce:
77:64:fb:5d:5a:db:7a:c6:24:5c:b7:c3:eb:f5:73:
a5:0f:e8:9b:6a:6c:a3:a5:8a:4b:16:f0:73:2c:78:
a7:d8:fc:d6:89:54:3e:e1:93:56:f8:03:c9:8c:e9:
d5:5a:44:a9:59:88:93:e1:42:fc:b9:05:e3:0f:88:
4f:5e:c3:b8:ba:8f:f8:94:06:03:2e:fa:ab:5b:a5:
9c:f8:17:e7:63:07:e8:c7:61:5b:5b:38:c7:20:46:
3e:0d:9a:e3:7b:56:98:0b:51:a4:c0:c0:03:76:68:
b4:b1:b7:58:c3:46:87:c7:65:cc:f2:0e:69:6a:70:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F8:16:FB:EC:B7:D5:8B:B1:78:02:A4:03:61:C2:51:CF:5D:A3:E1
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:41:36:67:be:2e:98:c4:3f:f3:5a:0e:0d:67:6b:1a:76:02:
43:fd:48:b4:0d:9b:57:d8:57:26:91:a2:26:17:69:87:1d:94:
15:f4:94:2d:ab:14:6f:e8:6d:44:97:64:90:2f:bc:6f:db:28:
7a:15:45:e5:a4:80:97:eb:91:e2:00:43:10:06:58:77:fb:8f:
00:59:b7:92:b5:e0:cf:35:d1:a2:5b:da:0d:24:40:17:2b:33:
96:bd:91:7c:3a:13:98:f5:e2:48:9c:4f:cc:b7:73:1b:17:c9:
c1:63:b6:93:1b:94:dd:89:e2:5c:12:52:69:a0:72:9b:cc:0f:
15:55:95:a9:42:ae:2a:f2:bc:50:d3:75:9b:7f:38:d5:d4:2c:
f7:0e:73:8a:62:ff:c3:e0:eb:5a:bd:3f:62:d3:d6:0f:91:56:
e5:5e:e9:10:25:3b:8f:36:b4:34:9a:e6:24:4f:c5:10:b5:f4:
27:1d:f2:26:74:c6:3a:ca:e0:51:6e:d4:3d:4e:30:8b:23:16:
5e:dc:40:39:7b:b4:2b:bc:22:ee:68:5f:9b:9d:85:1d:11:41:
c0:36:11:ea:90:fb:99:70:a8:15:1b:e0:26:c7:6a:fb:d7:70:
24:12:c5:d9:d5:69:f1:18:7b:ec:d7:73:58:12:df:50:3b:4e:
7b:d3:b3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:31:12 2026 by rpki-client