Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: sF87MoMda8YQsb8rnfHirhrtQdEvKzzLySFwiCdOWaE=
Subject key identifier: EB:CF:DE:E0:FE:16:E7:51:13:39:6E:2D:43:66:D8:BB:73:BD:AB:67
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019D3A1CB0CF70A18DF72B0EDCEF3C2F1B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0C4D
Signing time: Sun 29 Mar 2026 15:00:51 +0000
Manifest this update: Sun 29 Mar 2026 15:00:51 +0000
Manifest next update: Mon 30 Mar 2026 15:00:51 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: a0FoUbMIBQy/fGYHqSVrdr+FRXZTp9spGHoJkaK5yIY=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:b0:cf:70:a1:8d:f7:2b:0e:dc:ef:3c:2f:1b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Mar 29 15:00:51 2026 GMT
Not After : Mar 30 15:00:51 2026 GMT
Subject: CN=ebcfdee0fe16e75113396e2d4366d8bb73bdab67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:4e:35:e6:44:7f:58:58:73:38:40:4a:88:
c4:0b:a8:eb:c0:92:ae:51:c1:d6:7b:e6:ce:ef:e1:
6e:fd:3d:08:99:d3:e9:d8:61:98:21:bd:db:24:3b:
97:1f:1c:f3:eb:f4:de:6b:b7:bb:db:6b:be:ff:0a:
a6:0a:93:98:77:d3:3b:7d:7b:d3:c2:d9:e3:7a:6e:
8f:8e:2f:24:a3:9c:61:70:40:93:cf:1b:1f:bf:52:
30:bf:3f:d3:52:50:ef:80:3c:d4:fa:83:ad:e1:a3:
2c:a7:12:d5:23:05:fa:fd:a8:29:e7:53:b9:e9:13:
4a:02:61:5e:07:0d:d0:c6:e8:c1:98:a7:a4:a5:70:
70:44:b9:9b:62:39:04:5a:75:f1:e5:42:e1:55:a8:
40:17:9b:e5:b9:9d:09:3e:cc:e6:31:c5:41:0f:92:
d7:7c:6c:b5:76:cc:51:a9:48:5c:96:ae:86:78:7e:
01:d1:dc:8a:01:15:07:7e:38:14:dc:ca:8f:ae:be:
4f:62:61:8a:e9:f5:09:47:8f:6e:d2:34:cf:82:48:
78:5a:2b:c1:d5:5f:94:0c:37:f3:03:83:1f:cb:88:
f4:20:a5:8f:bc:0f:d7:e2:2c:95:ed:a7:88:4c:8e:
55:01:2d:2d:a9:f8:23:02:d1:09:6a:b2:96:e4:df:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CF:DE:E0:FE:16:E7:51:13:39:6E:2D:43:66:D8:BB:73:BD:AB:67
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:50:9c:5a:e6:08:b6:7d:d1:54:d6:1c:81:fa:21:21:33:5e:
d4:21:99:a7:c9:52:9e:e0:a6:56:fb:c7:ba:c6:a8:c8:5b:4b:
7b:ba:61:23:48:e6:41:8f:a5:65:ec:ca:88:3a:9c:ac:d0:ac:
75:b3:23:35:06:30:f4:13:60:f1:d1:d8:f1:f3:3b:26:d1:4e:
32:69:8f:ca:9f:41:ec:45:b7:1d:20:c3:a0:d3:28:cd:26:14:
65:c8:3b:b7:3c:4f:71:be:6b:a8:83:39:92:17:f0:3d:49:da:
e6:71:2c:b0:89:0d:fd:7a:74:69:e2:a9:70:83:b6:02:1b:f6:
20:d1:24:d7:20:2e:b4:4a:9d:23:bd:95:66:55:23:72:ad:55:
3b:45:dc:9f:45:9a:93:da:a9:f7:7a:e2:cf:b8:a7:24:a5:b1:
7b:0c:53:f2:09:18:b9:86:61:b1:85:7c:a5:81:a6:d4:47:68:
2e:bf:ae:4c:cc:35:b7:ff:7e:67:cb:79:4e:8a:22:ce:cd:0d:
9e:2b:4d:96:fd:70:c0:71:7c:cb:55:48:d2:f5:9d:2f:8d:0d:
a3:df:a9:49:b6:d2:08:b5:3a:f2:d2:c0:a4:7b:b3:d8:68:56:
c7:bf:97:42:b4:d1:40:fd:4c:d3:64:f8:91:53:a2:15:d0:19:
4a:fc:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:02 2026 by rpki-client