Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: ADZWA5ChmH+amAvoVvow5YqtEcSe1Ltz/dDeCCbYAKA=
Subject key identifier: 84:78:51:1A:55:37:69:F8:ED:98:C1:6B:EB:47:28:CB:2E:C3:E0:8C
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 019D3940BE1E879F225612AFB1DABABD5588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:37 +0000
Manifest this update: Sun 29 Mar 2026 11:00:37 +0000
Manifest next update: Mon 30 Mar 2026 11:00:37 +0000
Files and hashes: 1: 4ShXPhWP4Qk_JTUR7nsENpLjDoc.asa (hash: HXRCdfUgdsuwOo68NwP3+PURL7JrnmOHum1V4B+oxJQ=)
2: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: K/rIJ3YetFdbrGaaYsNP/QYNxcgCc+A3TBhUvnu2o0g=)
3: z9el3Pn-CpyrzO9Vpc8qFS83Pew.roa (hash: TxiEHGj0MKgQ69SIev2O5ouEAGP38IAOU0+l3e8LjrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:be:1e:87:9f:22:56:12:af:b1:da:ba:bd:55:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Mar 29 11:00:37 2026 GMT
Not After : Mar 30 11:00:37 2026 GMT
Subject: CN=8478511a553769f8ed98c16beb4728cb2ec3e08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:c5:2c:32:b0:13:5c:6a:25:a0:90:0d:d8:
37:51:86:ec:d0:73:ef:6b:09:f3:b9:b1:08:fe:b9:
c7:ad:eb:f9:9c:4d:ae:7d:9b:d4:fa:75:f9:b3:03:
60:af:47:91:14:e1:85:dd:be:a2:ec:d5:9a:c6:d8:
04:cf:1e:f7:5a:1c:da:c5:a2:96:f9:63:77:b6:93:
69:cd:fe:be:d9:e4:ad:18:84:c6:59:5e:52:a0:9b:
02:76:15:a5:8e:1c:4c:30:08:96:09:57:7c:8f:93:
01:06:89:c8:0c:f6:74:9d:db:b3:67:2e:4d:a4:61:
28:b9:c1:4d:35:32:b2:f7:f7:55:d2:f6:18:fa:67:
70:e9:8c:3b:57:e2:2e:d7:26:58:82:1a:fe:7c:2d:
8d:a5:57:66:0b:ef:87:3d:a0:c4:db:b0:f5:75:6f:
f5:c7:a4:93:21:7f:b7:7f:1d:18:64:09:50:ae:fc:
ec:77:b9:00:35:6c:92:41:f7:6a:af:86:bf:9e:da:
e7:13:6b:d9:72:f3:eb:b8:1a:e1:f9:33:54:84:cf:
61:91:f2:76:93:6c:c4:a1:b4:02:95:3c:eb:3c:a7:
56:6a:4a:a0:bc:09:b6:a1:9e:63:4b:49:9b:ad:af:
1a:94:3b:cd:50:e7:9d:c4:74:a0:0c:c2:24:9b:92:
d1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:78:51:1A:55:37:69:F8:ED:98:C1:6B:EB:47:28:CB:2E:C3:E0:8C
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9f:f6:36:09:7b:f6:b8:18:94:4c:1a:22:d4:74:e9:1c:45:
29:18:44:2f:3b:af:cd:23:5d:ff:1d:ed:7b:83:8d:a8:2d:b2:
0e:6d:bb:dc:aa:fd:44:9a:19:51:40:a6:b5:c1:d8:af:59:f7:
6f:12:7a:02:09:d5:ac:fd:b3:f9:17:80:f6:fa:cb:df:1d:98:
6d:9c:d8:cc:c8:6f:e0:97:e2:69:2b:bc:59:12:ae:29:25:8f:
cf:36:cb:78:84:9f:8a:0b:53:bd:4b:37:34:fc:8d:34:f7:a6:
71:79:59:33:aa:2d:97:77:5b:56:f0:b5:ca:5a:b9:98:5d:3a:
89:0e:1d:55:38:e3:7d:9c:c7:0c:31:b4:30:4c:ce:3b:46:81:
a3:a3:6e:b8:8b:c6:37:af:03:44:cf:d5:69:f8:70:21:da:03:
83:4a:4c:0f:48:b7:2a:f9:99:87:a8:64:e7:72:fa:e8:a7:09:
60:2c:eb:d1:7a:dd:6b:15:88:09:f4:1f:aa:b0:c4:96:80:bc:
53:2a:03:e1:85:c1:4b:07:25:f4:92:2c:38:ba:36:49:e9:b6:
4a:3e:4b:81:19:f5:57:84:0a:2e:ec:53:dc:d3:ae:ab:5a:e9:
32:e6:2c:53:1c:61:bb:46:e6:77:90:72:87:b5:b0:ee:3d:ad:
9d:52:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:10 2026 by rpki-client