Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier: VgpfkxfddnEUjoO3pg1tkebiy/1pRc24/CNFi8bOtdY=
Subject key identifier: CE:6F:51:4E:58:93:B8:17:08:89:22:8C:CC:A7:D1:6B:C5:B9:66:2A
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 019CE290A7B32B1063B23C300F67D23A6EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number: 09C0
Signing time: Thu 12 Mar 2026 15:00:56 +0000
Manifest this update: Thu 12 Mar 2026 15:00:56 +0000
Manifest next update: Fri 13 Mar 2026 15:00:56 +0000
Files and hashes: 1: 0sYvu1PO-IyHrG5N2OwGBlK2IA0.roa (hash: NMF2/P9bXnT/asgGcGIGlNxwJHSua/9I79hyE0CwqWk=)
2: HGlsVrHEnVUZTxnltUDYgtbddII.roa (hash: PRTqegkFaXBSmjlIahMPcYyZ0ftS890tO/2pjXR1d6s=)
3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: /ilqqva0bx2xm3f8Hse7e7hx+zjMqKULyY1ZH/h4T6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:90:a7:b3:2b:10:63:b2:3c:30:0f:67:d2:3a:6e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Mar 12 15:00:56 2026 GMT
Not After : Mar 13 15:00:56 2026 GMT
Subject: CN=ce6f514e5893b8170889228ccca7d16bc5b9662a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:3d:1b:2d:ef:37:d4:87:a1:d8:18:02:63:
00:97:76:1d:c4:4e:55:72:58:2f:2e:e0:a2:7e:b7:
1a:e9:f4:48:e9:18:fd:5c:19:c7:64:63:1c:20:64:
cf:16:9f:ff:16:38:fc:02:4b:3c:a3:6a:46:f6:69:
40:70:fa:ca:9e:24:c4:9a:de:6f:25:e9:b0:a2:09:
f7:52:25:c2:fb:57:b5:c0:bd:ff:ca:b5:3b:4e:27:
55:44:ca:4d:c7:bf:17:bf:04:eb:bb:dc:40:fb:74:
94:8c:0b:95:b1:7b:4f:9c:d8:7d:a5:0e:d9:e9:1b:
11:f0:53:81:ea:63:d8:61:eb:aa:57:7f:70:18:b0:
4e:88:28:94:6a:4b:ed:9b:07:55:46:e1:f9:7f:f8:
71:c1:cf:f9:ea:f4:23:a1:32:f3:47:54:02:6d:39:
17:b3:33:82:9f:25:48:71:e4:14:26:e8:d2:07:c1:
70:13:9f:22:cc:01:7d:17:6f:80:16:90:7f:d1:20:
b4:1e:42:e1:3b:6a:00:ff:15:24:72:62:c8:08:8a:
af:24:38:26:0b:9e:42:b6:fb:93:0f:83:6b:7e:ac:
e1:74:08:b3:e5:9a:b4:df:ab:cc:94:51:25:ae:58:
86:45:05:34:48:30:87:71:cf:19:d1:c8:47:bd:53:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6F:51:4E:58:93:B8:17:08:89:22:8C:CC:A7:D1:6B:C5:B9:66:2A
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9c:36:d2:21:6b:94:e9:7a:de:94:0a:46:fd:19:68:3d:e3:
50:84:1a:d2:a3:b8:1d:b1:cb:8c:8a:21:42:5f:48:a0:9d:db:
93:99:f3:8a:f8:60:e5:70:1b:b8:dc:55:40:b5:97:02:7a:de:
05:2f:23:28:c2:79:5a:10:20:88:89:f5:de:75:5b:61:81:31:
55:52:9f:40:7f:8e:a4:ae:cb:3c:ab:60:c3:1a:37:a3:44:99:
68:57:19:18:64:ad:42:8b:dd:d7:29:04:7b:48:8b:10:19:8a:
9e:aa:92:5e:42:c0:b0:24:7a:4d:2f:dd:e8:1a:af:5a:29:23:
ba:c4:ef:ff:c8:e4:83:87:eb:ad:27:95:4d:fa:ba:6f:4d:d3:
d7:71:fa:e1:f0:4a:8a:51:61:0c:00:45:30:91:29:ae:a6:27:
8f:22:98:71:df:d9:7c:f1:e1:84:07:60:ce:d7:95:5e:a0:af:
64:d4:d2:ee:ad:ba:81:6c:d5:55:f9:96:19:e9:91:a2:ae:57:
9e:b9:ef:a9:4f:3a:69:47:cf:f0:cb:c8:8a:76:7e:3c:b3:2a:
e8:49:7d:63:bc:64:fe:2a:f8:de:6a:18:50:09:64:8d:fc:5a:
a7:2d:f7:2b:e0:74:a7:18:42:09:f1:a9:e1:aa:93:7b:fd:ca:
46:09:0d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 20:56:13 2026 by rpki-client