Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier: Mrbz0ZLPKOtRYgcXS+Kux2VlGnUES9oDGp5fNFG1vCA=
Subject key identifier: 4B:7E:36:B3:87:CE:20:7F:74:CA:05:55:95:A7:15:08:D4:8B:41:06
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 019DCE2BCE42A60DD9EBE91AABF33E6259E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number: 0A3A
Signing time: Mon 27 Apr 2026 09:01:10 +0000
Manifest this update: Mon 27 Apr 2026 09:01:10 +0000
Manifest next update: Tue 28 Apr 2026 09:01:10 +0000
Files and hashes: 1: 0sYvu1PO-IyHrG5N2OwGBlK2IA0.roa (hash: NMF2/P9bXnT/asgGcGIGlNxwJHSua/9I79hyE0CwqWk=)
2: HGlsVrHEnVUZTxnltUDYgtbddII.roa (hash: PRTqegkFaXBSmjlIahMPcYyZ0ftS890tO/2pjXR1d6s=)
3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: WjqIMni6MjYhiO/3nPdUtbPXiTNl293UNZ3J4ThYtfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:ce:42:a6:0d:d9:eb:e9:1a:ab:f3:3e:62:59:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Apr 27 09:01:10 2026 GMT
Not After : Apr 28 09:01:10 2026 GMT
Subject: CN=4b7e36b387ce207f74ca055595a71508d48b4106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:8b:74:54:85:18:44:08:1d:6c:b2:09:e0:
d0:73:b2:d0:e8:a6:39:7d:05:9a:cc:07:2c:72:8a:
46:29:f9:37:4d:9e:b1:70:72:d4:27:44:85:85:a7:
55:98:8b:20:26:37:2d:8f:59:5c:75:a0:5b:76:bd:
80:5a:b3:63:41:94:ae:05:a6:5e:aa:74:a4:ed:92:
b7:ec:3b:e8:8d:5f:41:33:4e:c4:2d:24:f1:3f:34:
e9:99:03:22:62:18:d0:ab:76:65:ca:b4:28:0e:33:
b4:74:42:c8:cd:08:8d:14:68:ee:c4:56:cf:f6:64:
59:d1:56:af:b0:23:5b:0b:2d:5e:da:7b:d6:13:46:
1b:17:22:de:0e:81:d3:55:5b:6d:f6:b3:6d:5f:15:
54:e0:02:f9:49:69:a2:e8:d0:3e:51:8b:35:3f:7c:
67:50:bf:f2:66:c1:cc:5a:dc:26:1b:2e:51:4d:03:
2c:62:f8:84:b0:a6:92:05:4b:82:d2:cb:99:c1:5f:
03:76:c9:f6:9b:9b:58:cb:d0:10:71:c7:ce:31:6c:
e4:8a:22:8a:e5:96:c3:35:09:0b:ab:28:54:fe:df:
74:e7:1c:ee:fd:08:88:6d:a4:af:38:2c:48:e7:cb:
3f:2c:d5:70:74:95:7c:96:73:69:52:15:7f:8a:a5:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7E:36:B3:87:CE:20:7F:74:CA:05:55:95:A7:15:08:D4:8B:41:06
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:32:ac:85:e9:19:66:da:0b:73:65:07:be:f9:d3:ac:db:cd:
3e:70:ce:f0:da:13:45:0b:7c:8c:83:16:ae:ec:5e:71:ee:80:
54:ae:82:da:40:83:e0:16:ee:e0:e6:90:d2:c7:45:fe:13:34:
64:55:6b:f4:a0:1b:53:1d:b8:01:31:a0:7c:0b:32:66:26:ac:
94:f4:48:47:bd:61:cc:17:5c:28:10:cd:77:72:aa:74:67:14:
b5:f8:01:d2:ac:dc:69:d8:29:1b:72:8c:18:1a:84:df:4b:b5:
dc:59:a7:b6:98:10:c4:40:05:82:1f:e2:8e:c6:63:9c:25:ea:
fa:05:5b:f5:3b:38:b4:d7:f0:4e:6c:c4:75:4f:26:db:45:c0:
d5:8c:ed:7b:a6:e6:0c:f2:c1:47:b7:7f:fb:01:e8:71:9f:ea:
02:48:99:0f:b5:81:2d:42:61:61:3a:ca:e6:f2:62:b2:b9:9c:
7c:ec:f4:f3:3d:50:50:07:1a:67:48:c2:9e:b4:79:fd:d3:b2:
70:18:1a:23:95:c4:14:44:e5:f6:68:15:cb:6a:80:8c:fd:3c:
7d:90:b4:ec:97:2b:48:c5:ac:2e:6c:23:4a:85:9f:b2:be:00:
3f:f5:29:09:7f:47:94:ce:13:26:b9:df:ab:2f:31:6f:1e:5e:
cc:34:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:33 2026 by rpki-client