Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
File: gP-4grVdAkWUCj414a3dU6esf-Y.mft (raw, json)
Hash identifier: nMyr637i/hHjgC3haIesXIQa1KejHtk04lstUR4PPAw=
Subject key identifier: 8B:39:17:BF:1D:39:08:D7:CC:CB:4C:26:D9:B7:21:38:93:22:17:E7
Authority key identifier: 80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
Certificate issuer: /CN=80ffb882b55d0245940a3e35e1addd53a7ac7fe6
Certificate serial: 019D3789061091AA3CAD214D36A349F6E5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
Manifest number: DE
Signing time: Sun 29 Mar 2026 03:00:19 +0000
Manifest this update: Sun 29 Mar 2026 03:00:19 +0000
Manifest next update: Mon 30 Mar 2026 03:00:19 +0000
Files and hashes: 1: gP-4grVdAkWUCj414a3dU6esf-Y.crl (hash: tUHICn0OspTG9wAZiIK/K26sz+cAcNUVSJg5LU1umuk=)
2: ghkZqiRBYP7F8aWdqRde-YlWVwI.roa (hash: D1th9djUsHfufM7g4Iy1vOHC4rWVpb4G82R0TUpgdcQ=)
3: uwzrkDAt1bWbxPHQL77n6ueMwTQ.roa (hash: v6tCrn+4VuGO560AfCeDjuj3YGlPBrSypyg+OiqsxoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:06:10:91:aa:3c:ad:21:4d:36:a3:49:f6:e5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffb882b55d0245940a3e35e1addd53a7ac7fe6
Validity
Not Before: Mar 29 03:00:19 2026 GMT
Not After : Mar 30 03:00:19 2026 GMT
Subject: CN=8b3917bf1d3908d7cccb4c26d9b72138932217e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:54:3b:3d:60:96:1f:63:a5:65:3b:35:f4:66:
13:55:a9:40:04:33:4d:bf:cd:94:c5:a9:dc:61:1f:
f9:eb:5f:4b:77:f2:ff:c4:65:0c:01:b4:72:6c:9f:
37:ba:96:93:37:1b:07:32:89:1b:68:2e:ef:aa:11:
ec:ed:b1:5a:11:76:09:40:c6:a2:8a:a4:2f:e6:40:
ce:c0:ce:39:3c:ff:da:9a:18:68:c5:9b:fb:03:2d:
af:1e:a4:26:96:81:a8:74:e2:1d:85:22:09:77:0c:
ed:c1:5a:12:af:5a:d5:3e:95:cc:a0:01:9d:52:01:
c8:6d:14:e3:ff:9c:db:57:cf:74:35:06:a4:8c:70:
9d:68:c0:41:3f:5f:70:f8:a0:fd:ae:91:7d:fd:9e:
66:bb:9c:e6:e7:56:52:b0:8c:2a:53:d8:27:c8:e7:
07:44:64:62:3d:68:5e:1c:d2:76:3d:73:16:73:b9:
db:ff:68:75:e0:67:13:ed:51:45:0f:e2:34:b2:b0:
cf:22:c3:f2:e7:4e:3e:0c:f6:69:21:e7:88:8e:a6:
d1:a3:f3:06:7f:25:9d:50:88:89:cb:96:f6:61:4d:
dc:bd:b1:cb:8f:f4:67:f0:e6:d6:96:34:19:0b:ff:
2c:e8:47:24:50:86:39:26:17:05:c4:fc:98:6b:80:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:39:17:BF:1D:39:08:D7:CC:CB:4C:26:D9:B7:21:38:93:22:17:E7
X509v3 Authority Key Identifier:
keyid:80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:14:ce:49:94:b0:78:e5:15:da:67:a4:7c:6b:59:cc:d8:95:
e9:0b:a8:b3:92:49:68:55:47:4b:55:99:d5:5e:ed:27:ca:c1:
2e:97:ab:91:21:7d:4e:6c:eb:67:d4:bf:2f:8b:a7:b9:7e:d3:
62:1f:00:83:a3:26:2c:b2:f5:3d:c6:0c:8b:22:ef:c3:10:41:
e2:26:be:bc:97:72:15:e0:b2:e9:44:c5:d7:c2:a0:03:39:81:
5e:06:d6:a3:6e:ba:7b:3d:d5:9b:97:ec:f3:82:87:c8:9b:9c:
e7:66:b5:55:62:62:31:c1:e1:fd:fd:0e:0e:7a:3d:54:eb:20:
df:e8:98:96:34:cb:ff:4d:9b:f6:59:d9:22:c3:7d:ae:08:77:
5c:0f:24:1f:b5:63:c1:53:6c:58:f5:ce:8e:d5:85:1e:6d:2c:
f3:6e:30:bf:f8:67:cf:e3:8b:74:71:a1:29:25:2b:1d:95:af:
2d:8d:5b:ce:79:72:f9:44:22:fe:3b:bd:d7:6f:af:4e:76:bc:
3d:aa:39:1d:3d:fc:55:dd:3d:8e:21:52:5d:b2:1d:f6:81:30:
2f:68:66:35:70:59:b5:1a:1e:20:97:a8:f4:68:9b:16:e6:eb:
54:b1:39:bf:f4:11:1b:0f:64:aa:55:57:46:91:22:0b:d9:50:
bc:01:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:42 2026 by rpki-client