Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: CitvBJ21zxy7fe3C7LFt9C5o3zomVrSV36ZWC3shkPM=
Subject key identifier: 7E:82:CE:E4:F7:34:4C:7F:DB:E4:33:27:A5:E3:CF:7F:4A:BA:CE:02
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 019D39E59562FD31A507A85F6AE2D3170ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 1550
Signing time: Sun 29 Mar 2026 14:00:40 +0000
Manifest this update: Sun 29 Mar 2026 14:00:40 +0000
Manifest next update: Mon 30 Mar 2026 14:00:40 +0000
Files and hashes: 1: CiIrcBM9yA3ZewdtgV4N1CH8GZY.roa (hash: /RFq6SqUsBxBmefl/oJJgPlTdelQAi+UQdtXbYFfKHs=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: nsmqF6a4KM0SupPsmVQyJzJjkR6fHP90vlm9GRxbi5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:95:62:fd:31:a5:07:a8:5f:6a:e2:d3:17:0e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: Mar 29 14:00:40 2026 GMT
Not After : Mar 30 14:00:40 2026 GMT
Subject: CN=7e82cee4f7344c7fdbe43327a5e3cf7f4abace02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:16:25:ff:65:57:78:64:b8:e9:16:74:f8:
8b:cb:c3:1f:8f:f7:86:06:af:cf:24:2f:63:c8:f7:
6b:3c:77:ff:0d:51:53:d8:fe:c5:7a:d3:aa:0d:f3:
d8:65:da:c9:36:0b:c9:3e:0d:9d:1f:61:18:a2:72:
8c:db:c5:fc:89:6b:0f:1e:29:34:0d:b6:2b:49:e6:
5b:f2:f8:cf:17:f6:8a:18:1d:fe:d2:06:9b:f1:40:
a5:31:e4:c6:cb:02:b8:b3:90:fe:76:9b:23:dc:9b:
98:f8:3c:e9:03:fb:06:92:21:f8:a4:57:13:8f:b0:
b8:7f:cd:0d:73:6b:d0:b7:91:31:e0:61:ad:38:6b:
9d:04:5c:3f:62:d7:be:21:90:78:18:51:01:56:af:
ee:32:9e:64:15:37:3e:32:10:4a:16:fc:12:13:61:
f8:e3:1b:78:f6:81:d1:7c:85:07:54:00:77:7b:18:
6b:28:ae:b0:ab:03:e6:30:16:2d:b8:59:5d:26:16:
34:91:15:78:f3:4c:52:30:0b:2b:ab:32:bb:95:f5:
b1:88:da:21:80:e6:0b:ad:03:a7:68:f5:ca:b6:e9:
7d:f3:c4:af:61:cf:07:a2:49:99:07:a8:ab:5c:f2:
35:c1:c9:1f:42:11:d1:bd:29:75:20:44:85:2b:74:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:82:CE:E4:F7:34:4C:7F:DB:E4:33:27:A5:E3:CF:7F:4A:BA:CE:02
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4d:b6:f2:47:2e:15:b3:22:a1:02:5c:a7:26:01:71:f0:6d:
d8:3d:9f:b8:05:6a:b4:ba:2a:24:be:5e:17:58:cd:31:60:4d:
3f:30:5e:77:88:40:16:99:90:bd:b2:c0:94:d3:75:c0:8d:ec:
18:dd:a7:9b:03:c3:7c:b7:d9:89:5b:52:72:57:c8:26:42:a1:
8f:f3:c5:43:79:96:31:77:63:76:99:8d:d3:d2:13:44:29:35:
99:23:a9:c1:07:c4:46:66:dc:60:d9:d0:49:d0:ee:2b:12:69:
95:a6:a8:da:c4:f2:89:80:a3:64:ac:16:d5:74:2a:9f:9c:c1:
34:29:de:bd:dc:17:af:73:5c:b6:a9:89:fa:d8:9b:83:98:8e:
18:76:5f:81:de:34:d6:c7:eb:c9:2b:8d:42:f7:20:0b:8f:14:
22:b0:7e:1c:c2:eb:ed:2a:f4:c3:f2:f6:d6:0e:e8:20:9f:fa:
34:69:78:31:39:84:2b:a4:4a:c7:f9:55:81:cf:80:4a:c9:55:
39:49:70:c9:b0:df:fd:ed:5a:fe:ca:91:00:3a:12:37:a4:f9:
a4:84:cd:63:10:f8:af:9b:3e:b6:53:fc:04:f0:ee:24:ea:a8:
34:b2:71:84:2c:33:2a:d3:f0:9c:3a:56:83:44:ae:dd:52:45:
a5:85:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:47 2026 by rpki-client