Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: C6+KYaSTFwJbcn4hZ5y5Lqm9GxSHrMOB8Yputt7x1Fk=
Subject key identifier: C7:66:5D:6D:4F:9E:BA:0C:79:C5:99:01:78:A6:15:68:B7:BA:1B:2A
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 019D39AF1592C7513E68F0F4848637294E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 0BD8
Signing time: Sun 29 Mar 2026 13:01:08 +0000
Manifest this update: Sun 29 Mar 2026 13:01:08 +0000
Manifest next update: Mon 30 Mar 2026 13:01:08 +0000
Files and hashes: 1: Dg5PEYmKpTVI2DCPpp7B0MOqhXQ.roa (hash: 0r9Wvfa6jCmlqCpm1KLg+xpqhpapVEOAPFkYXdbs38g=)
2: H-gl84k76iOlzZYYJCblbDHN-l8.roa (hash: 9kM+SrqoWq0lxyCjUYdOI+zgBattq8/xzQWtVJ/ldQQ=)
3: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: buge3XrtCWTTanTXFogEN5PAtPJ03sI00YHwoC2Bjes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:15:92:c7:51:3e:68:f0:f4:84:86:37:29:4e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Mar 29 13:01:08 2026 GMT
Not After : Mar 30 13:01:08 2026 GMT
Subject: CN=c7665d6d4f9eba0c79c5990178a61568b7ba1b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:62:4f:e5:d5:f6:e4:fb:a5:96:68:fe:46:
ce:24:36:6d:02:9d:c5:49:2b:c4:1f:47:52:29:bc:
76:cb:7e:cc:28:d0:0d:d6:d5:b4:5d:ac:33:2e:81:
df:a4:b3:80:8e:58:f3:40:ba:e8:cc:52:8e:a1:43:
dc:81:7a:38:36:5b:c6:2c:e0:96:56:3f:da:1d:90:
f6:aa:85:0d:40:a7:b6:c9:8d:3c:72:37:4b:29:a0:
a7:46:01:b4:03:49:3f:ce:d6:4c:af:db:4e:53:6e:
59:f8:22:51:27:08:a7:63:74:97:d9:59:17:ae:a6:
6d:ea:8a:cf:4f:98:98:f9:c5:c0:7e:6c:91:68:f9:
b6:a8:ae:85:df:e1:0a:ae:2c:5a:f4:ec:a5:e2:13:
bf:ac:bc:b8:bd:4b:56:0c:6b:40:8e:11:63:dc:a4:
e3:52:f9:0a:cc:41:91:02:0c:d2:02:d2:1c:b1:92:
08:7c:6c:02:9a:ff:34:91:99:b6:43:a5:98:7e:60:
73:2c:85:25:3b:9b:05:3c:9c:ce:7e:7d:dc:96:4d:
c9:f3:eb:57:5a:32:af:00:6f:35:cc:d6:4c:d5:b8:
73:7f:75:60:a9:fc:36:9f:82:14:85:9a:3a:67:60:
8c:b9:82:61:c0:90:fb:38:7e:31:74:ca:6c:90:7d:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:66:5D:6D:4F:9E:BA:0C:79:C5:99:01:78:A6:15:68:B7:BA:1B:2A
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0c:d4:7f:9c:5c:a0:0a:27:65:de:f6:42:2d:25:1c:26:23:
ef:3d:ee:30:a8:12:98:44:77:3e:83:d2:60:6b:81:61:0c:12:
d8:69:b6:6c:69:cb:ff:24:b9:4f:57:76:b7:2f:56:48:26:8f:
7c:51:57:35:12:43:84:dd:82:16:a0:45:f1:e9:28:45:c0:7a:
3d:b8:46:0e:3f:03:b5:42:15:12:1f:dc:37:67:ba:c0:93:b2:
92:d2:41:7c:e7:f8:db:fc:5e:80:06:72:b5:6a:1e:68:f7:49:
3a:af:eb:73:ea:41:2a:a3:67:52:09:ff:93:63:31:a6:23:e2:
15:c6:ed:e6:a0:18:a9:b3:da:ee:11:d9:cb:58:22:8c:34:84:
ba:c2:10:db:93:5f:2c:59:cd:a1:19:1e:4b:8f:52:b6:5e:63:
28:a5:84:33:82:93:72:f9:a1:13:c4:e2:4c:2a:f2:d2:78:af:
26:ff:63:7e:4b:32:ee:2f:67:11:64:80:ea:39:7f:4c:18:d1:
d6:4b:29:8a:65:e4:f9:ec:02:64:92:e5:d7:ab:9e:09:24:cb:
d3:f7:d3:be:9c:33:21:5a:9c:3e:b1:a2:a2:69:d9:e2:56:8b:
10:5b:ff:bf:c6:ed:fb:18:3f:d2:86:4b:f0:f7:e0:e5:65:6c:
27:b8:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:36 2026 by rpki-client