Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File: gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier: 9sU1R7pu+1+/r6hTNOPSk5gBvkG9249cmjvhrdcJ/dg=
Subject key identifier: F9:E4:EC:2A:B2:02:DB:59:11:87:8F:EB:3B:10:09:F4:C2:5C:89:14
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer: /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial: 019D3940B23DEC208857AFD8A2C071A91BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 11:00:34 +0000
Manifest this update: Sun 29 Mar 2026 11:00:34 +0000
Manifest next update: Mon 30 Mar 2026 11:00:34 +0000
Files and hashes: 1: ATLOmeA5cf4AwJ9U-Q-N1ldTcPE.roa (hash: hnP5uN1NwwvHi/WK/M6S1b6bdfJWGxirQCx3zSYRXtM=)
2: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: 7g5l4c/dQ8EovOWp79tY7t6HWDEmtr7o/+R5lVIoMvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b2:3d:ec:20:88:57:af:d8:a2:c0:71:a9:1b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
Validity
Not Before: Mar 29 11:00:34 2026 GMT
Not After : Mar 30 11:00:34 2026 GMT
Subject: CN=f9e4ec2ab202db5911878feb3b1009f4c25c8914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:e3:6f:a8:b7:5f:45:0f:84:15:a9:fb:03:
e3:ee:99:9f:95:e1:22:55:e3:49:15:46:34:4d:fa:
75:82:42:88:c8:ce:f5:db:a3:37:6a:d2:9a:fe:e1:
3d:57:d3:3f:27:3f:e7:55:f6:28:83:db:dd:62:84:
65:51:1d:50:c7:28:6e:a3:d4:ed:09:a4:c1:26:c7:
5b:bb:38:54:4a:49:d6:dc:8d:70:5c:83:3d:bf:dd:
78:ac:2e:6c:ec:8b:85:aa:84:e6:f8:e9:06:76:70:
2a:a4:d0:4e:2c:4a:70:dc:fe:84:7a:62:78:c2:9b:
65:54:63:27:5e:ca:e6:08:7e:0f:80:6d:cf:e5:df:
e1:08:64:7a:1e:e5:72:53:2c:cf:73:16:5c:40:32:
59:d8:99:b0:a2:9c:3f:f6:4f:01:f1:d2:48:c9:15:
d3:6f:64:9c:8a:59:cc:64:e8:f8:25:29:b9:fe:47:
f5:ef:9b:5b:41:6a:d0:ff:c3:0c:21:63:b5:08:3e:
48:29:26:29:29:cd:04:26:2b:3c:5a:aa:d2:5d:6a:
d2:0f:34:13:ab:10:3a:42:99:d0:2f:93:dd:03:ec:
b8:71:fc:82:3b:0b:04:20:3f:7d:2e:07:9e:7b:63:
95:96:dc:f6:30:a5:21:e9:b3:81:fb:5e:2a:96:e5:
e6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E4:EC:2A:B2:02:DB:59:11:87:8F:EB:3B:10:09:F4:C2:5C:89:14
X509v3 Authority Key Identifier:
keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:33:50:06:8b:01:2b:9f:22:c3:4b:1d:09:34:ab:ee:39:aa:
39:bb:ce:04:49:f4:d4:c0:cf:d6:cc:4a:50:8c:63:81:aa:e3:
e0:3c:0c:ed:1a:d0:4d:fa:ef:aa:58:29:90:9a:5b:f4:98:a5:
55:eb:8a:07:ba:17:02:3c:1f:cb:4c:85:7d:2c:01:c7:30:52:
5e:cb:e6:82:d3:aa:4c:da:99:e3:c8:d8:9b:c9:4c:65:c5:e7:
98:15:fb:22:ae:8d:53:64:d5:c6:f4:24:3b:37:ff:45:9b:67:
f3:70:1c:84:3e:bb:a0:8e:9e:5f:16:62:e1:20:a4:6e:51:d4:
dd:77:91:cc:d4:d6:c5:01:e5:4c:28:f9:59:10:28:e5:74:df:
63:66:17:2d:8f:89:41:31:25:a5:d2:84:66:41:13:80:20:62:
a0:bb:3a:8a:93:55:48:3c:08:f7:17:dd:5e:42:e8:a0:79:68:
ec:ff:36:1d:a5:59:52:6d:36:02:22:9d:3f:a8:3d:ad:35:46:
57:7e:48:83:3a:5f:d5:86:f0:cb:88:97:60:2b:1f:90:64:ab:
96:c7:d6:68:c4:3b:1e:d6:48:f6:47:3d:1e:cb:fb:5b:e9:7f:
7b:96:d8:31:c0:87:c8:06:19:08:66:98:a6:45:51:bb:74:2b:
53:83:14:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:59 2026 by rpki-client