Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: A4SD9DSr5pFg85uMiLSAE1FuFTah1c3e+bXTDTygzYA=
Subject key identifier: 48:D7:DC:E5:BA:79:67:F7:FD:AA:0F:C3:F1:19:55:EF:C5:3F:E3:E4
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 019DA3E664439087556240E1B40B973085B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 02E8
Signing time: Sun 19 Apr 2026 04:01:18 +0000
Manifest this update: Sun 19 Apr 2026 04:01:18 +0000
Manifest next update: Mon 20 Apr 2026 04:01:18 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: aKU9AGntMdxFqqpL7ILDx6jm+fKtcmXYsK3AMYeMv4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:64:43:90:87:55:62:40:e1:b4:0b:97:30:85:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Apr 19 04:01:18 2026 GMT
Not After : Apr 20 04:01:18 2026 GMT
Subject: CN=48d7dce5ba7967f7fdaa0fc3f11955efc53fe3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:cb:e0:90:c3:f0:8f:e7:bc:8b:a8:1c:47:
54:a4:ac:87:b0:f8:b5:31:16:83:75:d4:95:ec:56:
ee:68:e1:62:90:7a:00:bd:d3:ff:7b:46:d0:bb:2a:
57:fb:6f:e4:c9:f4:c4:a2:a0:96:aa:db:c3:96:75:
ba:a7:2d:95:95:e9:bb:5f:91:ad:67:1d:50:62:fd:
bd:e7:e7:3d:55:1e:c4:8d:89:4e:07:ff:1e:86:48:
a2:34:22:b7:e5:fd:a6:1a:49:25:a5:73:01:ad:95:
6b:06:3d:c2:0f:5c:aa:2b:bd:cb:a6:36:16:2f:77:
0c:0b:a9:3a:25:f0:71:47:a0:76:9f:36:87:5f:6e:
2e:27:1d:c6:37:0b:61:35:24:9c:82:c3:fa:83:5a:
87:5f:84:ba:28:c7:7a:35:d8:fb:bd:42:ef:2f:4a:
d7:e6:93:c7:55:24:d2:63:2c:dd:2f:46:fc:a6:a1:
75:15:d9:dc:57:f2:87:a4:fc:c0:bf:57:8c:b8:f1:
46:93:1f:60:63:0f:48:fd:53:d4:d5:6e:93:ce:06:
16:6b:08:96:95:0e:db:9e:ed:f4:f0:7e:88:d2:52:
93:ec:d4:e9:89:54:f5:55:cc:4f:8e:60:94:7d:6c:
cc:4c:07:57:06:78:4e:25:f1:be:3f:fa:81:69:dc:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D7:DC:E5:BA:79:67:F7:FD:AA:0F:C3:F1:19:55:EF:C5:3F:E3:E4
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b0:ee:01:98:2b:b8:12:5b:23:04:0d:87:05:16:74:ee:19:
c1:c4:45:bd:3e:99:0c:39:64:2b:2d:bf:0f:a4:9d:fe:32:e1:
5a:41:5a:83:c2:78:cd:79:c4:f9:96:0f:d0:24:92:19:bd:71:
65:10:62:71:ec:dd:52:9c:79:b3:cd:be:af:6e:f1:fc:5b:cf:
10:d7:60:00:d6:94:c3:72:1a:2d:d5:91:36:5c:d8:46:53:33:
12:73:3b:33:5f:b3:f2:8f:90:67:42:1c:52:f1:e1:ac:a0:39:
e6:f2:26:9f:9c:8d:4d:ad:1b:de:56:cd:88:72:d2:a6:26:18:
24:71:6c:b8:32:45:36:ca:c0:43:b6:7d:a1:c0:39:fd:6c:19:
0b:60:79:ff:6b:15:85:62:fb:b7:7b:62:63:b4:0b:7e:df:34:
42:28:ac:e8:5a:18:d7:e3:67:3c:d1:1b:37:7a:1d:11:63:72:
06:a7:7e:63:40:f9:99:b6:bd:10:fa:13:43:c5:02:95:d6:cc:
73:12:f3:4d:6b:32:e0:00:ec:04:54:29:bc:64:4b:ef:1f:46:
d5:c7:c0:2a:1b:0a:65:db:a1:32:e7:20:f3:8c:2b:bc:f3:f3:
a1:d7:e7:f5:09:53:80:ff:9e:1b:4e:ef:f8:94:66:ab:1e:a4:
68:c2:dd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:32 2026 by rpki-client