Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: VPE+WKPu/NsqYzPsORWGA877VYUn96LUrat8NzSis80=
Subject key identifier: 7B:D1:EC:0D:CC:07:AF:97:97:9D:80:2E:00:C1:FA:5C:D0:04:AB:69
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 019DA5D47A1008EDF2C05C1C78193F4C96E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 02E9
Signing time: Sun 19 Apr 2026 13:00:58 +0000
Manifest this update: Sun 19 Apr 2026 13:00:58 +0000
Manifest next update: Mon 20 Apr 2026 13:00:58 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: Y3oQoOFtUL2stpNSa2G2UIppYcHQA5LyF+z609HZBKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:d4:7a:10:08:ed:f2:c0:5c:1c:78:19:3f:4c:96:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Apr 19 13:00:58 2026 GMT
Not After : Apr 20 13:00:58 2026 GMT
Subject: CN=7bd1ec0dcc07af97979d802e00c1fa5cd004ab69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:4e:8c:75:8f:f4:51:5a:bc:5f:9e:2f:49:
2d:74:c4:a4:d7:e8:54:1e:37:20:81:0d:40:af:91:
a8:28:aa:94:42:a9:89:e0:ab:2c:e8:fa:e3:d7:5f:
af:5c:aa:e9:9b:cc:7d:e9:9c:30:d9:28:04:ff:b4:
c4:89:92:3d:7e:ea:c0:6a:20:5d:09:5b:9c:73:82:
37:a9:bc:76:d6:f1:f4:8d:ec:49:a5:e7:16:90:6c:
07:92:23:cb:02:a6:00:66:25:05:40:9a:1a:49:97:
27:c5:4c:60:a3:0e:cc:d6:f5:94:a0:bb:cb:0b:0d:
27:eb:24:f6:10:04:09:74:de:e5:b6:56:a6:22:ce:
a9:80:68:a8:ed:f4:79:00:1c:90:e4:7e:9a:6b:6f:
c4:9c:4a:eb:36:a4:7e:2a:dd:a0:5b:37:5b:1f:85:
df:23:b9:f2:ba:2f:ec:e2:dd:87:2a:7b:a8:2f:d8:
6c:dc:9c:aa:e3:ca:67:80:35:36:d0:f2:3d:d7:13:
92:5a:5b:8c:46:e7:6f:86:2d:85:88:ee:64:8e:53:
6f:5f:9d:40:cb:7b:5d:27:fb:ae:5d:5f:e7:6a:e1:
7e:f5:20:70:9a:bb:35:24:55:33:d3:8f:3d:35:b2:
65:b2:c6:3e:5f:36:05:20:8d:24:91:f4:e6:9e:22:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:EC:0D:CC:07:AF:97:97:9D:80:2E:00:C1:FA:5C:D0:04:AB:69
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9d:9a:a4:27:13:23:83:f3:a2:f4:d3:7b:ed:b8:48:42:4c:
12:92:2a:d2:34:75:48:ec:ea:17:09:99:c6:c5:69:16:47:70:
fe:f2:a0:41:51:a1:fa:23:a4:dc:1e:14:78:24:b3:45:7e:d3:
e0:c3:ff:e6:81:9f:e4:fa:82:f0:2e:6e:7a:79:ed:a1:77:ba:
e8:8a:c7:5b:52:6c:ca:6e:d8:78:04:3a:af:8e:ac:87:30:1f:
99:3b:a9:c5:e5:40:73:5c:86:30:a5:c4:9b:78:22:20:0f:62:
ec:18:5b:83:ff:84:a4:4a:c9:a9:48:bc:7e:f2:d4:19:1c:43:
1d:02:21:54:98:3f:20:77:fd:29:2e:c4:c2:7c:85:96:43:e1:
d7:cd:fb:96:13:bb:82:20:90:55:46:2b:23:b0:51:c8:a6:fb:
11:d0:5e:e8:24:3e:ec:ca:1e:8a:f3:55:ad:9c:fd:95:3b:3f:
bd:da:69:3f:68:db:a5:e1:42:35:21:df:17:30:75:ef:87:b4:
53:c5:c5:41:9c:15:b0:7f:1a:55:42:21:4b:78:ca:5d:88:5e:
14:61:76:ab:3a:a5:c2:ac:6f:61:0d:67:0e:94:76:81:9c:64:
d5:14:07:fc:6e:06:c4:37:2b:c7:95:52:1c:1c:9c:f3:cb:f5:
ae:1e:06:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:30:38 2026 by rpki-client