Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: 6kN1bpa/FqYLDd403NQ4TtR5P8VP4GkzmI5DhvnSCAM=
Subject key identifier: BA:B5:74:B8:46:6A:4E:27:71:07:AD:A4:30:B5:72:64:59:ED:37:FE
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 019CAEA3851B2279E3388FE50CB8FBA82757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 0269
Signing time: Mon 02 Mar 2026 13:01:17 +0000
Manifest this update: Mon 02 Mar 2026 13:01:17 +0000
Manifest next update: Tue 03 Mar 2026 13:01:17 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: ZmOnlkPnoEpQdC9qpm37fhHEjsBClSf6koixGs8RLus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:85:1b:22:79:e3:38:8f:e5:0c:b8:fb:a8:27:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Mar 2 13:01:17 2026 GMT
Not After : Mar 3 13:01:17 2026 GMT
Subject: CN=bab574b8466a4e277107ada430b5726459ed37fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:6b:63:2a:fa:46:52:bb:5e:50:ac:42:36:
40:5c:dd:fd:06:a0:62:60:b7:16:27:13:e1:63:69:
dc:1f:1f:6b:ac:66:5f:fc:c9:d0:ee:32:5d:c3:37:
16:92:2d:35:a6:bf:b5:65:ca:d3:07:21:95:6b:c6:
02:57:c1:9a:40:f0:d9:d7:79:ea:62:8e:5f:5f:89:
1a:f4:ac:67:8c:58:ac:68:7e:b1:19:ce:ab:99:e7:
cb:4a:f4:25:67:8b:50:c2:52:51:b5:6a:73:02:ac:
13:fd:b0:07:5a:af:d7:f0:11:80:36:d1:b6:59:3e:
f6:85:97:3a:20:65:29:42:22:d1:86:24:90:60:cf:
a0:5a:a2:ff:b4:b7:e0:94:23:ff:ca:22:a2:a9:ad:
03:3d:dc:d9:2b:ae:77:f8:3a:d2:58:7f:bb:9c:9b:
23:7e:1f:93:04:04:55:a4:bf:b4:0e:80:7f:d6:5e:
a6:5e:0e:8b:bc:1e:d1:01:b9:19:20:aa:66:d3:91:
19:1b:9e:0b:3b:5d:25:d3:bb:90:75:06:c3:b0:bc:
0b:6b:c7:db:02:93:25:98:95:5c:83:6f:a6:25:d3:
ae:1b:c9:6a:3a:fd:d2:f9:7b:33:8d:1f:c0:11:f9:
00:77:58:95:76:53:f2:c0:07:9f:f0:15:4f:8d:9c:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B5:74:B8:46:6A:4E:27:71:07:AD:A4:30:B5:72:64:59:ED:37:FE
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:dc:36:98:f8:50:66:2c:a9:2f:a1:fe:1d:71:fc:10:6c:9d:
1c:0d:02:3a:ef:41:0c:26:2a:ac:77:70:f6:67:09:bf:4f:1c:
70:af:e7:97:86:e7:f9:86:6e:dd:bf:68:52:db:f0:a4:5d:40:
1a:e0:13:b6:97:27:62:3e:1f:07:36:4a:05:2b:fe:88:ab:84:
bd:f2:9c:74:29:f0:9b:43:7d:bb:72:9b:25:a0:26:e7:95:24:
1f:83:46:73:0e:0b:21:97:09:0d:5e:18:b8:d1:0e:1c:c3:4f:
d0:70:a7:1f:4a:7a:5a:73:2b:ec:c7:ea:d4:4a:06:da:2b:c8:
eb:6a:7b:97:c1:b4:ac:06:bd:d6:af:4e:68:d1:3f:64:ec:e0:
f1:41:5a:24:25:73:c4:63:d4:a0:69:68:28:86:8f:02:db:81:
8e:34:17:d8:09:76:77:c0:23:b7:e8:c0:ab:33:c4:81:a4:5a:
77:85:f9:9f:1f:f3:9f:e6:90:cc:f0:71:3d:49:cf:59:4f:ed:
14:9b:a1:7d:09:f1:5d:eb:37:44:e7:3c:9c:ce:13:f8:94:40:
53:fc:8e:c4:ba:17:31:7d:d5:c3:82:f2:6c:2e:58:21:06:2b:
f1:18:93:f1:e6:bf:20:44:13:1e:a8:82:ed:e7:ea:64:d1:07:
27:35:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:50 2026 by rpki-client