Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier: NnEDBJqynxebUbu/Z4UqaM0bjtwu7uFRWh4Nk2nZgfM=
Subject key identifier: 4A:E8:C8:68:2E:A9:E2:F3:C4:C5:CF:76:DC:08:DC:DA:48:02:56:89
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 019CACEB94BB85E9FB9DD890C5E4C1FF174B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 05:00:45 +0000
Manifest this update: Mon 02 Mar 2026 05:00:45 +0000
Manifest next update: Tue 03 Mar 2026 05:00:45 +0000
Files and hashes: 1: 9iYRo82i9hRkUCgmREahdJYxLLE.roa (hash: Iaajzt1IR/GS2dadWD8d0yfp4+37Bgf5XHM3q2W76dA=)
2: Jm12F1fJac9AdzTGN7xQVn8K_U4.roa (hash: P/nVz8qxvVHC3IkIASDUTBADr0JHFnsbfxbsnkdVypc=)
3: U17Ig7TH3Hf9u0Hjug4B8FqbaeM.roa (hash: h4vlRYblnFE5NeXhaGifoUzHbL8gvX60WPtBD/isPek=)
4: Z81lv8qaADBtEGYsx0-brJvvQeg.roa (hash: r6SobeHV+YoGbEJkji/z1sNc1KoSoCEgvZU8Lt5eYac=)
5: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: Mi73BK5Lj7/kbXTpserbvan3tPkpwomdSMx/gqxKB/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:94:bb:85:e9:fb:9d:d8:90:c5:e4:c1:ff:17:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Mar 2 05:00:45 2026 GMT
Not After : Mar 3 05:00:45 2026 GMT
Subject: CN=4ae8c8682ea9e2f3c4c5cf76dc08dcda48025689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:71:59:2b:4d:a0:74:51:84:01:57:40:1e:
b8:ce:7f:e4:a6:41:e2:bc:00:46:c7:b9:86:e2:ba:
7e:68:85:9d:ae:05:6a:79:84:dc:92:bb:a4:9b:d2:
e9:4d:4f:67:ba:ea:33:e4:d5:ea:a5:ef:87:2e:25:
e1:77:5c:c9:0c:7d:43:d6:7e:db:84:b6:56:2d:6c:
39:87:51:ca:3b:2d:91:69:da:c2:dd:63:85:ac:9c:
59:ff:b1:06:3e:4f:27:f6:db:80:00:80:a6:28:1a:
12:58:b1:53:8e:bd:69:b8:a2:8c:08:61:cd:db:25:
39:6a:f0:5f:2b:0f:13:b4:79:18:4e:60:bc:02:e3:
c3:41:2e:c2:c2:8f:c7:f1:13:b9:bc:26:38:63:34:
e0:e5:8f:7b:67:6a:c1:b8:be:43:db:cf:3d:d3:eb:
9e:e0:a7:e2:ed:60:3c:46:e7:67:fc:11:86:6f:7e:
e9:3c:bf:0f:e6:a8:a3:88:ca:2f:2a:eb:87:d1:4a:
b7:65:0e:66:91:44:df:cc:4c:a5:90:d1:7e:4c:91:
9e:fa:78:89:21:79:22:de:a5:73:c3:ae:ba:55:54:
f1:07:6e:03:d7:27:a6:11:7b:40:14:7e:c5:67:5f:
c8:db:c4:5a:82:ef:90:02:bf:20:c2:1b:3b:c9:f3:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E8:C8:68:2E:A9:E2:F3:C4:C5:CF:76:DC:08:DC:DA:48:02:56:89
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2e:52:02:21:d2:49:f0:00:41:14:95:98:6e:d1:0e:d7:65:
df:bf:42:86:bc:d8:aa:da:60:1a:e7:41:5a:8f:59:f7:ae:b9:
d0:62:8e:a8:46:bc:cd:fc:5a:b8:db:f9:94:bc:68:f4:1d:f5:
4d:c3:aa:a5:01:96:5c:6b:0a:4c:08:c5:12:01:fe:48:6c:cd:
82:d7:45:00:21:6a:3e:a4:40:1a:cd:ea:4d:82:18:8e:c4:8e:
3e:0b:08:a8:5c:48:d6:82:a7:be:a0:8b:84:a0:03:ad:60:29:
60:67:4c:6a:7a:8d:74:68:b7:6d:2d:e6:4c:14:39:69:c2:cb:
10:94:76:bc:6f:86:a8:fb:45:7f:5d:f7:56:82:58:16:e2:b7:
77:23:75:d8:f7:14:05:8b:f4:d9:5e:74:f5:cc:3f:af:f9:ec:
02:d2:5b:2a:52:84:aa:03:b3:6b:7a:3e:54:af:77:e8:41:cc:
2c:6d:5c:14:ea:9c:1a:e3:e7:09:f4:eb:00:44:91:b7:c2:9e:
69:a6:c2:e3:e9:ac:f2:5c:a4:4c:37:f6:b9:ff:66:d3:d2:e6:
ac:bd:4c:19:be:41:09:ac:d6:63:af:d6:b5:92:58:77:8f:e8:
c8:64:1e:bb:6e:d9:8c:ad:25:e9:ab:f6:d0:07:a8:10:c0:bf:
a7:bf:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:08 2026 by rpki-client