Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
File: gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json)
Hash identifier: yiZiwvkE/tDI6dGnr6quHVOVZ/GiqtGkFdhgT7+eZGM=
Subject key identifier: F8:26:64:2F:52:D0:6F:04:7B:33:6A:9F:EE:E0:3E:5A:40:A7:89:77
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Certificate issuer: /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial: 019CACEB7E278CF1CC0031372C9396D0039E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
Manifest number: 09E0
Signing time: Mon 02 Mar 2026 05:00:40 +0000
Manifest this update: Mon 02 Mar 2026 05:00:40 +0000
Manifest next update: Tue 03 Mar 2026 05:00:40 +0000
Files and hashes: 1: 6KJDdIsLff1CN0PMajuP88fcMpE.roa (hash: B2Hljs3iskIAlDm2x1NuHiYauh52yu9vfPaGo3V/YZs=)
2: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: uIxBlXrNy0MvSdDKjAECAhln9NuJQoAQQ5OwG/Ciywo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:7e:27:8c:f1:cc:00:31:37:2c:93:96:d0:03:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Validity
Not Before: Mar 2 05:00:40 2026 GMT
Not After : Mar 3 05:00:40 2026 GMT
Subject: CN=f826642f52d06f047b336a9feee03e5a40a78977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:88:79:09:17:27:53:6e:bb:97:17:2e:35:
9f:cb:66:08:91:33:0a:cf:8d:71:53:1c:67:5f:33:
fb:03:28:93:e0:d4:e5:48:51:93:d3:b7:f7:9d:7a:
45:62:01:27:10:ed:1e:92:06:a2:b8:27:35:58:2d:
75:48:18:2c:6b:5d:d0:9d:03:35:45:1e:f8:89:f9:
ed:1f:94:4a:1c:96:38:b2:99:22:95:d5:d5:3d:27:
55:fc:3f:4d:44:47:ea:84:25:e6:0f:01:f9:22:96:
24:29:ed:ac:81:bc:a5:0a:22:ba:65:86:6e:b3:92:
38:f2:6b:73:49:bf:20:bf:9a:ed:8d:0d:20:42:69:
d5:3a:76:cc:3a:bf:86:6d:ab:0b:2c:ee:62:59:aa:
30:f5:5c:ec:50:d4:cb:a9:52:8c:88:23:66:e9:fb:
8e:ce:52:f3:1b:a9:1c:24:7b:64:cd:ad:52:c7:e8:
e8:bb:f0:a3:3e:6a:0c:53:90:56:b3:0d:1e:7c:e1:
92:cb:ec:d1:ce:21:08:22:99:61:01:b4:6e:27:c7:
e0:da:b2:41:a5:0a:1b:f4:25:ce:a5:56:4f:e0:04:
37:1e:f0:c6:99:34:f0:a3:39:bb:0e:92:70:73:b0:
1c:34:bc:31:a1:b7:f6:d0:65:a8:ef:b9:f0:0e:45:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:26:64:2F:52:D0:6F:04:7B:33:6A:9F:EE:E0:3E:5A:40:A7:89:77
X509v3 Authority Key Identifier:
keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:34:ec:17:8f:db:17:4c:10:40:48:39:6c:10:13:7e:7e:ee:
5c:ed:49:66:22:b2:96:c3:5b:33:d7:5f:10:d9:72:ec:30:37:
1d:8a:db:07:e4:75:6b:d9:38:a0:0a:fb:1e:8c:43:70:41:e4:
e2:f7:12:55:cb:fc:4d:8f:dd:b3:16:f0:17:a3:b5:f9:34:b8:
0b:d2:b7:41:09:7e:ea:e2:cb:d0:38:67:5d:12:8e:ed:b3:70:
2a:11:78:2a:02:c7:1a:8c:a9:47:2f:83:0a:da:75:59:c8:83:
fa:ae:a8:e4:d2:a5:71:8a:d7:3d:f0:36:be:3d:38:a7:31:0b:
19:c5:d6:39:df:a4:22:d1:1b:0c:fd:10:4e:c9:b7:4a:df:78:
6a:c0:4a:af:e5:b3:0c:b2:2b:c1:41:df:a9:08:06:54:b5:d9:
50:2c:1e:99:98:3a:30:a5:32:15:95:59:9d:ae:b1:f8:ab:c3:
33:40:3d:03:fc:b6:42:ae:70:71:b4:3c:84:85:9a:ec:13:d9:
5f:fa:76:f4:51:61:83:ac:e8:82:0e:0f:58:97:f8:28:0d:a2:
87:16:cd:4c:bc:c8:35:5e:ee:83:99:a0:2a:34:3a:43:36:5c:
10:75:81:a4:1a:25:43:aa:cf:8b:23:66:aa:41:b8:54:07:df:
f6:cc:28:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:18:27 2026 by rpki-client