Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File: _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier: h4/iB28TDRwUqr5Ddo+4QA1z+DHb97jUBFp8qQ6gyeM=
Subject key identifier: 6E:4B:80:64:9E:2D:CB:3F:F6:FC:37:4C:4E:5C:A6:C4:F3:05:D8:72
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 019CAE356251B580B6881A42D3F9AD148033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number: 1595
Signing time: Mon 02 Mar 2026 11:00:59 +0000
Manifest this update: Mon 02 Mar 2026 11:00:59 +0000
Manifest next update: Tue 03 Mar 2026 11:00:59 +0000
Files and hashes: 1: _b-rE_2TVoYhUbNxE3eqPIAbO4s.roa (hash: /pEVtx61pqjHCNe27pdlrCZMoRpMRCiAqlKVxrQNLe0=)
2: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: qvpsnY8g+sbYsZwzA50KkVcven9nHW1orMdT7rVcMqA=)
3: bbj-gHI_NSxgfeUm9R2oZee2H7A.roa (hash: hYp+ief1ADpooPFUk5v8X2N0IMdf0TC4s8sF6EqLPy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:62:51:b5:80:b6:88:1a:42:d3:f9:ad:14:80:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Mar 2 11:00:59 2026 GMT
Not After : Mar 3 11:00:59 2026 GMT
Subject: CN=6e4b80649e2dcb3ff6fc374c4e5ca6c4f305d872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0c:21:9b:22:db:a9:07:24:13:d7:28:ab:94:
64:89:c4:90:7f:9e:50:be:de:55:95:11:a0:05:d8:
32:1b:dc:7a:45:81:f0:ae:15:99:99:ae:5b:86:48:
a8:ad:3a:61:7e:aa:fa:d0:ea:ce:e1:1c:b7:69:c6:
14:2c:61:b4:d5:dc:3a:73:b6:9c:9f:e2:fb:04:cf:
96:7a:0e:9b:65:ed:02:5b:80:c5:42:9a:80:e6:0a:
be:f0:50:26:44:ae:4c:7a:e6:3b:f6:0b:ea:4a:47:
b0:69:09:31:7a:da:53:3c:39:b5:1a:57:4d:3a:13:
1e:27:12:c4:02:40:b3:31:2b:b0:49:f4:49:f5:2a:
7c:2d:8e:b7:38:97:8f:98:f5:ae:22:eb:9d:40:4f:
92:76:da:15:07:0e:9a:53:3f:4c:58:9c:1c:ad:1b:
f9:a2:b7:00:99:94:68:a4:bb:6a:18:22:bd:a6:46:
b7:bc:05:0c:68:65:1d:ab:0f:27:4a:14:28:11:fe:
17:10:9b:19:25:e2:17:bc:15:78:27:df:6f:6f:a9:
7f:21:8e:a9:3d:02:f1:bd:a4:77:2e:54:a7:ac:80:
83:d3:64:c4:94:b8:0a:e6:1c:cc:c2:29:7d:7a:38:
9b:b8:3e:ae:b5:ff:3c:5e:f6:85:c3:ed:3b:89:5f:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4B:80:64:9E:2D:CB:3F:F6:FC:37:4C:4E:5C:A6:C4:F3:05:D8:72
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:1a:56:5d:b9:d6:0e:95:73:44:4a:fc:28:81:bb:e1:47:
c3:e2:c1:23:5c:5d:18:e3:f6:33:dc:fd:f7:19:cd:35:a7:07:
ec:f7:3d:e2:ea:ce:fd:0d:32:59:1a:b5:96:58:c5:e1:57:eb:
cb:0e:3f:37:e1:88:90:77:69:9d:6a:88:04:00:56:a0:b1:07:
13:8f:0c:25:5e:26:66:b8:e4:2b:b3:87:c4:d0:20:72:96:ca:
7f:91:4b:c2:6f:d7:0a:83:4e:d4:09:ce:f4:3e:94:4b:b1:65:
7e:c7:09:3c:42:f8:fb:1c:d2:59:bf:ab:08:a5:54:37:d9:0a:
5a:ae:bf:7e:fa:a0:f6:42:9b:48:41:1b:f6:3a:3f:a0:3b:a2:
b5:d4:80:ff:ab:3f:89:38:38:e2:bc:fb:78:bb:25:26:01:75:
20:71:dc:f5:b3:2a:1d:0b:46:9a:48:89:cc:38:e9:ac:40:03:
2a:94:e7:08:dc:12:07:60:0d:e3:6c:c4:1f:63:3b:0b:5d:20:
0b:f0:a5:e8:74:2c:f6:f7:01:82:e9:dc:ee:a6:41:60:0d:5a:
fb:98:24:2a:7d:7d:d6:a2:90:46:cb:be:f1:f6:a8:62:ce:47:
0b:61:53:d8:f5:23:df:bf:91:24:e7:6f:9c:ff:d4:0f:3b:e0:
39:27:af:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:43 2026 by rpki-client