Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: 2+zUD9HL7/8YPbJlpqsatXI3Gb8zZYUy0lHTCZtApds=
Subject key identifier: 12:93:0F:E0:E7:95:68:C3:8B:55:25:23:39:41:72:98:B7:6E:A3:93
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 019CABA1D5688F3FB3E2CFD9CB38AE16ED68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0C5D
Signing time: Sun 01 Mar 2026 23:00:35 +0000
Manifest this update: Sun 01 Mar 2026 23:00:35 +0000
Manifest next update: Mon 02 Mar 2026 23:00:35 +0000
Files and hashes: 1: TtXo5-QRvXwKIgknKnZ4_4t2vL8.roa (hash: mXHeMxujxsacK8/QlflktbO+DxAXX0UCko2MtIwDM0I=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: svGRnPfi36J5zFzRT8oA6gKAydZR4bFggPeYA+NeouY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d5:68:8f:3f:b3:e2:cf:d9:cb:38:ae:16:ed:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Mar 1 23:00:35 2026 GMT
Not After : Mar 2 23:00:35 2026 GMT
Subject: CN=12930fe0e79568c38b55252339417298b76ea393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:15:e6:06:da:3f:d3:55:fe:71:e2:a6:1b:
1c:7a:7b:59:04:d1:4b:15:05:4c:75:3b:4c:5a:d2:
3a:c8:bc:54:ef:b5:f2:e7:14:10:0b:12:6e:a3:11:
14:af:66:ce:91:da:97:5e:f2:9a:9a:2b:29:c2:f2:
9c:eb:32:ea:77:d5:db:d3:18:4e:ee:cf:f1:fa:4e:
0d:b7:1f:d2:75:f7:48:1f:76:ca:a1:28:34:cb:30:
8d:71:f8:15:00:8a:ed:16:cc:48:99:79:a4:ca:95:
1a:98:96:b6:8d:fc:54:fd:b4:57:61:dc:ff:02:e3:
2b:10:26:f2:c5:6e:2f:fb:5e:e4:64:1e:84:6a:aa:
ac:2d:7b:36:a3:e0:8e:c1:9d:12:34:a9:36:32:c2:
06:ad:98:f7:b1:2e:83:a0:57:a8:61:96:c1:be:97:
bf:c0:f4:c3:3e:77:0f:42:bc:2d:06:cf:34:a7:e3:
fa:eb:e0:8b:99:d4:0b:4f:8f:dd:1d:b7:a9:d3:3f:
14:87:bf:73:84:9e:3e:85:55:3e:6f:45:d5:ea:78:
63:59:75:11:c1:e1:37:84:fc:b2:a5:e2:1d:b3:90:
0d:65:d5:26:ea:aa:f5:97:da:6d:24:3b:13:f5:9b:
b8:a2:83:d9:f2:25:d5:53:af:d0:23:fe:8c:6e:1d:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:93:0F:E0:E7:95:68:C3:8B:55:25:23:39:41:72:98:B7:6E:A3:93
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:92:23:fb:10:19:bb:a0:7d:64:df:a4:34:c6:b1:4a:63:58:
8a:e9:cb:bf:dd:74:02:c2:aa:5f:2c:b4:05:b6:5f:aa:1b:55:
bb:a7:b3:0b:d4:01:5a:61:c8:e8:f3:3c:48:96:66:1a:c1:95:
96:b1:a8:f8:0b:19:e0:ce:d0:57:de:f8:ca:ee:dd:68:85:7b:
67:87:c0:d3:0d:34:d0:5c:89:5e:0f:f0:be:8a:9a:7b:fa:bf:
b3:39:3b:6c:3a:d3:85:be:9c:bf:f1:f7:43:b4:57:89:e4:d3:
a9:5f:d8:f9:40:19:54:c4:c1:27:7d:a1:eb:51:9a:1b:0e:06:
d3:ae:c9:01:bf:7d:39:02:30:79:c2:14:d9:38:0f:89:ba:ea:
a2:20:fa:f9:df:93:04:32:0f:08:5d:56:ee:37:20:34:6b:b7:
b4:37:0d:f0:29:cb:46:f2:ef:01:65:cc:5e:5e:55:5a:a4:e1:
95:9f:f5:58:02:ef:04:bc:8a:8a:88:8c:5d:c5:9d:4e:99:cf:
3d:83:ba:fb:d2:bf:eb:e5:25:59:6e:60:d6:f6:03:5a:05:01:
49:f5:33:d0:00:d8:51:98:71:8e:ae:d6:eb:83:41:13:23:a9:
63:66:aa:a0:54:6b:a3:c9:9a:46:17:83:b2:73:03:6a:25:f6:
86:8f:cf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:34 2026 by rpki-client