Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: l47xHfPeDCzvclJaOzYViSMFj22Srb9Y+6u3OrpKm9M=
Subject key identifier: E2:AB:80:52:B9:8B:4B:85:51:AC:CD:53:AE:32:02:56:36:FF:A9:D7
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 019CAA216FC0A258ABC0F8D25DF8CBB64FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 16:00:43 +0000
Manifest this update: Sun 01 Mar 2026 16:00:43 +0000
Manifest next update: Mon 02 Mar 2026 16:00:43 +0000
Files and hashes: 1: 5gSf1-VDKOYVBkqkgnQrEMypzTg.roa (hash: z6ZcdBsDa7Hg3rkYAPzvBooMd+rknZS/02yCZUcFlGI=)
2: CmZeg0QZClyASLrlfEFcbEqzniE.roa (hash: hxAFIZw4RCC07UgvikV6JR0Y6MOvZuFKg3XrUhhJ604=)
3: Ih_bDVPWPg40meMVUQH52Q_SiqE.roa (hash: WQr9CRYz6MHyRZSZGa17nV7pgtE8mhzsKExO1LfYlFY=)
4: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: yzUmxurLGi5PyLEAWXUwl11cP7vg74HE2Xjcg9hVW5I=)
5: yhvjZUqxn_FUY-Mlri4ogZjyLBM.roa (hash: L0ywjyagm2bruEE3Ewodq3fXEbUNJSk+4fnvkwsHn6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:6f:c0:a2:58:ab:c0:f8:d2:5d:f8:cb:b6:4f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Mar 1 16:00:43 2026 GMT
Not After : Mar 2 16:00:43 2026 GMT
Subject: CN=e2ab8052b98b4b8551accd53ae32025636ffa9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:35:68:58:f2:63:93:28:aa:52:b5:9d:62:f8:
db:09:e3:af:4b:70:f9:8c:1a:22:d1:22:dd:41:c1:
28:5f:c9:a5:0d:df:93:28:33:15:02:a8:78:c2:9d:
f3:81:9b:e9:8d:36:cb:7d:53:de:b0:39:e0:e1:fd:
87:0e:9e:38:f2:99:e1:c3:81:36:19:b5:36:e9:af:
fc:f3:20:cf:e3:f1:42:7b:a4:78:32:cb:27:03:a5:
2a:c0:c0:a0:56:53:ec:e5:c0:af:4e:a2:c7:0f:8b:
65:42:07:e5:b9:df:75:75:c9:ef:10:22:2b:e5:0e:
b5:c2:a8:ef:c3:41:e7:a2:e3:1a:98:98:4e:ef:a2:
d7:37:28:58:53:11:08:22:b9:98:a2:29:c7:b9:70:
81:3a:30:12:b6:99:b3:54:8a:26:27:46:9d:68:09:
50:3b:6e:1b:1e:d7:d1:08:ab:1b:66:eb:2b:75:43:
88:35:99:cb:e8:44:2d:c8:78:8a:f5:c4:f2:a0:97:
d6:6d:ca:f3:a7:69:ee:f0:ac:53:94:77:25:d9:2d:
a8:37:ab:48:92:06:29:f9:d6:5d:cc:3e:3a:75:3e:
da:3d:21:96:33:76:e3:f6:79:e5:95:dd:5b:09:61:
7c:c5:8b:67:6f:d7:f0:70:52:7a:8d:c6:2c:e1:b7:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AB:80:52:B9:8B:4B:85:51:AC:CD:53:AE:32:02:56:36:FF:A9:D7
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:89:2f:ff:48:86:95:b8:62:9d:eb:e2:99:cb:83:13:48:eb:
1f:2e:0a:e5:c3:52:f1:64:8c:1d:45:4a:b4:bb:00:ff:37:d4:
68:ed:6c:2b:59:43:1c:79:e9:d6:1c:d6:fa:84:c0:82:6e:f5:
86:46:b6:73:af:dc:6e:a0:a1:3a:a6:34:cc:3d:c2:8a:18:60:
eb:27:cc:d1:dd:9d:ff:05:39:19:35:99:f8:57:f4:27:02:b3:
57:88:44:7e:3b:6c:2b:c7:a4:08:4d:b2:d0:a5:cf:37:43:c8:
5c:c5:93:93:26:e6:ab:66:68:1c:82:9c:0f:c5:f0:5d:c5:ce:
27:6b:68:25:71:73:75:aa:80:eb:e9:18:45:8c:de:92:04:30:
fa:c9:a7:39:d1:3c:c7:be:bc:a9:73:69:ae:f3:78:5c:76:32:
f2:4a:a4:d1:13:49:fe:1f:8b:c8:3b:0f:2d:47:a4:ed:4c:0a:
fd:d1:f7:56:ef:72:ff:f4:82:5e:e9:fc:0e:02:2a:b0:88:da:
33:13:f1:dd:cd:4a:ed:db:ae:12:e2:a2:08:94:4e:0d:fd:a5:
dd:27:eb:7a:cb:65:64:f8:3c:34:bc:05:f2:01:e4:ae:9f:ac:
b7:bd:b7:18:db:97:50:c8:0f:7d:d2:eb:a0:24:8e:f4:ec:69:
c7:fc:40:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:25 2026 by rpki-client