
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: /WvjnhHHiriqNsFMl/rWnHSoeOpoSw2xlevz4W48bVU=
Subject key identifier: EB:B3:4A:CF:39:D7:8B:D7:1D:5E:4B:DA:AA:08:4B:96:E8:A6:21:9D
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 019D99D0E96EFDE7551CAD0AC22E7309697A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 0FF2
Signing time: Fri 17 Apr 2026 05:01:38 +0000
Manifest this update: Fri 17 Apr 2026 05:01:38 +0000
Manifest next update: Sat 18 Apr 2026 05:01:38 +0000
Files and hashes: 1: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (hash: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: 7sGPXliBBAeGfIrCAwQFPwnXy1e9Dcaq5QCWXIREI0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e9:6e:fd:e7:55:1c:ad:0a:c2:2e:73:09:69:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Apr 17 05:01:38 2026 GMT
Not After : Apr 18 05:01:38 2026 GMT
Subject: CN=ebb34acf39d78bd71d5e4bdaaa084b96e8a6219d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:2e:62:57:e5:95:ff:c2:fb:de:95:9a:7d:
a1:b2:e5:f3:ec:cb:d0:35:7b:4d:87:f5:55:2e:60:
e8:aa:be:f3:b1:87:94:fc:64:64:c1:49:7b:6c:10:
c6:6a:4f:02:2f:4f:d1:e5:64:00:45:86:da:12:88:
d9:27:00:f4:f8:dd:49:ff:46:ed:a2:16:f9:90:1c:
63:2d:a0:c2:1b:38:22:48:64:1b:83:01:ef:30:57:
95:24:0f:9f:83:d3:93:42:04:3f:db:00:1b:55:ed:
3c:76:d9:e7:86:05:df:71:fc:39:75:75:02:1b:1d:
f5:4c:2a:e9:eb:4c:f1:8a:12:8a:03:90:f4:a2:3e:
f6:bd:a0:4b:e6:21:bb:a6:f0:08:f1:52:0e:58:0d:
3d:a7:30:7c:90:a3:7e:41:b9:31:22:a4:56:b1:15:
54:c3:76:07:7e:7a:f1:db:2b:f0:73:4a:fa:c5:f1:
e2:cf:cf:87:dd:6c:75:12:5e:d8:55:d6:2c:27:3f:
b6:4c:f9:b2:45:b0:78:ed:6a:fc:48:c5:25:1d:35:
66:98:55:d1:0f:84:64:df:1b:7c:29:ba:b5:b8:a0:
8b:25:a8:0f:2f:90:62:bb:52:2c:13:3c:ee:8e:b9:
4d:c4:99:6d:85:a0:6c:72:b4:64:74:f3:ce:07:8e:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B3:4A:CF:39:D7:8B:D7:1D:5E:4B:DA:AA:08:4B:96:E8:A6:21:9D
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3f:5b:2e:8d:30:14:11:e1:32:24:07:06:ec:c5:80:3b:27:
3e:b6:5d:b2:9e:06:43:47:a6:b4:8f:a0:20:7a:c3:f6:a1:5f:
81:6c:7b:d5:8f:b5:7d:c6:81:5e:71:0b:ab:6c:e3:85:b8:61:
86:bf:d1:44:8b:8f:90:ed:5e:2f:e1:48:af:c2:29:78:0b:ea:
86:22:c4:0b:72:29:0a:ca:04:8f:39:bf:16:fe:bc:18:51:51:
de:23:cf:27:3d:a4:1a:5d:55:7c:a3:03:e0:e4:a6:5c:14:74:
b4:92:09:84:96:f7:7b:93:59:37:f9:c8:40:a9:28:15:d2:7d:
f5:36:3c:e2:f3:60:52:b7:d5:ea:c6:b0:62:42:c4:e6:0f:51:
6f:38:86:ff:ee:71:dd:39:7c:97:aa:a2:dd:8a:ee:20:22:70:
17:29:71:50:9a:0f:f0:9e:a5:05:af:36:ed:ff:9c:06:c0:d9:
0e:37:79:95:31:08:c7:55:dd:94:6c:64:31:28:9c:26:3c:60:
f0:09:0f:ef:98:f2:63:d1:0c:ee:64:34:a9:37:5a:ca:fa:f2:
83:e4:14:65:07:5d:3c:48:3f:89:0b:82:a0:5e:34:c0:4b:40:
ce:3a:4d:16:af:b8:b6:70:21:6a:a1:59:23:51:37:55:77:c1:
38:50:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:54 2026 by rpki-client