Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: H4thdNHv/S7R8jAq0PNDlzrNKGYU5m0eCY2Owf2LbLg=
Subject key identifier: CB:20:22:0B:D2:A7:EA:D2:DA:7D:D6:DD:6D:67:98:D4:C6:5C:B4:E8
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 019CAC4706196861B71CFDBA7BBB914E5042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 0F77
Signing time: Mon 02 Mar 2026 02:01:01 +0000
Manifest this update: Mon 02 Mar 2026 02:01:01 +0000
Manifest next update: Tue 03 Mar 2026 02:01:01 +0000
Files and hashes: 1: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (hash: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: lx7MiqX2rBjEXb0gH/q95ci3mgKV8A2s3qbksb6CzDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:06:19:68:61:b7:1c:fd:ba:7b:bb:91:4e:50:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Mar 2 02:01:01 2026 GMT
Not After : Mar 3 02:01:01 2026 GMT
Subject: CN=cb20220bd2a7ead2da7dd6dd6d6798d4c65cb4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:f9:79:5d:09:9d:7f:77:e5:6a:b8:41:bd:
72:23:61:d8:3c:4d:01:81:6c:22:c8:d8:5d:0f:67:
76:46:ec:a2:5e:87:81:e3:4f:98:80:0e:4b:28:12:
04:24:da:36:05:81:6e:3a:30:4c:67:57:7f:69:ec:
1b:c1:95:55:e4:ff:a7:f4:dc:5f:7f:c8:23:da:f4:
13:5a:2f:d6:50:d9:95:54:76:82:4e:39:f6:b6:be:
b9:9b:80:92:10:58:71:9c:bc:68:63:df:b6:9b:76:
49:e1:76:fa:b1:51:50:d7:e8:4b:19:26:75:62:4c:
fe:0e:64:b3:37:43:df:55:69:6d:4d:8d:a4:c2:71:
09:3e:d2:46:39:ab:aa:bb:29:28:54:42:3b:4a:81:
5c:e3:cf:68:5b:40:8e:1e:e8:dd:84:92:cf:4f:e8:
81:cf:54:3b:27:e1:a9:7f:a6:c5:73:4e:45:1b:a6:
1a:c2:08:1d:00:9e:50:25:b1:9b:5e:1e:0a:a5:9d:
ed:ee:0b:85:e5:d7:d9:63:16:df:5f:18:ef:47:64:
12:fc:bf:71:8a:02:09:55:78:06:a4:48:c2:d5:e8:
d0:c1:44:af:ef:aa:f0:d7:06:03:9c:01:c1:e8:ae:
42:a1:24:da:4a:3d:4f:6e:be:5d:8c:3f:e0:1f:c2:
f3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:22:0B:D2:A7:EA:D2:DA:7D:D6:DD:6D:67:98:D4:C6:5C:B4:E8
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9e:d5:8b:d4:ec:ca:da:f9:92:ab:1a:d6:91:d4:51:b1:22:
30:f9:d3:f1:a9:af:92:a0:66:d0:72:c3:87:7b:a6:44:a0:eb:
d2:70:f1:6b:33:a6:d8:ca:17:5a:13:76:e8:a3:61:50:9c:e7:
52:22:1b:a0:04:cb:d8:06:7c:7e:1c:69:40:ad:f4:90:6f:23:
aa:e4:ef:a5:dc:57:58:8e:af:fe:06:f5:eb:05:2f:5d:6f:fd:
3e:2b:e1:88:8d:42:c0:b5:f1:62:3b:1b:6c:11:91:49:3b:3f:
af:8a:f3:3f:cd:cb:4b:3d:ae:74:90:4f:d8:98:15:df:e7:05:
e4:d1:97:4e:be:72:f2:3a:e9:33:63:e7:b5:cc:58:be:f6:0c:
0b:d4:b5:ca:62:a3:ed:81:5a:ae:85:ec:19:5c:81:70:39:33:
6d:6e:88:f6:64:b2:5c:e9:d7:94:a2:f7:43:2d:54:c4:03:91:
d0:8a:b8:17:f5:88:33:4d:ab:99:97:c7:4e:5f:f2:47:98:f5:
34:0d:6a:b4:ca:f8:bf:f3:6d:53:38:b4:90:93:5e:a6:3f:c8:
4e:7d:4f:7b:e6:8f:e2:d9:84:f9:67:18:de:f9:16:ce:fc:64:
a6:e3:99:d3:d3:4c:30:b2:77:0c:2d:83:5e:04:3d:1c:6d:ea:
8c:65:29:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:00 2026 by rpki-client