Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
File: gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft (raw, json)
Hash identifier: y/sB8oI02sT9kiNzG2ypAWFn5+P1WZrJto0RtM32wb4=
Subject key identifier: 23:98:B0:DD:14:09:70:4B:D8:74:9A:BF:38:49:3A:C5:18:2B:75:48
Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
Certificate issuer: /CN=819b97b20ccb4f696518e47c437259a8913e72ae
Certificate serial: 019D996254B12C1E9D3DA5B40E0C611088E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
Manifest number: 1311
Signing time: Fri 17 Apr 2026 03:00:51 +0000
Manifest this update: Fri 17 Apr 2026 03:00:51 +0000
Manifest next update: Sat 18 Apr 2026 03:00:51 +0000
Files and hashes: 1: L2sVy84YNgdXdVRcFvky1jOyapo.roa (hash: 3nfkWDukO5seERRcNCHmDmoRPYQO0LEHGFHMMpgINH8=)
2: ehALNgmvDMXOCz1qDVIzrXU9qPs.roa (hash: dn6QOi6y7D3WWFMRmemHXTmqvY1tGOW3y/+Az1xAbxM=)
3: gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl (hash: T94k+EPGr4/hQ3PS/DX0DseS8x3zyFRbqwqHz60eHT8=)
4: hwtVlXCFjo--idd4yO5s0tt7X3I.roa (hash: NUHjZYJkOekWUWwDXQIom+k1M6skxKicFwBdcoVK9n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:54:b1:2c:1e:9d:3d:a5:b4:0e:0c:61:10:88:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae
Validity
Not Before: Apr 17 03:00:51 2026 GMT
Not After : Apr 18 03:00:51 2026 GMT
Subject: CN=2398b0dd1409704bd8749abf38493ac5182b7548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:39:bc:29:6e:9a:98:f5:0c:30:e6:f5:c3:
ee:69:62:4d:0b:01:b6:d5:f7:f6:90:36:04:41:c1:
cf:eb:bb:47:15:ba:d2:12:c5:53:c2:f9:f0:9e:b2:
8c:a1:26:ea:15:03:98:69:f9:99:e6:70:34:a1:39:
eb:bb:ad:ed:ba:8b:d7:ba:e8:13:d9:c8:22:ff:8e:
6c:0b:c0:eb:1d:f1:f5:2f:c4:85:06:df:76:dc:a6:
d4:5e:70:35:e2:91:75:f6:0d:be:75:8b:ef:de:00:
a4:2d:66:94:78:68:4e:03:a0:8c:4f:a2:44:94:87:
76:96:33:c7:e0:31:66:0b:10:88:2f:e7:b3:ed:0c:
73:05:66:bf:bb:9a:cb:8b:6b:eb:f8:99:1e:35:c4:
06:ce:5f:d2:c3:d4:11:79:62:48:c1:6c:b8:12:11:
1f:6e:9b:76:44:e4:6c:a4:ad:c5:44:38:ee:d3:25:
f7:40:06:38:aa:a8:90:9c:db:61:19:36:b4:f8:c9:
2a:0f:06:d0:d0:21:db:79:98:4a:1c:07:78:bc:67:
9b:4b:8e:1a:e6:a6:00:e8:56:ce:87:1b:12:bc:aa:
86:74:b3:7b:47:87:ba:d5:0b:71:26:4e:11:36:aa:
10:e4:db:f5:01:bd:c6:1b:00:1d:28:8e:bd:e9:f3:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:98:B0:DD:14:09:70:4B:D8:74:9A:BF:38:49:3A:C5:18:2B:75:48
X509v3 Authority Key Identifier:
keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0d:da:d5:a1:e8:d5:d7:f7:61:bb:78:b5:5a:a3:d4:a1:7d:
ed:76:43:97:f4:a2:90:c9:27:91:c8:61:ce:1d:b0:d7:54:d3:
15:d5:73:bb:f5:50:b8:d0:89:e2:28:80:10:16:60:87:d6:ce:
1f:0e:d1:b8:e3:97:90:6f:38:40:53:57:68:f8:16:54:f8:30:
b4:cb:9b:61:d7:f9:6d:76:d6:fb:e8:58:0e:11:d0:80:97:38:
47:71:61:d8:e0:f4:54:47:d0:db:a3:f8:d2:1e:2c:b9:f3:8b:
22:29:2f:4d:69:e9:3a:cc:87:df:6a:cb:53:15:66:9c:90:67:
be:ad:86:4b:70:20:9f:f1:c5:10:e9:4d:ba:e5:c7:84:d4:3f:
74:82:fb:fc:cf:ee:b9:67:04:0c:f9:98:af:cf:b1:98:2d:f2:
2d:0f:80:f5:23:36:e3:46:6a:9e:da:6c:6f:3e:1f:a8:2d:25:
bd:0f:d2:ca:f0:31:15:a3:7d:32:44:73:92:f6:79:f4:79:6f:
85:3c:e1:43:30:b3:d1:9f:c7:e0:56:62:bb:11:82:bf:40:ae:
b8:97:2e:53:4f:22:c3:c3:43:ee:fd:51:ac:11:99:eb:c4:1f:
a2:43:39:99:9f:85:ae:2d:ec:0e:bc:ac:17:96:14:6d:d9:cb:
a6:dd:91:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:36 2026 by rpki-client