Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
File: gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft (raw, json)
Hash identifier: QD01ZaYNfihGyJ782HO20pIt42p//aUIBLaRgjlfsIQ=
Subject key identifier: 64:86:BF:84:41:6F:D6:15:B0:39:E2:FB:49:9B:3A:3E:0E:28:32:3F
Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
Certificate issuer: /CN=819b97b20ccb4f696518e47c437259a8913e72ae
Certificate serial: 019CADC7FECBBE522C22CBF606EC6C6D2C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
Manifest number: 1297
Signing time: Mon 02 Mar 2026 09:01:31 +0000
Manifest this update: Mon 02 Mar 2026 09:01:31 +0000
Manifest next update: Tue 03 Mar 2026 09:01:31 +0000
Files and hashes: 1: L2sVy84YNgdXdVRcFvky1jOyapo.roa (hash: 3nfkWDukO5seERRcNCHmDmoRPYQO0LEHGFHMMpgINH8=)
2: ehALNgmvDMXOCz1qDVIzrXU9qPs.roa (hash: dn6QOi6y7D3WWFMRmemHXTmqvY1tGOW3y/+Az1xAbxM=)
3: gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl (hash: dzwuU/0iRDGrzD5eT9Qask86I+hbadetHBe9ZAXyq68=)
4: hwtVlXCFjo--idd4yO5s0tt7X3I.roa (hash: NUHjZYJkOekWUWwDXQIom+k1M6skxKicFwBdcoVK9n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:fe:cb:be:52:2c:22:cb:f6:06:ec:6c:6d:2c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae
Validity
Not Before: Mar 2 09:01:31 2026 GMT
Not After : Mar 3 09:01:31 2026 GMT
Subject: CN=6486bf84416fd615b039e2fb499b3a3e0e28323f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:d6:cc:06:2e:64:a9:51:55:db:00:2e:2f:
53:51:21:b4:46:3f:42:41:f4:9b:37:86:b2:23:e1:
12:48:5e:c1:19:ff:40:df:39:ba:8e:57:9e:78:c0:
60:74:4a:39:5d:2e:f6:14:be:a1:b6:3c:4e:d1:b4:
95:54:c4:a1:07:9a:8b:41:00:bb:35:c7:40:ad:d3:
cf:0d:11:56:3e:fc:50:6c:a8:d2:22:03:0d:b0:2f:
32:22:75:d3:6e:2e:d3:d9:39:c8:55:f4:0e:da:2b:
9f:fd:e0:bd:36:25:20:4e:a3:f2:f4:a5:58:cc:02:
d3:5b:a2:42:3d:0b:74:30:fd:82:6f:7e:8e:2a:f4:
98:6f:22:41:25:ba:66:a4:38:f0:50:63:01:c2:19:
13:51:8e:75:f3:35:b6:37:4f:47:f6:67:f1:90:32:
40:58:b5:d9:ec:22:91:35:62:1e:e4:e1:7b:b7:1a:
70:74:c9:61:10:9b:fd:ff:e3:27:1d:51:29:69:19:
9a:bf:d6:6b:8a:ea:98:a9:4b:50:ca:48:62:e1:7c:
3e:53:a8:da:79:7e:4c:df:7f:e7:ca:cb:9d:1e:4c:
93:55:90:a6:0b:60:3d:51:0e:97:40:a9:de:9b:16:
11:ae:2a:2c:c4:e8:35:fe:f2:55:10:57:92:33:e0:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:86:BF:84:41:6F:D6:15:B0:39:E2:FB:49:9B:3A:3E:0E:28:32:3F
X509v3 Authority Key Identifier:
keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:45:21:9a:8a:15:83:ca:d5:8b:0c:b9:e6:02:c4:25:c4:58:
97:fd:f3:a5:b6:ce:16:58:d1:de:5e:2f:eb:c5:58:82:70:64:
a2:77:27:9e:33:87:20:ce:b7:86:44:a1:65:18:07:00:b2:50:
5f:27:83:ab:31:55:88:4d:ea:7b:20:ea:4a:56:9d:77:ca:f6:
4f:26:8c:64:b0:99:af:29:e7:83:86:33:08:60:5e:69:54:bb:
3d:41:7b:de:e0:0c:80:a6:26:10:84:cd:88:67:31:81:16:a5:
f3:e3:78:d5:b5:fe:a6:fc:7b:ec:02:ea:e1:75:da:10:ed:da:
ab:3b:28:f7:7e:e6:01:f3:92:a1:0c:a9:73:ac:e0:cc:dd:2a:
74:b4:5a:f6:08:72:2a:d3:a6:8e:9a:36:77:db:c8:c8:0d:1a:
95:0f:7b:69:b2:80:5b:71:6e:3f:d3:81:9a:a8:fd:d1:a3:51:
7c:85:a7:a9:e8:1d:ff:76:56:be:71:9f:89:8b:ab:06:b0:e3:
6e:bb:96:af:41:64:b6:a8:ea:7c:8d:13:e3:2f:fe:10:0d:b4:
9c:11:66:55:85:00:c4:63:2c:fc:1f:80:f9:f6:d2:c5:e1:bd:
d1:85:94:21:85:84:15:1c:8b:e1:58:d1:e3:93:f8:61:93:1b:
a1:a4:42:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:01 2026 by rpki-client