Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: 5NQDO0/Ksz/hapZNncVcJrUuxyTObp6EecCXw0/e/OE=
Subject key identifier: 5D:BA:87:C0:BD:CC:6A:34:15:B9:8B:AC:56:8D:81:D8:EC:28:3E:6B
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 019CA90E94C2DDC9EA497FD14EA877E447E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 1860
Signing time: Sun 01 Mar 2026 11:00:30 +0000
Manifest this update: Sun 01 Mar 2026 11:00:30 +0000
Manifest next update: Mon 02 Mar 2026 11:00:30 +0000
Files and hashes: 1: L--nog6xEzatgFx0vve4F3aMfqg.roa (hash: bT7m47/vJSRP8Nb+CoGFbdUeEIOeotqAaMuhhj16mOg=)
2: UWUWF46MigK1a0cd003CguBbQdc.asa (hash: 8MF1DQrDAZ7AsSrFu9a41jWtJfGtyeySnSqbPCLIeLA=)
3: dCesxMMj3iimdYMAKtjCOo7VCaw.roa (hash: rBIdWhYFqNkTi4VSYSHXSoz7Tccn1BMFaCDizvKANgE=)
4: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: dw80rQDgnAJgPuM+ysFiV6OVVuFQM5EJTv2VcW9mkjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:94:c2:dd:c9:ea:49:7f:d1:4e:a8:77:e4:47:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Mar 1 11:00:30 2026 GMT
Not After : Mar 2 11:00:30 2026 GMT
Subject: CN=5dba87c0bdcc6a3415b98bac568d81d8ec283e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:64:8c:2d:24:a4:18:f4:42:d4:cc:60:83:
20:18:0c:bb:12:96:91:9d:2f:54:3b:a3:0e:bb:12:
a6:21:98:83:3f:a1:23:f7:80:f1:a8:bf:0a:00:23:
1b:63:c8:bc:a1:2e:95:be:9e:fd:00:16:c9:7c:0c:
e1:6d:53:62:0f:40:2f:78:79:43:c0:f5:2e:80:09:
30:bf:df:79:fb:91:19:9a:c9:ec:cb:e2:6c:f6:2d:
e7:18:ee:2d:c9:d2:86:92:47:b1:85:97:12:b3:f5:
00:cf:50:3d:30:4d:af:30:7c:4d:47:cc:76:2c:1b:
e2:c0:4d:b0:3c:a9:19:31:3b:af:66:d5:1f:bc:44:
8e:8f:36:e0:88:a0:e4:9a:4f:00:a7:57:e8:36:0c:
5c:ee:df:bb:51:fa:57:9c:2f:87:ec:77:6e:cd:66:
61:7f:0a:44:ff:9e:e0:47:a5:fa:56:4f:6e:46:b0:
53:cd:79:b4:ae:fe:e9:43:07:e1:ce:c2:91:2a:4b:
5f:6b:e3:b4:bc:54:c8:83:c1:70:6a:46:1c:8b:b7:
05:bc:ac:58:73:73:69:9e:3c:da:a6:d9:91:e0:a5:
7f:8c:dc:77:b6:f4:54:06:77:23:17:a7:a9:5f:3b:
46:cf:55:c8:93:b7:3b:29:14:fd:74:62:e1:7f:4b:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BA:87:C0:BD:CC:6A:34:15:B9:8B:AC:56:8D:81:D8:EC:28:3E:6B
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c2:2b:c5:5c:01:96:58:d0:d5:fe:ec:42:26:90:60:cb:26:
0c:65:e3:72:4b:34:5e:4a:b3:a9:8a:88:67:1e:f7:69:c6:ce:
1a:ae:ac:20:c3:bd:6f:06:10:bc:5b:ee:a0:7b:5d:75:52:ac:
1e:92:10:c9:d0:be:b4:12:4a:7c:43:a5:37:b8:06:fc:24:47:
c0:ea:a0:67:bb:cb:b4:d1:b8:bb:21:be:3d:06:3d:45:6d:0f:
24:39:92:57:23:d7:ac:55:9c:97:b2:6e:7f:47:5b:79:e5:88:
1a:10:6a:3e:f4:db:09:cf:36:02:35:20:1a:e8:4c:51:53:60:
76:20:f6:dd:59:06:d9:49:c3:65:ab:5d:3c:d1:b5:7b:c7:05:
33:a1:7a:00:5f:4f:48:b4:da:0f:f7:f1:41:20:f1:12:ab:f8:
95:b5:c8:b1:ea:7d:c6:4c:16:48:2c:48:77:86:34:77:98:0b:
9b:ad:96:bc:6c:46:0d:3c:81:f4:c1:e8:40:73:49:53:57:a0:
15:fd:88:3d:7e:09:d3:ed:76:5a:b2:3d:68:f3:c7:d9:98:21:
7b:99:ad:ee:21:46:2b:4a:53:f3:c5:18:ed:36:45:85:f5:aa:
5c:c8:2f:03:bc:36:e3:72:da:06:aa:1b:5d:6c:1a:ba:00:1f:
ce:03:56:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:04 2026 by rpki-client