Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier: +iKwZQh94axZQhxWgqyPMJ/j9KGx+YJu9MX0RvgDIsU=
Subject key identifier: 1C:56:AF:80:66:66:78:4F:53:81:ED:98:0D:18:47:80:41:4F:50:98
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 019CABD9F8E8BE84F261DA29A508F6CA2DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number: 0DAB
Signing time: Mon 02 Mar 2026 00:01:54 +0000
Manifest this update: Mon 02 Mar 2026 00:01:54 +0000
Manifest next update: Tue 03 Mar 2026 00:01:54 +0000
Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: dMDt7dzsDGMo8wRG3YvsGn6bsfUwyqlSbnb/DSL2cyY=)
2: gUt7m6bm6Ypt3vXyTgso7fl3C6k.roa (hash: WJiA2MwI/PZpVcjUqZwtFs+YN8agHp3vSy+iuxG93eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f8:e8:be:84:f2:61:da:29:a5:08:f6:ca:2d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Mar 2 00:01:54 2026 GMT
Not After : Mar 3 00:01:54 2026 GMT
Subject: CN=1c56af806666784f5381ed980d184780414f5098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:7e:2a:c5:2e:f3:ec:76:9a:2a:16:bf:30:
ad:f7:10:ba:ac:54:53:78:be:f2:61:ee:f1:5d:d7:
fa:68:cf:cf:6c:04:37:07:39:38:4a:27:1a:8f:bd:
19:83:c9:47:fc:3e:d2:f0:53:8f:65:4a:8f:fa:82:
b5:55:ce:99:dc:40:c5:3a:8b:6b:61:cd:1e:45:01:
4a:11:96:9d:bd:cb:fa:c7:4d:ce:e1:a0:11:e0:99:
70:32:17:65:3e:64:4a:48:b5:65:b3:c8:b1:bd:e1:
ac:83:7d:a7:ce:42:af:d7:b1:b5:d8:d3:bf:5e:3c:
95:e4:7c:46:c6:24:94:5f:8b:0e:bf:b7:59:a7:62:
a8:b9:7c:cc:6c:70:fc:f2:58:94:cf:d1:9b:1b:d4:
16:0b:4c:a7:46:98:bf:df:41:3f:45:5a:39:79:ad:
78:6a:a9:cd:7e:30:4c:75:8d:0a:67:5d:64:e7:ec:
8c:39:4f:0d:f9:9e:9c:1b:65:fa:66:c4:a0:0b:0a:
f1:65:60:88:45:53:90:3a:fc:11:79:1a:92:cc:1e:
be:85:b2:8a:87:a6:4b:03:c1:d8:d1:39:d5:38:af:
48:a4:63:ba:0a:d8:3d:10:47:57:74:67:59:31:f6:
1d:e6:f4:a1:66:f1:3c:ee:3b:bc:25:f0:9c:51:8e:
9c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:56:AF:80:66:66:78:4F:53:81:ED:98:0D:18:47:80:41:4F:50:98
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b0:a7:a8:19:cf:9f:f0:e7:23:b0:7f:53:07:87:88:57:e6:
52:50:b1:83:a4:46:6d:ad:68:45:b1:e4:71:0e:f6:3a:40:cf:
23:af:e0:39:da:b3:94:36:9a:d7:10:08:a2:06:e1:3f:02:0e:
65:bb:6c:b1:fa:28:bc:23:84:7d:96:0a:ed:76:70:98:1c:ab:
4a:2e:7a:e9:dd:aa:d8:24:5b:ff:3a:fd:2d:05:53:43:64:05:
62:b2:74:d8:88:ac:55:fe:37:09:4c:fe:83:82:69:e8:85:d3:
c6:7f:7c:91:68:5c:a8:f8:96:23:2c:c4:fd:62:07:ec:c3:49:
39:57:6f:8e:be:f5:df:97:88:c0:7b:c7:91:49:c5:f1:4f:48:
4e:bd:b4:c0:77:f8:46:e7:7b:c5:07:bc:96:c1:b5:b2:60:ab:
fe:00:8b:ea:03:f6:2a:d5:00:8d:49:8e:4d:42:c2:d8:d3:47:
7e:fe:78:7f:53:04:d5:d2:34:45:69:4d:e9:5b:28:2f:ac:68:
2a:4f:7f:08:ed:2f:1e:c4:60:2b:50:a4:ff:3c:c3:74:ec:19:
71:95:7b:56:71:e9:c7:a3:cf:65:14:34:eb:c3:b1:2e:18:5b:
54:a5:e6:9f:22:2f:8e:b0:55:59:d6:59:49:3d:60:38:de:61:
75:29:3e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:11 2026 by rpki-client