Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: jMUg5sAhkOI29E7yEgcAormZjsPpD6rPNmicX9rrLCM=
Subject key identifier: 11:32:20:73:81:EA:8F:55:89:7F:53:FF:ED:31:3E:DD:BC:DC:A8:17
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 019D9A3F01CB457E0035FFDE563B5C1B57CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 0813
Signing time: Fri 17 Apr 2026 07:01:53 +0000
Manifest this update: Fri 17 Apr 2026 07:01:53 +0000
Manifest next update: Sat 18 Apr 2026 07:01:53 +0000
Files and hashes: 1: P8LunT7NWyGTGPbLtH4shJpoGP0.roa (hash: TbFuXtQTiW0SZnaPUm+pr7Lb/RImoBN9F9vrbRZOLrA=)
2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: 5jlVr1pjddW66U36f/EbO2pldhAImtjfJkcjoZyFssQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:01:cb:45:7e:00:35:ff:de:56:3b:5c:1b:57:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Apr 17 07:01:53 2026 GMT
Not After : Apr 18 07:01:53 2026 GMT
Subject: CN=1132207381ea8f55897f53ffed313eddbcdca817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:29:88:4e:67:f1:5e:6b:eb:ca:46:d2:46:
88:e0:95:c0:df:28:0c:73:fa:05:e0:2a:1b:90:a7:
ab:17:1e:8e:07:0c:c1:6d:03:60:6b:24:0b:5d:80:
95:75:77:be:a3:b1:8b:a3:ae:aa:e3:69:6d:2b:1b:
f5:51:1f:d3:2d:54:d2:e1:a4:14:b1:d5:d4:e4:0a:
0d:c9:da:dc:46:6d:32:00:2c:2b:b3:9e:06:bf:5d:
46:4c:bc:9a:52:2c:42:b9:40:a4:07:56:8d:e3:b5:
81:50:d8:f6:30:dd:f3:16:1f:2f:cf:35:f9:d5:78:
a5:17:9b:4d:c7:d0:3b:97:16:5c:7e:90:ae:a1:3c:
46:ad:37:6c:64:fd:39:59:3f:99:e8:cb:35:8b:b6:
3e:63:56:02:20:68:74:40:13:3a:ff:68:c6:22:b5:
d1:11:14:a7:0c:cb:f4:20:a4:ea:23:c4:87:c8:b1:
f0:07:65:0f:ad:b2:89:e5:55:7c:89:05:c3:6b:ff:
5d:25:99:be:a6:ab:55:bf:b7:0e:7a:f2:68:33:9a:
69:bd:4a:43:9b:20:79:1e:61:52:d4:ee:9a:20:41:
9d:c1:ea:7d:b9:c3:53:f0:16:e1:c5:16:4c:8d:e5:
e1:ed:8d:a7:e7:02:e4:76:00:21:72:f5:cb:b6:c6:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:20:73:81:EA:8F:55:89:7F:53:FF:ED:31:3E:DD:BC:DC:A8:17
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:74:31:ba:55:6f:19:a9:6f:bd:cd:3f:65:aa:b6:a1:80:30:
7b:ce:67:60:0c:51:8c:c1:9c:4f:6f:5d:3b:35:75:5c:d2:3c:
ee:a1:ed:97:2d:81:f4:30:cc:86:de:0a:1c:9a:74:dd:8a:04:
50:c8:99:07:1a:d3:dc:94:00:66:37:48:a0:02:c6:53:54:8a:
87:33:43:a1:b1:fa:f4:82:92:4c:3a:fa:48:f5:38:aa:3b:81:
34:ae:4a:b5:14:bb:13:fa:91:fd:83:ba:d9:d5:06:46:df:5e:
17:bc:50:39:19:12:e7:fc:db:fa:bb:73:ca:04:5c:a3:82:40:
41:38:5c:ea:a7:ab:24:c3:ba:0d:fd:7c:4a:88:af:13:0a:90:
8f:fb:78:37:c4:76:76:2b:35:81:72:f5:dc:8e:88:4f:9c:09:
c5:06:9f:51:e9:e9:76:60:7d:d7:97:b1:8b:87:57:07:ba:1b:
03:c1:b2:59:65:3f:17:60:ef:8d:0b:9c:e6:22:5a:31:7f:2d:
66:85:ff:d6:73:2a:95:df:27:67:1b:1e:44:af:b3:f5:72:db:
e5:d4:1e:de:84:80:24:10:63:0d:41:ba:94:07:65:92:f2:c2:
01:90:55:b5:fd:aa:a6:9a:b0:b5:3d:15:b1:eb:96:35:36:f3:
ba:1f:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:09 2026 by rpki-client