Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
File: gCNZN6302riSXVgEWjNxgWyYBTE.mft (raw, json)
Hash identifier: 8ls2NC35T4BDTQs2tkzjiYFIwaKXIrpzQeIlcxrSfmI=
Subject key identifier: 3E:1A:2F:EA:50:64:73:14:4B:42:C3:32:08:25:4B:29:EF:C0:D9:A4
Authority key identifier: 80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
Certificate issuer: /CN=80235937adf4dab8925d58045a3371816c980531
Certificate serial: 019D9AAC57BF9EB524C58590CB0DAB543498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
Manifest number: 0AA7
Signing time: Fri 17 Apr 2026 09:01:19 +0000
Manifest this update: Fri 17 Apr 2026 09:01:19 +0000
Manifest next update: Sat 18 Apr 2026 09:01:19 +0000
Files and hashes: 1: gCNZN6302riSXVgEWjNxgWyYBTE.crl (hash: VgU0vkUlS95PC4UnbGeJiLNZgs/WguSNzq8qAC4ZMcI=)
2: ni8xOmyPG8GcK3Z8TZmDGUp0yPU.roa (hash: iTNz2JkVG0lyLMF9W3w/Ic91Eg7OidyUS/S/a+cGNtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:57:bf:9e:b5:24:c5:85:90:cb:0d:ab:54:34:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80235937adf4dab8925d58045a3371816c980531
Validity
Not Before: Apr 17 09:01:19 2026 GMT
Not After : Apr 18 09:01:19 2026 GMT
Subject: CN=3e1a2fea506473144b42c33208254b29efc0d9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:cb:e7:85:38:52:b9:85:e4:3b:d2:57:5b:
a4:f4:00:cf:ab:07:67:ab:6e:af:22:ff:f4:49:1c:
f9:b6:33:ac:03:34:ee:29:af:f2:0a:2b:cb:0f:a2:
1a:7c:d1:b4:99:89:5a:a7:99:18:64:12:83:58:81:
72:08:45:33:37:c8:e2:2f:ce:07:55:a8:ee:14:bb:
52:02:61:50:c8:98:f6:de:8b:4d:3b:47:f7:18:60:
b0:41:42:bf:3c:a3:96:8f:81:f6:17:4d:d8:35:d6:
d9:2e:a0:cf:59:55:4d:43:9a:d6:22:a2:66:60:57:
c6:8d:2b:3f:85:07:c5:31:d3:02:c3:aa:53:d5:7e:
80:f8:a1:88:de:8e:42:7a:a1:5f:01:af:11:3f:ff:
ee:ac:25:6a:26:fc:ec:86:a5:fb:90:fc:a1:64:dc:
de:31:ca:4d:0e:b3:c6:ba:c0:69:fb:1c:ce:3c:f9:
83:80:c6:a1:dc:ed:fe:b6:a6:e4:79:99:5f:41:a2:
32:96:be:26:66:24:03:fb:4a:0e:65:9a:b4:40:1b:
b9:49:0b:e3:3e:c5:dc:95:fc:bd:52:cf:ec:25:1c:
60:91:09:bb:ea:39:38:0d:9c:6a:e4:3c:a5:9c:fa:
ef:88:d2:d0:51:b2:1a:9c:48:0d:29:7e:b2:29:a8:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:2F:EA:50:64:73:14:4B:42:C3:32:08:25:4B:29:EF:C0:D9:A4
X509v3 Authority Key Identifier:
keyid:80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f4:66:91:99:4b:70:12:2b:20:ab:e4:89:d5:fd:41:31:c7:
8d:6d:90:cf:41:24:98:36:fe:fe:8c:cc:24:f9:86:e0:8b:e2:
74:9c:cf:c3:4f:14:5e:ec:73:e7:3f:63:c9:63:d7:10:98:fb:
a5:22:c6:b2:25:7d:ec:65:49:ba:5c:fb:a5:43:99:78:bc:4a:
84:ef:7b:5d:7a:f4:66:f8:10:a6:50:87:d4:35:a3:bb:e2:35:
6b:4e:f5:2c:1b:6c:99:1f:d1:8a:33:12:f1:1c:d2:17:5f:92:
8d:1a:c4:e3:3a:42:94:b8:a3:d4:4e:bf:fe:c9:01:b2:ce:04:
40:4a:fe:d3:02:ab:30:90:f0:38:6f:80:8e:9a:35:cc:89:5b:
83:e8:c8:e4:24:5b:c2:ec:c6:77:c0:3e:6e:fd:f7:7a:6a:5e:
90:a9:1f:55:8b:50:85:71:ef:9d:f2:98:f6:b0:ce:1a:85:99:
6f:67:ac:b0:11:ce:b5:5b:ed:1f:e2:74:02:7c:81:71:8f:63:
bf:a9:90:f6:f4:d8:75:9e:2d:7d:41:54:4f:82:ff:83:cf:e7:
c1:35:08:75:ce:2c:79:3d:4b:54:6d:90:c6:ef:6d:25:35:67:
1c:4b:4a:96:ba:cd:89:2d:2c:85:e6:38:95:2f:87:ae:a3:42:
44:cc:fc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:44 2026 by rpki-client