Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
File: gCNZN6302riSXVgEWjNxgWyYBTE.mft (raw, json)
Hash identifier: m/vgIoBrjg7iEmIkfByiVFkcCrnQWmGAR5RdjkQ1dzw=
Subject key identifier: 9E:81:64:ED:54:A3:CE:06:9A:84:61:67:D6:E2:50:51:16:A3:AB:48
Authority key identifier: 80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
Certificate issuer: /CN=80235937adf4dab8925d58045a3371816c980531
Certificate serial: 019CAF111AB399B51BA8CE1280BC1DAB2B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
Manifest number: 0A2D
Signing time: Mon 02 Mar 2026 15:00:59 +0000
Manifest this update: Mon 02 Mar 2026 15:00:59 +0000
Manifest next update: Tue 03 Mar 2026 15:00:59 +0000
Files and hashes: 1: gCNZN6302riSXVgEWjNxgWyYBTE.crl (hash: EQXZkARIA9qHmPh6x4y7MGKYMGU5Shuvp6zhongYigc=)
2: ni8xOmyPG8GcK3Z8TZmDGUp0yPU.roa (hash: iTNz2JkVG0lyLMF9W3w/Ic91Eg7OidyUS/S/a+cGNtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:1a:b3:99:b5:1b:a8:ce:12:80:bc:1d:ab:2b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80235937adf4dab8925d58045a3371816c980531
Validity
Not Before: Mar 2 15:00:59 2026 GMT
Not After : Mar 3 15:00:59 2026 GMT
Subject: CN=9e8164ed54a3ce069a846167d6e2505116a3ab48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:5f:3f:ef:7c:6b:6c:46:2b:b6:87:f0:0a:
a2:87:8c:86:b9:4b:d1:64:fc:26:52:3e:b2:cf:25:
ab:bb:b4:e0:ba:f8:4c:f7:6a:ee:ad:89:98:37:f6:
d8:11:48:58:96:9c:4c:6e:33:a8:8d:dd:23:4d:c1:
02:e6:94:e5:ac:ed:31:37:e4:76:dd:9b:e1:0d:b3:
64:94:8b:f4:fe:1f:e6:00:d1:39:f8:a2:03:92:c9:
7b:15:b4:79:b0:1d:4f:a7:0e:b7:36:b0:53:a0:ee:
bb:88:ec:8a:c1:b4:e0:e8:a9:b5:4f:f9:f2:68:51:
d8:bd:f2:e5:05:43:eb:64:1b:67:87:fc:ca:cb:63:
9e:b2:d4:c1:b2:4e:ef:17:b2:07:00:4b:88:f4:bb:
00:97:b4:1a:db:df:65:cf:88:50:ef:26:3d:7c:2c:
ed:77:22:a8:58:4d:41:f5:d4:40:d0:b5:15:04:d8:
ce:3b:15:52:75:f2:2f:b1:2e:83:44:45:c5:e8:ee:
52:fc:f1:a8:3b:c4:f7:1c:25:4d:af:bd:9c:10:56:
9a:af:fd:29:b3:d8:e5:59:fa:8a:8d:cf:fc:4a:bc:
4a:ba:81:cf:89:4a:8d:32:c7:94:d2:c4:b6:de:cc:
59:93:6d:0e:9a:0b:cc:1f:78:10:ce:18:b2:72:58:
a6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:81:64:ED:54:A3:CE:06:9A:84:61:67:D6:E2:50:51:16:A3:AB:48
X509v3 Authority Key Identifier:
keyid:80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f5:65:c8:84:7b:76:a7:d4:26:64:6c:1a:f7:eb:30:89:98:
ed:03:96:9e:cb:8a:16:d9:a1:9d:68:df:f4:12:0a:e0:85:e2:
98:26:c5:22:35:70:5b:16:45:e4:b3:ac:37:9f:e2:14:a8:54:
23:2c:3b:0e:db:b3:b5:4d:1c:9a:a7:0b:4a:55:90:9e:9f:94:
67:7a:b3:9e:b7:cf:06:af:df:0e:6c:d0:87:1d:86:80:1b:bf:
ea:8d:06:44:9c:bf:e6:09:fc:cd:fd:af:e1:16:54:cb:e0:3f:
99:0d:56:41:5f:2d:bf:5c:78:ff:f6:d0:cb:66:57:09:f5:36:
60:20:5b:d2:b7:71:d0:00:23:b0:60:d2:34:c2:be:11:65:eb:
d5:d2:3c:41:0c:36:9f:64:6a:34:32:ea:f3:f1:e3:16:a1:09:
6d:53:df:92:30:7f:bc:88:65:67:d6:f3:c7:0e:f6:6b:dd:ed:
32:16:25:57:05:d5:51:6d:d1:5b:5a:e9:9f:8c:89:b2:5d:83:
c9:23:2e:92:94:46:8c:06:b0:f1:35:8a:b1:f0:eb:3a:68:64:
11:ba:27:37:be:21:7f:c3:e0:b4:75:bf:b7:34:bd:ec:b3:11:
c4:a1:17:f5:c0:c9:bd:09:eb:5f:8f:2e:93:e3:96:6a:40:53:
da:90:81:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:34 2026 by rpki-client