Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: lim2dQpva5TdGc4j2OzW8XZ2h+jOnPTL4OcXT6tOEfU=
Subject key identifier: D1:3E:2E:45:75:53:3E:74:65:2B:A8:7B:FB:29:21:AD:C6:45:E8:F0
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 019CAC477B669852C00C026C33EF4AB78DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 0E9D
Signing time: Mon 02 Mar 2026 02:01:31 +0000
Manifest this update: Mon 02 Mar 2026 02:01:31 +0000
Manifest next update: Tue 03 Mar 2026 02:01:31 +0000
Files and hashes: 1: O5-mG7lTLGsSHbPOXl_2N2nSPgs.roa (hash: hoTvW0b4Iag7FokkMuOsi13ZXqhsvaxP4WoOFPmTwHY=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: IwW6afET7/IxTFu2irHUKG7O3+y6x/oIgUFoMX5xx8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:7b:66:98:52:c0:0c:02:6c:33:ef:4a:b7:8d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Mar 2 02:01:31 2026 GMT
Not After : Mar 3 02:01:31 2026 GMT
Subject: CN=d13e2e4575533e74652ba87bfb2921adc645e8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:55:a7:69:28:e2:e7:73:e6:ae:a6:d4:4b:
06:5f:3e:b8:ac:a1:28:3d:49:09:f3:d1:bc:6c:d0:
b1:41:ab:cf:9a:3b:2b:e6:16:92:c5:a9:3c:04:51:
47:aa:f2:1c:f1:bf:31:cb:53:c8:eb:73:a3:2d:06:
55:60:ac:59:04:cd:78:ca:09:ef:07:1b:91:6f:cc:
83:2d:2b:70:57:4e:b4:28:cd:1c:8b:93:6b:72:bf:
34:41:97:7c:8a:27:e8:ab:98:b7:e0:d7:72:42:41:
01:fd:97:a0:e1:70:73:cc:8a:75:52:94:13:40:28:
01:61:ca:09:2d:a9:94:be:25:11:b5:bb:78:dc:92:
9b:1d:65:cc:28:31:1b:60:16:60:76:4a:13:ce:d7:
00:c8:a0:c0:34:ae:36:ff:b1:0f:0e:87:c9:57:f9:
43:c4:7c:29:3d:d7:22:5c:83:19:00:c1:cc:65:fc:
02:ee:33:0f:55:22:8d:e3:84:ed:20:8f:b6:85:87:
44:ff:6f:17:a9:05:99:e1:d4:1a:ad:fa:df:c4:9b:
f6:71:d3:6e:16:f5:94:45:28:e1:b1:a0:08:40:c6:
b1:57:54:9f:84:3e:cc:e8:39:a0:48:9d:04:22:b7:
c8:8c:22:e4:23:0d:31:b3:ef:b8:d0:c5:90:f8:1c:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3E:2E:45:75:53:3E:74:65:2B:A8:7B:FB:29:21:AD:C6:45:E8:F0
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:63:6d:a8:d3:c2:95:87:27:38:6c:18:b1:af:8f:91:e1:a3:
a9:ed:32:76:d8:0e:3c:25:98:c5:46:0f:cd:48:11:f4:44:8c:
54:59:62:22:9b:7b:f2:30:82:9b:fe:8a:68:4b:b3:34:8c:74:
11:bb:96:07:b0:4a:fd:48:85:bd:03:0b:21:22:d6:53:15:c1:
d3:65:64:00:b8:47:5f:ae:6a:f6:37:e1:3d:f4:31:a9:c7:7b:
e8:d8:32:c5:d3:d4:4b:ee:a4:2e:b6:e4:b6:82:77:97:87:01:
da:93:b8:71:84:71:29:be:1d:44:99:eb:24:31:dc:e4:ab:58:
86:54:ca:39:f6:c5:90:3d:2a:0c:d8:0e:28:28:e4:b6:0a:e0:
0a:de:1c:bb:2c:b0:97:f3:d6:76:af:b4:91:4f:a8:a9:2f:fe:
1f:a9:f9:84:55:88:04:6e:3e:8f:77:4d:3b:aa:cd:13:1d:2a:
a0:4b:07:c4:16:ea:83:fa:bc:b5:46:21:cc:4a:79:bc:33:05:
f3:a1:39:b3:b3:48:97:23:d1:42:b3:2d:4c:8d:8d:7d:e0:53:
9d:7c:11:ab:72:06:e5:37:be:8c:ec:cb:e7:c5:77:27:91:c1:
e6:ca:7f:6e:ba:9a:ef:49:4a:2e:a3:9e:aa:94:9b:c5:2d:23:
65:53:bb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:31:20 2026 by rpki-client