Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier: +imA8DjcWa4JVX4xR1+20sFmCxdKat+lILKfS5WD1yI=
Subject key identifier: B6:8B:7B:A9:E2:26:B1:0D:F3:F4:7E:47:04:A1:95:68:07:D0:3D:44
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 019CAA8F6FA6F02D8EAA2018C889D1B3F2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number: 0F39
Signing time: Sun 01 Mar 2026 18:00:52 +0000
Manifest this update: Sun 01 Mar 2026 18:00:52 +0000
Manifest next update: Mon 02 Mar 2026 18:00:52 +0000
Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: ALvCAM7FcAechDn78AFDCCI3tdJS0x8njnqUVGuD3Js=)
2: kUYY1Q4-v9Q6exQgCpt_jTplt24.roa (hash: L8NHXT8Vz2l7Z8N60RDMTVs4PiVsANYIsY9CEDH7bQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:6f:a6:f0:2d:8e:aa:20:18:c8:89:d1:b3:f2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Mar 1 18:00:52 2026 GMT
Not After : Mar 2 18:00:52 2026 GMT
Subject: CN=b68b7ba9e226b10df3f47e4704a1956807d03d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:bb:67:09:64:05:91:d8:1d:8c:76:8f:05:
05:ca:72:ce:51:38:3f:ce:ce:24:23:8c:8b:2f:a0:
16:d6:64:6e:73:d5:91:5e:ee:af:2c:69:ab:bc:9f:
eb:91:0c:67:1a:ef:25:19:d1:26:01:64:7b:76:fb:
d1:4e:22:bc:1f:6d:70:23:d8:40:a0:24:b4:db:bd:
18:be:fe:46:79:de:0a:bc:7b:a5:a6:9e:f0:ff:ef:
44:7a:f9:64:69:b2:a6:5e:3e:16:1a:75:3b:8d:df:
aa:70:00:73:b0:bb:8d:46:48:0a:a4:53:6f:86:fc:
ae:c8:55:85:16:c2:7a:12:fc:a4:d7:0b:b7:cd:fd:
87:31:8f:0f:66:52:7e:fd:38:0e:15:a0:8a:53:06:
ef:09:2d:0c:54:92:ab:68:21:40:de:b1:f7:81:a8:
d5:7c:a3:4b:14:79:f6:35:0f:70:f8:01:d9:83:ba:
6a:dc:2f:3c:f9:ec:b3:a4:89:c8:d9:bc:a3:c1:81:
9f:37:eb:aa:64:28:db:9b:cb:90:bf:3c:d9:8a:1e:
f8:9f:81:72:b0:13:bc:6b:9b:7d:e1:9b:4d:b7:fb:
d4:57:17:c2:3f:5f:67:c6:c7:a5:19:34:1a:4a:b3:
dd:66:be:18:1e:c9:fe:18:b8:8b:1e:a9:30:36:7b:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8B:7B:A9:E2:26:B1:0D:F3:F4:7E:47:04:A1:95:68:07:D0:3D:44
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:21:08:e2:e8:6a:90:c9:8a:8d:df:bf:4f:fc:5f:5a:f2:fe:
3a:cb:67:53:08:6f:a6:32:32:03:6e:05:81:bf:f0:ab:6b:1b:
16:d5:29:d5:da:11:52:a5:2c:93:bf:c1:7f:d1:b1:19:c5:63:
cb:b8:b8:b7:00:66:c2:77:c6:b3:d8:4e:e7:58:d3:92:fa:a3:
ae:7b:05:cc:4c:f0:ce:df:ce:4e:fd:aa:43:fc:7a:03:0f:d5:
6f:82:b7:09:0f:f4:52:dd:63:82:e5:fa:45:47:35:7e:2d:7b:
6a:14:8d:1c:c3:cb:89:40:09:81:c7:c3:08:6a:48:b4:57:7a:
38:1a:c8:51:53:7f:ee:06:f9:ea:e5:96:68:7f:9d:8c:fa:5a:
4d:75:d9:28:fd:9a:d8:cb:a8:83:21:61:e0:5d:f2:e5:d2:b7:
d1:1b:38:7a:fd:0d:8b:16:a0:6a:cc:e9:f6:18:e3:12:1b:c4:
3f:2b:87:91:2f:e5:e8:3a:54:a3:da:5a:1e:77:e8:b1:1e:40:
60:22:3b:ce:c4:5b:16:5f:db:13:45:98:be:da:17:f4:f6:df:
04:5b:c7:10:ab:1c:e8:4c:56:21:79:3a:75:43:22:d5:29:1b:
d8:70:11:38:2f:73:87:c0:4d:1e:e2:e0:65:12:05:70:b4:e9:
ad:45:4e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:03 2026 by rpki-client