Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: FFbXrMPZhAkAfg13g0201H021+qycnsncXR5ysa7v3A=
Subject key identifier: D3:1B:EE:E9:6A:8A:AB:9D:0A:02:81:8D:17:05:9F:9F:A9:BC:1D:E6
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 019D9AE388DB76A8C6EAE5D91260DAD6BFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0DEB
Signing time: Fri 17 Apr 2026 10:01:36 +0000
Manifest this update: Fri 17 Apr 2026 10:01:36 +0000
Manifest next update: Sat 18 Apr 2026 10:01:36 +0000
Files and hashes: 1: fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa (hash: LXNlsf10QtsQkHE8Tm9n4uZsh/ON6f1nhNppQ718O5s=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: Z4XsU9ZsmKD8x5jzwPlzDaRaRWjTiCU1TuYatnAAKSk=)
3: xG0VUDOknHsZasT5TDaZxzA4pvE.roa (hash: Xzghi2lIosJPiXM8pVY4mOf1fz9gQv7/1SCn9lu4mdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:88:db:76:a8:c6:ea:e5:d9:12:60:da:d6:bf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Apr 17 10:01:36 2026 GMT
Not After : Apr 18 10:01:36 2026 GMT
Subject: CN=d31beee96a8aab9d0a02818d17059f9fa9bc1de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:bf:ad:59:09:84:2e:ee:b2:15:66:8d:5a:
22:7a:e3:2e:ca:9b:9b:84:2b:22:dc:92:41:3d:75:
e3:22:6f:ce:09:6a:dd:0a:14:5a:e8:f7:cc:a8:2d:
26:fd:f7:2f:92:c6:7e:f7:b3:46:07:a0:d7:e9:33:
a9:6d:55:b0:e5:42:88:4b:05:6c:1e:d8:7d:d0:e9:
49:81:c6:70:51:7c:5d:a6:99:f5:2d:8a:f8:d4:db:
88:6b:61:4a:07:f8:6b:d6:05:ab:45:b9:b1:10:8c:
81:35:79:33:18:a3:12:af:34:d3:f0:ed:54:c7:46:
8a:9d:18:79:f8:9f:47:66:c7:e4:92:6e:05:c5:34:
de:41:b1:6e:bd:7a:3c:97:d9:e2:b5:30:80:6b:de:
c5:46:98:15:e9:8c:6e:91:85:5e:bb:dc:1a:2a:75:
4c:81:27:65:5c:7a:cd:b2:f4:fd:63:0c:f9:5e:26:
cf:40:20:9e:8e:90:f4:e5:6c:2e:8e:b7:d4:51:f7:
aa:a4:d8:c7:6b:d8:f9:72:be:7c:4f:50:ea:c2:b4:
cd:53:a3:a3:37:a8:79:52:41:13:a1:13:3a:f0:2a:
48:21:dc:a7:d0:56:02:20:f1:1b:57:7a:7b:e6:32:
59:8e:6b:0a:38:f8:82:e3:f4:29:a9:a0:35:2a:82:
f5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1B:EE:E9:6A:8A:AB:9D:0A:02:81:8D:17:05:9F:9F:A9:BC:1D:E6
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c1:eb:3f:08:29:06:3f:e1:06:d3:ee:d1:29:64:af:d4:dd:
32:3d:eb:fd:6e:11:ff:bf:95:83:89:ea:45:a8:fb:4f:31:ab:
dc:bc:2b:46:7e:2a:1f:e3:a0:46:27:b7:24:f2:91:af:d3:e6:
36:45:30:1f:4c:d7:d3:3e:3e:e3:48:d3:57:aa:5b:c4:eb:f5:
1d:51:30:ee:f5:6d:fc:4d:87:7b:fe:57:6c:28:cf:fb:63:a5:
f8:4f:49:a0:6f:f4:62:79:c1:5d:a8:8a:9f:20:58:d5:45:8a:
f1:a2:8a:b8:3f:e9:3e:65:63:d4:55:ce:a2:c3:a2:5b:48:35:
4a:dd:8c:39:3a:6f:07:db:dc:8d:24:e0:03:2c:ce:af:6f:17:
0e:23:cd:90:39:75:e4:f8:ce:7d:a4:31:db:f7:fb:6b:43:b5:
a3:6b:54:89:f4:a3:6b:de:13:c0:d1:25:d1:52:f1:97:d6:d3:
d7:c6:01:55:83:3d:30:ff:08:10:78:db:ec:8f:ff:3d:5f:c6:
c8:5d:aa:90:11:c5:bd:75:0e:81:2f:04:65:2d:0c:4f:d0:29:
12:9b:37:fa:30:af:49:66:7e:8c:5f:c9:57:a9:18:be:8d:7a:
e7:af:d5:0f:e5:7c:f0:fc:f1:6a:8e:7f:d6:68:47:4e:88:db:
e6:6b:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:36 2026 by rpki-client