Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier: OMb1+P7xzOEqu6MkRQXbsQFZgB9JRmgnLiFvl4lp1YI=
Subject key identifier: 6C:F9:0B:B3:B2:C2:06:82:C9:59:04:45:59:7C:01:64:AA:7D:57:39
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 019CABA25CF25099030571FDE8E4CB58F16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number: 123E
Signing time: Sun 01 Mar 2026 23:01:10 +0000
Manifest this update: Sun 01 Mar 2026 23:01:10 +0000
Manifest next update: Mon 02 Mar 2026 23:01:10 +0000
Files and hashes: 1: Uhdd2LHjn5iOA9Ff6w9g0pvCay0.roa (hash: GWSvUjVdu1UDo6lvgspGXIRNDtNx+fESVlxZbXeFX7g=)
2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: 7cGYrSUvEFzNgPcDFPlOTWPEu9pv5LniUot82cB3VoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5c:f2:50:99:03:05:71:fd:e8:e4:cb:58:f1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: Mar 1 23:01:10 2026 GMT
Not After : Mar 2 23:01:10 2026 GMT
Subject: CN=6cf90bb3b2c20682c9590445597c0164aa7d5739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:03:f7:8b:db:5b:0b:3d:ad:02:c8:e8:b9:52:
c0:69:11:5c:ba:be:19:3c:fd:fd:f9:bf:19:31:bc:
76:2b:aa:54:5b:d6:fd:31:97:b1:06:17:82:50:9f:
4c:ea:a2:e8:1f:67:6a:b5:10:6e:7d:83:ec:e5:1e:
54:47:9d:00:5d:e1:0b:b4:3c:dc:e4:28:57:55:83:
ad:f2:6f:84:bb:7a:45:c9:20:de:33:4a:44:25:f9:
ae:db:e8:f6:0b:8d:b9:eb:e0:ae:06:10:54:22:06:
c6:1d:cc:ab:e7:2e:74:6d:19:6b:cd:12:05:46:ec:
4e:de:d3:c1:a7:84:ec:d4:f6:76:df:f5:1f:2b:41:
03:4a:90:f6:70:d7:b3:66:8f:ef:96:56:8a:c4:9f:
0b:28:ab:b3:1f:89:d0:52:5a:f4:36:4c:3c:4c:5c:
27:36:22:01:17:b8:a6:c9:d1:d3:42:47:16:0f:a9:
1e:9f:a2:2a:2f:76:65:1c:d6:52:1e:06:7d:40:1b:
55:73:c2:f5:f9:e7:da:d9:20:85:e0:be:9a:25:60:
97:28:b9:43:81:6b:ee:10:1a:58:eb:07:ae:b9:d8:
76:c4:fd:bd:8e:ec:3b:a6:7d:96:6a:bb:2a:3e:0d:
e9:d2:0a:42:29:24:68:89:b8:02:41:c4:93:af:a7:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F9:0B:B3:B2:C2:06:82:C9:59:04:45:59:7C:01:64:AA:7D:57:39
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:55:5d:fe:1f:48:c6:81:71:f5:55:d3:83:28:6c:42:05:c3:
9a:cb:87:6f:bb:32:fc:54:85:38:42:fa:07:e9:52:ce:b2:4c:
86:f3:fd:70:d6:b4:0b:66:61:87:1f:1d:c8:cf:a4:e0:1d:fd:
e6:47:92:38:23:c8:ea:c8:15:98:80:c4:b9:0b:f0:30:8d:c2:
7b:ab:ff:e4:88:4c:7d:7d:e3:6e:41:a8:56:a7:f1:a4:10:74:
13:1a:4f:75:cc:e7:68:2b:e6:0f:36:2f:54:7f:b3:65:b6:b2:
08:57:18:53:5b:d0:9b:ba:1c:4c:65:5c:47:9e:2b:77:6e:fc:
4b:3e:f1:4b:83:b9:bb:a2:e2:6e:ca:51:12:18:08:02:25:d8:
1c:1b:59:ed:ab:54:12:22:f9:bc:d6:1c:52:58:1c:c8:96:11:
d5:87:4b:22:69:c3:a4:ce:91:37:b9:f2:09:54:34:a7:97:3d:
40:e9:3e:83:07:62:49:de:c3:e6:fe:4d:46:ee:e2:84:92:31:
16:5b:ec:1c:62:4c:d3:8b:2f:b5:5f:4a:a3:62:14:fd:70:cf:
c8:c7:7e:a7:0d:37:49:35:86:29:f9:a4:2a:0c:ce:65:e0:dd:
ad:ea:13:84:29:4d:46:52:b2:a6:01:c5:76:bb:4a:03:94:e0:
2a:32:48:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:40 2026 by rpki-client