Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: ZVCYl69TCTr4NktXreMfabt2tccOKsyWsA/rwM5mX/0=
Subject key identifier: 73:BD:37:01:0D:4A:1A:E8:0A:46:7D:88:A1:22:57:93:5D:53:BE:CE
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 019CABD9D43E8EFB14D937334469A328AD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:45 +0000
Manifest this update: Mon 02 Mar 2026 00:01:45 +0000
Manifest next update: Tue 03 Mar 2026 00:01:45 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: mUDFo+IX3PdXK7ljYSaZBqiYGpyuw3X9BAnj1dXSiZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d4:3e:8e:fb:14:d9:37:33:44:69:a3:28:ad:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Mar 2 00:01:45 2026 GMT
Not After : Mar 3 00:01:45 2026 GMT
Subject: CN=73bd37010d4a1ae80a467d88a12257935d53bece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1d:f3:ba:ac:21:d3:04:ca:a1:15:08:70:57:
5a:64:bc:6c:8b:a2:ed:36:50:63:da:85:21:50:83:
8a:aa:2d:26:33:38:a3:9b:03:c3:df:c2:86:cb:99:
b5:90:c9:e0:2e:af:6d:7b:1a:69:85:37:03:bd:a5:
4d:a7:61:43:84:f8:7f:4c:83:5c:61:59:65:e3:31:
35:8d:f8:3b:87:1b:5f:e3:55:de:a9:7e:3e:95:37:
8f:df:9a:de:54:31:a0:6a:68:bf:61:cf:75:38:af:
69:88:67:64:eb:09:a2:4b:a0:ee:46:26:d3:aa:32:
e0:5a:a7:6f:52:d5:09:ee:62:50:b9:2b:68:77:8c:
43:d7:41:90:9d:7e:b4:df:e6:78:54:a3:f0:15:77:
12:a9:35:6d:bc:8f:e8:5d:fc:83:2c:aa:78:63:7f:
07:26:b3:90:28:c5:03:74:17:35:37:d4:35:87:3f:
22:ee:be:42:3d:17:cd:1c:5b:58:a7:eb:37:6e:d4:
2c:23:e1:80:3a:4d:12:0b:02:2e:4d:66:57:3c:aa:
c2:e6:9e:e0:e7:69:6b:4f:46:6a:c6:1b:50:96:72:
f8:ad:3f:5c:6d:b8:ca:d1:a6:b8:87:ae:e3:53:33:
12:19:45:19:a5:46:13:1e:38:bb:e3:57:04:d7:13:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BD:37:01:0D:4A:1A:E8:0A:46:7D:88:A1:22:57:93:5D:53:BE:CE
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0d:5a:d5:db:b4:8e:66:d7:cf:9f:c8:ba:e5:29:43:f8:60:
f5:36:4e:48:1f:ca:30:30:b3:d0:af:3c:8e:de:af:ef:b2:66:
9e:bc:14:6b:68:eb:5a:83:16:99:30:8d:bc:01:a2:92:e6:a2:
67:a6:27:e5:85:29:59:c6:68:f5:e8:4c:d3:4b:0d:31:41:52:
db:86:80:74:c0:9d:fb:cf:9a:07:54:56:bc:87:50:d8:28:c3:
ed:a1:b2:d3:bc:29:51:02:66:4c:78:84:9c:40:cd:7c:72:35:
4f:94:05:75:30:a3:9a:e1:f2:ad:0a:de:81:b6:27:d5:3c:e1:
e7:78:9f:79:3c:2e:62:86:98:4c:05:26:23:60:d8:9f:14:09:
c9:93:30:6c:5b:4f:ec:ef:fd:fb:44:7f:10:48:c0:c2:0b:7c:
14:ff:9f:ee:57:99:a8:74:96:19:42:6e:8a:37:6a:30:85:f4:
e6:71:d6:73:47:96:b8:5d:9a:bb:86:8b:9e:80:a9:b4:eb:03:
cd:36:bb:9c:3b:46:92:43:c1:4c:58:f4:6e:24:07:11:1c:49:
a5:48:83:06:33:e0:b1:94:0f:58:ce:d2:b9:34:1a:c1:3e:fb:
6c:17:a4:9a:64:c8:17:be:62:fd:93:c7:cb:f2:80:76:eb:02:
da:b3:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:48 2026 by rpki-client