Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier: e9sE65Lq1Y7NYXgWKobMrBtTWp3CTRuNiyYmLOduT3k=
Subject key identifier: 6F:0C:FE:06:C7:2A:4A:51:A9:A9:88:5C:CC:52:95:9F:F7:A5:A3:5C
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 019CAB6B7DCA962B8FB04A667C7A2C19AF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number: 0DB1
Signing time: Sun 01 Mar 2026 22:01:14 +0000
Manifest this update: Sun 01 Mar 2026 22:01:14 +0000
Manifest next update: Mon 02 Mar 2026 22:01:14 +0000
Files and hashes: 1: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: 8o2bWVirm+BqaFimXY75UzjwOvwvE8uwycuOS3lyplA=)
2: hQ9NotylFYMkqo3bbUqE9OBXr30.roa (hash: DDGD0ACVZ8p80B8GH1cwIOOojO6HokidqY08m4jPrFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:7d:ca:96:2b:8f:b0:4a:66:7c:7a:2c:19:af:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Mar 1 22:01:14 2026 GMT
Not After : Mar 2 22:01:14 2026 GMT
Subject: CN=6f0cfe06c72a4a51a9a9885ccc52959ff7a5a35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:02:29:9f:62:12:5c:dc:56:2a:2d:12:6d:
c1:11:19:4f:9e:8a:c0:68:df:0e:05:e6:9e:63:a9:
75:70:39:2e:e1:41:a3:79:c7:85:f2:b5:0c:89:16:
62:0b:bb:6b:71:42:f3:a7:68:17:09:8e:95:7f:f8:
9d:80:d9:7b:e5:8e:42:5c:de:95:7e:36:0d:c5:2f:
82:2c:87:e2:81:9b:3a:06:b8:1e:d7:0f:a3:66:7b:
ef:89:79:66:f7:b1:0d:3d:e0:15:0f:82:00:1d:d5:
41:11:e7:93:2a:b1:08:01:99:70:ae:87:bd:e4:97:
b3:39:79:49:e2:0a:23:7f:89:f4:a7:25:41:a9:97:
16:42:b5:3c:f6:bb:9b:5a:05:f8:a7:47:2a:eb:71:
fc:0f:8d:ab:a8:1f:81:9a:48:cd:69:f2:e5:ae:26:
fd:21:94:ca:bc:1e:08:8e:b4:e9:c3:93:67:42:b4:
68:9d:85:53:96:89:29:32:35:9e:39:83:eb:04:90:
fd:d9:37:a5:1d:e4:9a:ef:71:4c:07:0c:08:c7:79:
c5:17:63:7a:29:24:c4:27:1b:83:63:e3:3a:f2:9f:
ae:3a:67:de:41:ea:6b:b3:44:58:02:dd:b2:fa:c5:
f4:91:f6:ed:90:1e:95:26:b3:f7:75:1b:33:78:ed:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0C:FE:06:C7:2A:4A:51:A9:A9:88:5C:CC:52:95:9F:F7:A5:A3:5C
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:57:39:b0:e3:f6:fa:17:26:eb:ae:96:90:d9:7c:02:45:dd:
f3:08:6c:fb:e8:f8:5e:a7:25:8b:a7:30:5e:66:0f:8a:23:be:
cb:5d:c4:ab:45:77:f8:da:77:ee:a2:8c:fa:71:9b:45:25:4b:
e8:2e:65:f8:bc:ff:90:53:62:5d:92:b6:48:6b:b5:0d:d0:14:
3c:41:79:04:98:ca:60:61:3c:47:40:3b:b1:6b:ef:33:f9:fb:
1c:04:24:83:44:ba:de:09:c9:90:65:38:5a:4b:c3:c0:1d:f5:
18:9f:7d:cb:cf:79:b2:4a:82:b3:07:9f:2a:5a:6f:1a:2b:6f:
ca:84:f3:f1:6f:0f:34:06:36:f4:f5:33:c2:cb:97:b0:04:e1:
a9:4c:03:df:b0:2f:c5:77:e0:50:8b:3e:f2:37:f1:ee:fd:cf:
e7:05:7c:a9:ea:26:2d:dd:8f:dd:54:69:68:d7:56:8c:c6:81:
9e:03:ce:6c:3f:2b:3c:d2:97:7f:08:9b:80:02:72:0e:02:15:
df:ab:76:d4:c6:60:91:de:5f:1c:8f:01:b3:8c:81:62:f1:7d:
1e:27:51:83:34:62:2f:b5:4f:ff:a6:97:34:8a:5d:07:20:27:
3f:d5:eb:17:e1:5f:f6:49:64:c6:d2:a8:74:41:b6:0d:9a:90:
d1:dc:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:18 2026 by rpki-client