Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
File: gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json)
Hash identifier: tqqnNMQaIWEChQlgO7Wt2nUlb8mwW/KR30cc95eBWq4=
Subject key identifier: A7:38:D6:71:A0:89:6E:53:4E:6E:A4:56:63:0A:A2:68:33:09:2D:FE
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 019CAAC61BA8ACAC22089CD50E1A5D9BFAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
Manifest number: 0EEF
Signing time: Sun 01 Mar 2026 19:00:35 +0000
Manifest this update: Sun 01 Mar 2026 19:00:35 +0000
Manifest next update: Mon 02 Mar 2026 19:00:35 +0000
Files and hashes: 1: I7mi3E0an_XwM501IzP6XoSy2Wk.roa (hash: 7K4bWpncg05jTDQa+KG4OIN9CRZtSPgz2UdmkAKtJwc=)
2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: SEcAAiXOA68sJB4DetQ5xPFCMN3luf/0mjzs1Z8wzgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1b:a8:ac:ac:22:08:9c:d5:0e:1a:5d:9b:fa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: Mar 1 19:00:35 2026 GMT
Not After : Mar 2 19:00:35 2026 GMT
Subject: CN=a738d671a0896e534e6ea456630aa26833092dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:3d:4c:bb:cd:0e:a5:82:e2:26:43:ef:28:
41:e4:56:71:8f:75:66:b0:34:d0:31:2b:23:ab:5a:
04:fd:ef:37:4c:61:8c:b0:ec:cb:03:eb:95:04:cb:
5b:8c:9b:dc:64:05:cb:0e:b0:f6:c1:88:0a:6e:04:
92:f4:7c:5d:e2:29:c0:97:84:ed:5d:ab:9e:a0:0b:
8a:e9:06:98:af:de:f3:7b:bf:9c:c6:b2:a8:6b:d5:
54:61:98:b1:8f:3e:98:8e:88:1f:f2:cc:85:bd:3b:
9b:91:33:63:66:07:62:17:ef:df:89:59:46:10:7e:
c5:16:c3:72:9f:5c:51:de:c9:6a:a7:6b:b6:4a:fd:
b9:ae:6a:f9:63:21:01:3d:83:01:1b:32:8e:2a:92:
9c:ca:88:97:f0:a6:77:4a:03:ef:31:8e:d6:49:14:
79:50:15:2c:3a:30:3f:33:1c:d7:10:bc:64:4e:4c:
9f:47:d5:61:26:9d:b3:cf:4c:a7:4e:5f:8f:c1:4c:
3f:aa:54:39:0d:f7:2b:fc:f3:a5:c9:1b:02:95:4d:
54:9c:8f:50:12:a0:52:ac:1d:71:26:45:18:0d:dd:
cb:d9:70:2e:10:38:84:26:4e:51:8a:3a:e4:95:90:
af:a1:15:ec:1b:67:6b:72:98:44:ce:09:5a:ab:32:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:38:D6:71:A0:89:6E:53:4E:6E:A4:56:63:0A:A2:68:33:09:2D:FE
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f6:bf:9d:98:f7:1a:13:a2:93:fa:25:8b:27:9e:94:b2:15:
25:ff:04:a7:02:95:70:30:a2:58:e6:6a:62:e4:b6:2d:92:e8:
7d:72:ab:9f:ce:4f:14:86:13:31:bb:1a:e1:c4:e9:fd:6b:97:
ff:95:17:d0:a4:3d:51:f4:d3:46:19:7c:e4:ab:d5:f7:4c:20:
01:d5:f5:bf:c7:cc:63:b5:cc:7b:b5:d0:7a:52:6d:e0:96:4e:
78:9f:2f:07:34:54:58:a3:e5:dc:70:bb:f1:cd:67:f0:f9:58:
09:a8:6e:62:82:9b:1a:6a:55:32:5d:78:40:e6:b1:e7:24:a8:
80:57:a0:9e:e6:e7:4a:4f:7a:7e:96:79:05:b4:a4:5a:72:d4:
be:14:e7:aa:51:b0:65:c5:b6:77:41:a5:f0:d0:45:47:f1:a9:
9c:ab:68:b0:ed:9a:3f:6c:1e:10:40:fb:37:64:a9:55:9f:24:
22:23:a5:7e:4f:b9:0f:4e:f2:7d:7f:f2:53:df:f5:07:61:64:
f3:c8:5f:c7:fa:61:14:4f:ef:24:27:19:33:a0:df:2a:33:99:
e9:16:9d:33:80:2d:76:29:53:21:87:45:2d:91:1a:35:a6:eb:
27:89:61:63:b6:3b:53:14:12:31:09:86:b7:af:c5:15:41:d2:
4d:71:9e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:15 2026 by rpki-client