Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
File: gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json)
Hash identifier: +bfgXiIVOnuW1dtJvbk2aBiypXJfe7nKv3oHR6DgvcI=
Subject key identifier: CE:ED:EB:BC:0B:2A:BD:60:F2:51:42:FC:05:A3:36:1F:78:0D:E9:D7
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 019DA3E6D6AA50AE5CC2EB078A35A95EB66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
Manifest number: 0F70
Signing time: Sun 19 Apr 2026 04:01:47 +0000
Manifest this update: Sun 19 Apr 2026 04:01:47 +0000
Manifest next update: Mon 20 Apr 2026 04:01:47 +0000
Files and hashes: 1: I7mi3E0an_XwM501IzP6XoSy2Wk.roa (hash: 7K4bWpncg05jTDQa+KG4OIN9CRZtSPgz2UdmkAKtJwc=)
2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: qcIIyPhgDJZFDtiXvhfqPXsL46Djmj7KjCTFZuJVSnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:d6:aa:50:ae:5c:c2:eb:07:8a:35:a9:5e:b6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: Apr 19 04:01:47 2026 GMT
Not After : Apr 20 04:01:47 2026 GMT
Subject: CN=ceedebbc0b2abd60f25142fc05a3361f780de9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:ea:94:aa:cb:86:54:fd:05:70:0f:3c:58:
4b:48:54:6a:bf:ce:b3:19:03:33:c4:62:9b:9c:0b:
45:33:17:2a:05:b8:d5:4c:3f:1d:79:63:6d:c6:80:
bb:1e:d8:24:1f:21:58:64:d4:45:1c:d1:42:85:34:
52:75:80:04:6a:72:6e:f1:fe:51:df:3e:0f:09:76:
b0:db:7e:b1:d8:a3:0d:64:d4:c3:40:b2:91:fa:5c:
8f:da:0b:8b:0e:fb:e1:9c:41:3c:5f:41:cf:54:10:
53:bf:5a:b6:fb:e1:11:4f:67:56:ba:e4:d9:06:17:
f2:6b:cd:99:6f:12:a9:04:9a:70:93:79:17:ec:dc:
e5:e2:f8:2e:67:ad:45:ca:94:66:54:ed:0e:92:9b:
7a:0c:4a:3a:e5:ed:f9:ba:e9:d4:7d:ad:a7:32:36:
a2:41:63:a5:90:2d:82:5f:0b:af:80:ec:6a:54:1d:
05:6a:e2:8a:c7:6e:83:63:b5:c7:1c:b7:01:91:a5:
1b:c1:e1:f2:31:98:52:2b:e5:fb:27:5f:ab:53:37:
2b:a4:c0:5f:77:84:08:aa:33:de:bf:c1:cf:6d:d7:
85:e9:dc:21:c3:f2:ce:53:e1:dc:6b:b0:a6:bc:20:
ed:0c:f3:cd:80:18:c3:71:21:30:ef:82:a8:2f:e8:
4c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:ED:EB:BC:0B:2A:BD:60:F2:51:42:FC:05:A3:36:1F:78:0D:E9:D7
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:cb:e4:fa:9b:c4:c2:22:1e:22:7b:16:40:d5:6c:6a:df:e2:
07:07:3a:b2:d2:35:33:25:de:46:06:75:4b:78:d0:ab:34:28:
9c:a4:75:74:fa:54:60:97:a1:89:38:67:93:d5:a4:90:df:5e:
c4:66:52:f8:c5:3c:b4:92:e7:0f:a1:de:eb:44:9e:34:ae:ed:
fc:0f:b1:61:56:d3:61:58:e3:e1:40:e5:8b:67:0c:d1:2e:94:
64:c0:68:4e:1c:fb:09:aa:d0:c2:26:1f:06:c2:35:4e:96:09:
97:e1:35:3f:01:48:7c:84:f4:0a:d5:7e:6e:62:96:4b:12:04:
14:de:d8:a4:74:ea:1e:e0:8b:a0:03:1a:01:c2:2b:9c:a6:40:
b5:76:74:0c:45:8f:81:d4:33:f3:af:c3:1d:1b:94:43:80:23:
07:dd:e7:0e:19:2d:d9:c7:62:7e:7c:62:df:ab:75:ac:84:47:
40:57:a7:9e:10:66:61:46:11:ff:a0:2f:42:b8:6e:6e:24:83:
5c:b3:1d:ef:e4:5f:70:ac:f0:7a:3d:4f:b7:af:8f:c1:94:5f:
f3:15:33:5a:28:36:56:5e:c6:42:d4:82:4f:e2:b6:36:a4:6e:
47:af:bd:e2:be:e2:65:fe:27:96:5b:b2:00:93:d2:fc:26:4a:
c6:2d:64:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:57 2026 by rpki-client