Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier: nE90qzQ2+JtJb4aLAf1ziOMCfEZV2E4plIVtFGszBgM=
Subject key identifier: A1:A1:62:AE:17:09:21:24:D8:BA:7F:1D:D5:CC:97:70:12:34:6C:F8
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 019CAB34931D32D8640DC6A7D82DE740D76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 21:01:15 +0000
Manifest this update: Sun 01 Mar 2026 21:01:15 +0000
Manifest next update: Mon 02 Mar 2026 21:01:15 +0000
Files and hashes: 1: 8jxEfSsMBe-K4VvTnO-OwvOLMBM.roa (hash: 3hU9n5i+lk1nxy24FsPYr0quzMoUlf0Ht4DETZ7ST+s=)
2: TLlV6jW863bNfhyrt15RgS7DF4k.roa (hash: kGMIhvDQxFzFfEL8ihPcdM+a2HFqV1ObKxrxWA65PvA=)
3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: wM3xKUeAIDRjEIOZemtk8iFId1acPzV9zAJ8s0Q1Opg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:93:1d:32:d8:64:0d:c6:a7:d8:2d:e7:40:d7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Mar 1 21:01:15 2026 GMT
Not After : Mar 2 21:01:15 2026 GMT
Subject: CN=a1a162ae17092124d8ba7f1dd5cc977012346cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:53:4b:ac:b7:f9:6f:fc:1e:b4:22:90:21:
de:e5:04:13:c0:ab:3a:e2:c7:24:55:14:db:24:07:
1d:d8:67:98:d2:72:bc:52:1b:6a:1e:46:63:f3:70:
f3:07:c6:17:0c:fb:48:f1:2a:2f:23:bf:c2:65:6f:
67:2d:72:fd:63:6a:8b:78:ca:cf:93:4e:ea:2d:c8:
5b:dd:3e:8a:66:00:02:3f:5e:bb:ab:3c:02:7a:1c:
22:aa:0f:d7:12:59:a1:0d:8d:4f:a1:fb:22:1a:cd:
d2:cb:c2:09:72:10:e5:a9:65:0b:47:6b:60:c2:e6:
e9:35:ed:74:83:7d:14:22:ea:82:b4:0e:92:34:21:
80:5f:98:0b:70:ca:01:62:c2:f4:5e:b2:93:4e:48:
d5:fa:fe:71:53:2d:a2:e7:d4:48:05:be:2a:3c:99:
dc:ad:cb:af:82:1d:f2:47:fb:ec:db:cb:2a:ba:61:
96:b5:cd:49:88:a7:61:eb:00:30:91:42:a4:ad:e9:
a0:f1:92:a1:a8:7d:56:a2:65:a5:5a:5e:79:e4:39:
23:c3:c7:a6:44:85:10:7c:dc:bb:54:e9:0f:75:09:
eb:fa:9e:da:6c:d3:9e:a1:05:dd:dd:ad:bb:7a:4b:
02:27:75:19:2c:2f:86:2c:bf:6f:9e:2c:a7:6b:77:
d4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A1:62:AE:17:09:21:24:D8:BA:7F:1D:D5:CC:97:70:12:34:6C:F8
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:39:dc:cd:b6:a7:bc:af:a5:d6:e8:5d:31:7d:8e:5a:93:c8:
68:52:c7:25:67:ab:c0:e3:7e:1f:0b:47:0f:f6:10:32:ea:25:
8c:b6:35:85:84:ec:e5:ea:ff:86:4d:b2:ea:15:c9:19:83:62:
20:92:36:7b:e8:fb:f2:28:1a:28:2a:25:62:f0:03:2c:90:36:
c7:f8:34:e2:d9:17:0c:ea:4a:56:cb:3b:3d:65:b2:13:60:ba:
19:1f:07:55:f8:8d:dc:7c:14:90:a1:89:17:cb:28:4a:00:46:
cc:4d:97:01:55:78:e4:b2:38:cd:e7:63:e8:0b:fc:39:b5:41:
2e:88:f0:51:62:8e:9b:1a:6e:b1:bd:9b:e9:c9:c6:eb:96:c5:
28:8e:0e:1c:ca:46:7d:05:bc:69:12:83:f5:5b:87:e8:55:cc:
1f:93:fa:f8:59:02:64:40:e8:86:b8:51:b0:0c:bf:d5:19:4a:
29:5e:35:3f:5b:db:10:26:00:f3:4c:aa:4c:75:64:50:c3:d2:
6b:30:65:f7:e4:52:44:da:07:99:aa:28:2a:dd:ab:fe:fb:4c:
2d:ad:7b:0e:ad:63:10:80:bf:2d:e8:b6:00:9f:41:15:6a:6b:
7f:2c:b6:f2:52:47:fa:e8:25:17:03:b8:52:c1:46:68:60:c6:
19:79:dc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:00 2026 by rpki-client