Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: shRIenW5MmeGdcENJiDnMfPdU7vT3vbrwvvwYMjFtCc=
Subject key identifier: 71:2F:AD:F7:7A:AC:3D:74:DE:98:C4:CD:0C:F3:03:47:B8:A9:6A:A7
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 019D9AABCC41083B357135E80DCA87B5F826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 1560
Signing time: Fri 17 Apr 2026 09:00:43 +0000
Manifest this update: Fri 17 Apr 2026 09:00:43 +0000
Manifest next update: Sat 18 Apr 2026 09:00:43 +0000
Files and hashes: 1: 1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa (hash: nATa+n5oWjMZXiwMho7tjE9Rx2x+4yb18TAu52HSqiY=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: 3ke6znoeGfxcMtUDhSyha7YFrJ2ZWiTxNkqH368VtvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:cc:41:08:3b:35:71:35:e8:0d:ca:87:b5:f8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Apr 17 09:00:43 2026 GMT
Not After : Apr 18 09:00:43 2026 GMT
Subject: CN=712fadf77aac3d74de98c4cd0cf30347b8a96aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:32:2a:41:34:93:f6:b7:3c:61:2e:11:3f:
16:d9:4b:97:64:10:f7:cf:e6:c8:98:99:5d:02:ca:
e2:f3:6c:91:fb:a6:8b:e4:e0:52:32:82:cf:3f:31:
48:94:7a:d2:fa:bb:54:93:3e:cb:a4:15:06:48:00:
17:4f:f5:a3:86:6b:71:41:f1:da:d1:2a:4e:a9:cb:
e7:73:91:65:a5:df:e3:2f:09:98:f8:bb:1e:6e:4e:
55:b9:54:14:11:8f:d1:8a:03:5b:68:1f:26:e4:9b:
9c:9a:42:13:66:70:9e:92:3d:45:0f:16:1f:8f:d9:
37:ba:e4:94:95:bd:86:ab:49:f7:87:74:b5:d7:cf:
de:64:b1:ad:70:91:73:f7:cf:f8:56:ee:ef:f6:6d:
d1:8b:30:bb:97:b7:ec:1b:0e:97:5f:a1:34:de:a3:
dc:49:67:bb:b8:f9:77:70:a9:aa:b4:cf:0f:1c:82:
0e:61:d4:43:ef:d4:ea:0d:cd:7c:dc:20:aa:1e:d7:
5b:ff:ba:52:c3:0c:8b:92:1d:93:2d:1b:ec:f8:5b:
65:72:d4:ec:b9:75:f9:22:99:64:0b:dc:c3:a6:f9:
de:c7:e0:29:be:5e:f7:cf:0b:c8:28:83:db:61:1a:
4a:55:c3:e2:a3:8f:67:a3:39:b6:64:2c:65:d2:b5:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2F:AD:F7:7A:AC:3D:74:DE:98:C4:CD:0C:F3:03:47:B8:A9:6A:A7
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:61:35:fd:e4:6a:03:01:3a:61:32:57:48:22:c1:30:3c:ad:
f8:71:30:17:2a:3c:84:df:b8:13:ad:42:1d:1a:97:d3:c6:c4:
36:03:a3:79:30:de:41:8c:d1:d5:a5:79:9c:31:a6:fc:41:aa:
03:ff:20:2a:a2:34:57:15:cc:3f:63:d2:95:40:4a:cd:0c:36:
3d:a5:3b:d3:56:17:6c:b3:b5:1c:ae:7a:c8:37:e4:cd:41:d5:
ce:30:73:28:26:b8:13:95:56:77:47:2b:d3:99:9b:5c:74:be:
2b:a9:ad:66:84:39:6d:d6:2b:07:07:dc:78:84:6e:50:10:bb:
d4:dc:07:cd:cf:bc:40:a0:3e:8f:c1:c8:18:af:88:b9:aa:4e:
f1:07:47:53:7d:eb:2b:e8:52:88:9d:93:5b:8e:ff:02:43:35:
87:11:ef:16:21:f7:93:6b:a5:d8:7c:ea:0d:ab:f7:7c:92:a2:
70:d1:b0:76:16:cf:09:6d:ca:0a:b7:16:97:6d:de:ac:da:1c:
16:eb:b4:54:ff:19:e7:90:70:70:9d:e8:b5:f8:e8:f9:bf:ee:
0e:85:f8:dc:8b:d0:95:cf:11:eb:e6:f6:40:31:a7:9c:03:d2:
02:b2:64:ea:be:25:aa:b4:98:0a:18:f8:28:9b:86:eb:d8:19:
e5:2c:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:11 2026 by rpki-client