Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: /g5joHjNcxuU2S4SugcpYnbkUr1iJ0s98wfCl8VMnko=
Subject key identifier: 46:1E:A1:38:83:38:83:DB:DB:44:D4:15:40:AF:07:44:73:8C:2F:D1
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 019CAB33EE4513BAA252ED9429F1E3DCDCA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 14E4
Signing time: Sun 01 Mar 2026 21:00:32 +0000
Manifest this update: Sun 01 Mar 2026 21:00:32 +0000
Manifest next update: Mon 02 Mar 2026 21:00:32 +0000
Files and hashes: 1: 1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa (hash: nATa+n5oWjMZXiwMho7tjE9Rx2x+4yb18TAu52HSqiY=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: 6J927Q2UetGFt9lmtGPL6YQas6ms1H2byFWm2PRmiyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:ee:45:13:ba:a2:52:ed:94:29:f1:e3:dc:dc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Mar 1 21:00:32 2026 GMT
Not After : Mar 2 21:00:32 2026 GMT
Subject: CN=461ea138833883dbdb44d41540af0744738c2fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:a3:99:7e:da:86:37:eb:f5:08:14:ef:00:
86:37:23:c2:5b:88:6f:a3:ab:ed:d5:26:f4:d4:8c:
17:f2:f1:6e:94:81:b8:9d:52:17:32:62:59:f8:5b:
8b:c5:3a:68:97:47:8d:25:a4:c7:0d:5e:62:40:7b:
a6:6e:39:91:e5:ab:49:38:ef:f1:ed:32:90:2c:f4:
b5:c0:f6:56:9c:31:52:ec:0f:61:fe:50:43:11:1c:
cb:e2:51:36:3c:4c:58:4e:10:6f:fd:2b:08:d0:0e:
18:a5:ca:14:b8:f1:4f:12:57:6b:47:41:c2:36:0b:
fb:25:70:50:b1:91:d7:17:62:51:d4:47:c4:91:d3:
1c:8c:82:2e:57:af:65:fa:f3:3f:8a:f4:72:ec:2c:
f0:17:f8:42:d7:ee:a1:66:ee:e8:57:ad:ec:27:40:
42:5f:cd:53:74:02:a9:ab:7b:5a:ca:13:77:5b:d0:
e3:12:0d:60:e6:d5:09:1d:b8:3b:fe:00:dd:d5:2c:
e8:86:c5:ea:e3:c8:1a:77:40:a7:9a:95:a2:2d:56:
06:1e:fe:a0:42:f1:13:ed:42:99:1e:e9:4f:0c:f6:
e9:99:d2:52:a2:6a:48:6e:34:55:b2:96:98:d5:0b:
f7:e4:83:e2:04:fe:6b:a2:66:c6:13:de:01:d0:3a:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1E:A1:38:83:38:83:DB:DB:44:D4:15:40:AF:07:44:73:8C:2F:D1
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:eb:e0:fb:59:ad:e9:c1:9e:62:12:0a:b2:2d:ab:19:a2:bd:
41:ce:31:b0:db:08:3d:d4:3e:9c:36:19:67:d6:d3:23:71:e4:
27:c1:98:5d:f5:f5:89:ad:b1:19:64:28:39:12:7c:a7:5c:50:
3e:fe:f0:10:8e:36:3f:b4:70:5b:2b:84:8e:0a:05:db:15:9c:
77:bd:a8:4e:53:2e:13:76:6f:b4:c8:43:58:5a:22:64:eb:ca:
8b:40:c8:d6:62:e1:dd:71:15:84:e1:6c:63:c1:23:f1:90:c9:
44:51:d5:88:ab:8b:0e:09:cd:3b:13:d3:ce:df:a1:f2:4a:97:
74:ae:0e:6d:b8:4f:09:f3:8a:90:6e:25:51:d4:8f:51:61:5a:
9e:ac:a6:a9:87:9b:fa:bb:d4:dc:b8:d7:2e:f8:5b:64:ae:da:
d6:ed:e8:c8:3c:25:44:f6:ee:23:5c:31:35:7c:16:0e:03:44:
93:e4:c9:67:58:be:bc:4b:98:27:05:2d:a5:1d:f9:cf:5e:6d:
f0:b9:46:8c:7d:e0:b4:72:5b:17:86:a6:a3:87:f0:9b:b2:52:
16:6a:de:4a:0b:cf:95:d2:c0:78:3c:fc:02:ad:b7:6e:0a:7b:
7f:2b:a6:f0:54:9a:9b:ec:69:68:23:0d:56:f7:82:a2:6a:72:
5f:a8:3e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:46 2026 by rpki-client