Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
File: gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft (raw, json)
Hash identifier: GRwZXTMVYuWPhEkFYUwf4t1VZAbxzXsMMO//hQoNLuQ=
Subject key identifier: 83:26:65:33:9D:0B:5D:93:83:E0:7B:86:32:1C:EF:2B:CA:F2:B0:B9
Authority key identifier: 80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
Certificate issuer: /CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Certificate serial: 019D9AABBF17DCAADCB7453F22F2F0BBD2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
Manifest number: 0FD3
Signing time: Fri 17 Apr 2026 09:00:39 +0000
Manifest this update: Fri 17 Apr 2026 09:00:39 +0000
Manifest next update: Sat 18 Apr 2026 09:00:39 +0000
Files and hashes: 1: BP2iTGyVFjoJIRdw7NDIH2tQQA8.roa (hash: P0fFfmYNK2It6Tl9zJcGnv6bBKn+rvutapJMqLPRBXA=)
2: gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl (hash: 7ZXsDShY/rO4finAV3UvvIA0XmIGR6JJr0Vc2wUDtGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:bf:17:dc:aa:dc:b7:45:3f:22:f2:f0:bb:d2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Validity
Not Before: Apr 17 09:00:39 2026 GMT
Not After : Apr 18 09:00:39 2026 GMT
Subject: CN=832665339d0b5d9383e07b86321cef2bcaf2b0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f8:21:14:ed:17:8f:af:5f:b6:48:88:e6:f8:
b4:84:11:25:9f:4c:58:c3:40:18:b2:7a:c3:a9:88:
7e:47:15:8e:79:64:d9:4f:b1:80:22:9f:dc:52:e7:
24:5c:66:e2:87:ed:50:6d:98:01:2f:32:aa:ef:6d:
23:c5:a5:5d:e2:fe:f5:fe:07:93:b2:74:38:9a:c5:
71:58:ea:8f:34:7e:d3:8b:bb:fd:eb:54:cc:17:a9:
78:6b:28:d7:79:5a:a7:bb:98:98:6c:51:06:29:dd:
fa:21:48:f3:e7:a5:a4:02:43:a7:d5:e6:c6:77:f6:
e7:83:ef:71:79:1b:b7:ac:17:c8:68:3e:60:db:93:
6b:26:97:14:6c:17:cc:3d:bc:32:04:8e:4c:bf:83:
53:80:41:ce:81:d0:29:02:99:aa:e2:94:62:15:99:
b5:20:76:fd:03:95:f3:07:16:b8:9a:f0:af:38:8d:
a5:0f:03:3e:34:cd:1a:c1:44:a6:ed:c8:a6:eb:e0:
46:fa:2c:73:4c:68:5e:d3:0b:0a:39:5f:22:27:81:
26:28:d3:f4:d9:c8:45:f6:76:2b:17:61:7d:1d:14:
32:b4:c2:15:d2:38:60:d8:72:d3:02:92:0e:3d:ec:
37:ae:28:24:21:eb:ba:a2:77:62:b0:4c:03:69:bd:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:26:65:33:9D:0B:5D:93:83:E0:7B:86:32:1C:EF:2B:CA:F2:B0:B9
X509v3 Authority Key Identifier:
keyid:80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:dc:2f:93:c2:8b:21:fe:0a:a7:3e:eb:34:66:ad:59:7b:65:
4e:c7:ca:04:72:23:cc:78:fa:a7:d3:94:9a:02:9f:aa:1d:ff:
87:55:9b:3f:76:7b:e6:e3:d8:77:76:dc:74:54:df:1b:51:6f:
40:1e:c6:b6:be:a2:ed:04:81:bb:11:82:ee:a5:5f:67:31:46:
9a:a6:ba:6f:ee:3e:6a:7d:03:71:0e:0c:c7:22:1a:9b:49:55:
1b:d9:e0:54:9b:53:20:98:7e:d3:e2:7c:24:fc:2d:dd:3c:62:
51:c7:47:29:ee:36:b5:91:ea:f9:9a:a4:87:8d:68:f5:60:78:
d6:41:b0:3f:04:56:01:7e:58:52:40:34:61:33:e6:a3:ca:c1:
a0:fe:5c:ef:87:82:33:8f:55:09:80:c5:48:d2:eb:f6:33:2e:
9b:10:89:48:53:16:af:1d:0e:22:de:5b:53:54:d3:a0:38:0c:
5e:3b:01:b4:93:fc:38:ec:93:d1:e4:23:da:1c:2f:49:ca:c6:
1e:42:64:d6:47:4c:a4:8d:7c:7d:de:df:d6:53:2a:54:2f:7b:
41:7e:74:bb:20:1b:43:17:a1:fc:e2:92:f7:b5:9a:fd:f6:50:
a7:d6:4a:1b:62:d6:f9:6b:dc:e9:a4:56:42:fe:46:84:87:19:
d9:c7:5c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:17 2026 by rpki-client