Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: hY0dd28PkXj0EaO+syX9xqiQQm9TlJllWRWPeSZuXL4=
Subject key identifier: 92:5A:C3:56:F6:30:B0:F4:9E:04:7E:62:F1:B7:39:A8:13:D0:56:AE
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 019CA7C52FE24131C2AE904332FA009E1DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 05:00:43 +0000
Manifest this update: Sun 01 Mar 2026 05:00:43 +0000
Manifest next update: Mon 02 Mar 2026 05:00:43 +0000
Files and hashes: 1: 4ShXPhWP4Qk_JTUR7nsENpLjDoc.asa (hash: HXRCdfUgdsuwOo68NwP3+PURL7JrnmOHum1V4B+oxJQ=)
2: G0YZaRvOpGakuanm7RUcv6bj3MM.roa (hash: 7CABJvLN6kQ3DAKmcEt6bVwV3ypsakkVsbnD4Bax900=)
3: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: KyKlRnkhHcC1gq9co9PsDlJc8WdvCOLWKGHUGly4N50=)
4: p6q8es-Iqyn2i48xEoUKjUI4d2M.roa (hash: m5/VmABNTamwPueU2592p62mT3TfbEBJmNKOlgAWGE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:c5:2f:e2:41:31:c2:ae:90:43:32:fa:00:9e:1d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Mar 1 05:00:43 2026 GMT
Not After : Mar 2 05:00:43 2026 GMT
Subject: CN=925ac356f630b0f49e047e62f1b739a813d056ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:7a:d3:6b:3d:9d:6f:15:62:79:21:26:1b:
ff:d8:f8:be:b0:7f:14:5c:26:b3:02:2d:32:15:90:
08:ab:b8:20:1b:4e:b0:e3:e5:0f:99:9a:49:57:97:
69:f5:f8:3c:53:2c:6c:af:5a:a6:b9:e1:0f:90:71:
de:05:51:69:3e:48:00:ee:bb:eb:78:ec:76:d4:56:
fc:b5:56:4a:08:93:3d:97:23:9c:f3:57:84:8e:18:
90:a7:d3:d2:cc:39:47:a1:51:37:9e:82:27:02:12:
f1:2b:f8:c6:9f:21:a9:ce:a4:55:86:af:da:f9:09:
1d:09:54:a0:c6:f4:1b:7b:14:57:45:47:ad:df:5a:
56:16:92:a4:42:53:9c:54:23:8e:42:f0:f8:1c:23:
6d:fa:b8:15:95:84:89:36:13:93:20:5b:bf:06:58:
2c:3c:87:2c:e2:f4:f7:58:bc:2e:97:9e:33:42:62:
bb:de:30:71:e7:c8:7c:e3:ff:ca:f7:f4:4c:a8:bb:
0e:92:60:de:c1:de:54:1c:5b:fd:bd:70:38:dc:ed:
de:a9:7b:fa:e9:11:b5:5d:41:ab:74:bc:c2:83:6e:
41:18:5e:a6:58:1f:47:1b:a4:51:14:4c:8e:14:5e:
c8:c8:fa:79:13:9c:3e:37:13:80:70:a0:54:6c:e1:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5A:C3:56:F6:30:B0:F4:9E:04:7E:62:F1:B7:39:A8:13:D0:56:AE
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d8:04:64:0a:1b:bd:c6:ef:e2:75:44:81:fc:64:7f:49:ba:
5f:c5:fd:f4:83:09:ab:a0:26:b0:fe:ed:42:83:c2:01:72:0c:
7a:dd:1c:85:0c:b5:b7:cc:aa:a7:8a:d4:04:6a:84:47:49:28:
d1:8c:ae:8f:7f:3a:27:69:02:a2:e4:3f:00:c7:3c:1e:b6:05:
2d:a8:8c:68:76:ec:0c:38:83:0f:5a:a9:08:e3:4c:46:18:52:
e7:15:d5:97:9e:b9:1d:c9:3c:9e:3e:aa:c4:b5:89:95:2a:16:
6e:b7:27:37:6d:cd:81:a2:72:7c:47:95:d6:a3:9d:e4:16:19:
e4:a8:67:6d:58:bd:5d:c1:f0:96:cf:76:5e:a4:d6:13:5e:d7:
d6:fb:8b:54:99:fe:35:41:a5:38:af:44:0e:37:7f:20:69:fb:
84:a9:09:4b:f9:e3:d1:09:3c:d7:96:0b:cb:f3:f6:ac:d0:a3:
99:de:4e:5d:c2:c5:aa:11:a3:54:fa:15:be:86:51:14:06:57:
a7:5f:68:f8:2b:ce:c0:78:d9:c9:ec:09:ac:a7:9b:86:41:58:
a3:ab:85:8c:c6:b1:ad:7e:b0:05:5e:cf:64:67:9b:6b:e0:de:
fb:ee:6f:76:e0:fb:ef:bd:4d:65:fe:be:8b:52:b8:af:da:9f:
97:c3:64:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:11 2026 by rpki-client