Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier: TK9T3DG7BYOnZ0hUbXB5Y/Kr0kz8HfCyjiYu8+YvU+M=
Subject key identifier: 85:F5:BD:2B:7B:70:C0:56:A5:3D:5A:32:30:0B:24:86:4B:4E:94:55
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 019D9A0738DBC78B02EFB721B960A8A0F05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number: 0A1F
Signing time: Fri 17 Apr 2026 06:00:57 +0000
Manifest this update: Fri 17 Apr 2026 06:00:57 +0000
Manifest next update: Sat 18 Apr 2026 06:00:57 +0000
Files and hashes: 1: 0sYvu1PO-IyHrG5N2OwGBlK2IA0.roa (hash: NMF2/P9bXnT/asgGcGIGlNxwJHSua/9I79hyE0CwqWk=)
2: HGlsVrHEnVUZTxnltUDYgtbddII.roa (hash: PRTqegkFaXBSmjlIahMPcYyZ0ftS890tO/2pjXR1d6s=)
3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: CdmpYF+FQtiwDvDL+TxTnzAtgaHBV08W+0ltBriNe54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:38:db:c7:8b:02:ef:b7:21:b9:60:a8:a0:f0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Apr 17 06:00:57 2026 GMT
Not After : Apr 18 06:00:57 2026 GMT
Subject: CN=85f5bd2b7b70c056a53d5a32300b24864b4e9455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a4:83:12:96:ac:9b:f6:cc:b2:8e:23:f2:96:
21:4d:4c:d1:a2:5a:e6:28:0b:96:48:8d:bd:54:06:
80:7a:81:ec:be:8e:16:f6:a7:93:08:93:88:49:35:
9b:19:ba:69:cb:49:7a:0f:c2:1b:a1:28:39:d4:bc:
68:1b:42:8f:91:6b:4a:54:2d:15:c9:0d:e4:45:8d:
3f:f6:2a:3d:a0:4e:65:70:07:60:b3:ab:33:b4:0c:
f6:48:1d:31:3d:59:24:cb:e7:74:7f:09:aa:fe:03:
d8:0b:0b:bd:37:14:8e:74:8e:40:05:02:ec:e1:a9:
02:19:6f:ab:87:39:1a:eb:23:9f:55:cd:bf:b5:e7:
5e:a9:69:95:33:d1:d3:84:86:f9:1c:51:68:31:eb:
08:de:a5:74:9e:92:cf:bb:f8:96:99:92:05:0e:5d:
ff:e9:7f:81:a9:80:c4:05:8c:83:7d:02:77:a3:7e:
27:f8:43:2b:f1:ae:dd:7a:2e:c8:1a:7a:27:ac:39:
6e:ab:99:c1:ef:ab:d0:1d:b1:1f:ca:14:e7:a1:ae:
fe:c6:95:b8:8d:21:4f:ea:9d:ae:6e:bf:42:17:38:
5a:dd:68:ad:eb:9a:85:47:47:46:f5:bb:ba:b1:0f:
2b:7a:46:e6:37:dd:68:f5:e1:7f:81:f8:44:1a:9f:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F5:BD:2B:7B:70:C0:56:A5:3D:5A:32:30:0B:24:86:4B:4E:94:55
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ec:dc:02:bc:4a:7e:09:46:ea:fc:8b:bb:55:1a:da:c0:f3:
9f:0b:96:06:4f:b3:92:f6:ce:c2:c5:98:80:f9:38:09:7f:e7:
bd:3e:fb:4b:80:26:0e:d4:71:34:b1:e4:13:3b:57:d3:01:4b:
56:68:e2:a3:f9:e9:57:c0:7e:93:2d:87:0f:89:1d:e2:1e:87:
ad:ac:69:54:dd:ee:35:3c:e2:3d:3d:85:5f:e4:3a:99:5c:fc:
39:14:73:24:d5:be:6f:fb:e7:39:41:02:dc:60:56:81:51:bb:
5a:47:a3:81:a5:b4:a3:23:be:53:d9:2b:b6:e3:2d:9d:f7:28:
7a:69:ce:b0:96:0a:ee:f2:d3:b6:ef:8b:8d:57:56:bd:81:f8:
a1:06:77:a6:11:cc:6d:03:06:8d:de:18:08:a2:18:29:b0:0a:
c2:67:49:7b:e2:03:76:74:c0:07:e3:82:71:29:39:96:79:63:
90:7d:a7:9c:ca:8e:80:fd:de:bb:72:10:10:de:cf:10:b0:9d:
d6:3f:9e:e9:37:fc:fa:df:32:5b:6c:19:97:31:37:01:71:bc:
e2:58:a2:d4:19:a3:bb:93:d8:59:4a:af:a6:e2:2a:cc:ed:9d:
af:01:65:0f:2f:a4:63:80:8b:e3:7f:ef:8a:2b:db:5a:53:de:
e5:db:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:47 2026 by rpki-client