Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: MYmwx46M9OxyKzi3mMTtAm5yeY5VpsT2VnpnCxKTm0g=
Subject key identifier: 97:A7:B7:2A:3A:68:18:04:2A:E9:25:71:DC:16:05:F4:86:DE:32:3F
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 019CACB46EA183955386370EF9417CBF330F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 0FF8
Signing time: Mon 02 Mar 2026 04:00:31 +0000
Manifest this update: Mon 02 Mar 2026 04:00:31 +0000
Manifest next update: Tue 03 Mar 2026 04:00:31 +0000
Files and hashes: 1: 9PZjCn76gwRRUpq9MvbclVXkdOU.roa (hash: CaqNlJNQ1Ni2aWKqDPfoQcAYDuSQhepNqZ+uo297E2U=)
2: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: q/j0jFIfuJgluaBONIckRlBgpbwWB8OYwHuLBN/rc58=)
3: ur76ehndzl2-pGTHmrbh1qcAWBI.roa (hash: Sb+oNrAUwZsJERFHDlGdgS7sblzKLRz12cNiy1csEgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:6e:a1:83:95:53:86:37:0e:f9:41:7c:bf:33:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Mar 2 04:00:31 2026 GMT
Not After : Mar 3 04:00:31 2026 GMT
Subject: CN=97a7b72a3a6818042ae92571dc1605f486de323f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:28:72:ae:5d:3b:67:91:83:b6:90:6c:b2:
53:f6:b1:18:2c:ee:f4:8c:0a:67:90:d8:e0:7b:79:
b8:a1:87:8c:bf:ad:ed:7b:30:45:10:fc:c8:31:03:
9f:e9:9f:49:8a:46:80:51:e7:f0:4d:14:e8:5f:62:
7a:cb:bc:99:5f:e4:55:a2:e6:5b:51:80:02:8b:26:
55:e5:6f:21:f9:ff:1b:47:ef:e5:d3:65:c4:bb:f1:
1e:54:71:e6:62:f6:c4:e3:84:34:cc:70:f8:a0:9f:
21:63:db:65:9c:ed:ef:94:a1:b1:63:f6:ae:07:b2:
55:60:0d:f6:19:2c:78:39:77:f4:ca:3a:66:b7:cc:
ca:aa:14:d1:4b:b8:20:ea:38:92:a7:d2:a8:06:c8:
2f:a0:7a:d7:5e:c6:3f:db:cb:f5:2e:e9:fc:51:ea:
39:db:a0:15:df:b1:b8:5d:bb:3b:b9:17:59:56:06:
eb:7d:77:84:85:0e:b1:1d:e5:6d:ae:60:fd:c6:ce:
a4:10:c2:3f:e2:71:fd:56:56:7e:97:08:a2:fc:8e:
66:94:d5:70:8f:fb:6c:eb:08:06:42:64:d4:0d:5f:
e1:94:15:76:27:0f:de:92:40:08:94:ff:8f:32:37:
dd:72:a5:24:f0:f9:49:1b:ab:b7:1d:e2:b8:9f:01:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A7:B7:2A:3A:68:18:04:2A:E9:25:71:DC:16:05:F4:86:DE:32:3F
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a6:07:ba:5b:fc:31:49:52:cc:b2:44:bd:31:b1:88:49:2c:
6e:5c:20:aa:31:5f:bd:22:3f:37:e7:c2:a8:b0:e4:44:51:10:
58:55:40:6f:e0:57:6e:4f:fb:64:df:11:96:7d:fc:00:b9:bd:
64:d7:7f:65:65:44:ea:2f:72:77:33:66:b7:f3:ee:a7:5f:56:
ef:4b:43:64:de:41:02:0f:10:a7:3c:ea:b6:0d:d6:51:58:6e:
47:05:e3:db:9b:cf:93:e4:fe:13:b2:5a:45:85:da:d3:f7:bc:
c4:d5:75:11:10:20:74:1d:e1:4c:8b:ee:13:6f:6c:b1:35:5f:
2b:df:16:3a:fd:2d:6f:43:ed:cd:7e:4c:a6:3a:21:3a:84:06:
c0:6c:fc:07:54:70:2c:ad:9a:f9:66:5a:6a:4b:74:14:8b:a5:
99:0a:94:69:19:97:f1:7d:16:6d:6b:ca:2b:ed:48:2f:b2:b9:
51:9d:d3:8d:2f:63:c6:67:da:95:91:b6:26:e2:c0:de:64:8a:
ec:af:c5:d0:c2:8d:fa:01:26:3a:ec:87:fc:63:93:3e:c3:29:
f9:51:ba:ad:a7:f8:0e:d2:4a:c5:37:11:0d:c5:09:d7:0c:ad:
7e:db:e2:07:2f:58:bd:f6:14:e1:89:19:4c:df:ea:91:fa:f6:
09:0c:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:34 2026 by rpki-client