Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File: gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier: yYW/W1bnxmLJXsNuhKjX2gh6Eek+Yg/ysgXjnbJgAw4=
Subject key identifier: 33:5E:10:D4:D8:EF:5A:0F:89:C7:B6:A9:34:09:5A:87:24:03:5F:59
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer: /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial: 019CAC0FD715B52DB4E0ADA19F431626196E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number: 0BF7
Signing time: Mon 02 Mar 2026 01:00:45 +0000
Manifest this update: Mon 02 Mar 2026 01:00:45 +0000
Manifest next update: Tue 03 Mar 2026 01:00:45 +0000
Files and hashes: 1: 5qQ7K2Sw3wA3dSNaHobcrxLnZf8.roa (hash: 3XSxcIAkBoWThD9Raz/rE6P+YouBEagvQQFhIuaHny4=)
2: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: ZwDVBUtZDL5HuxOlUqCCmeLMQlmy76YZjQvfYkgkyN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d7:15:b5:2d:b4:e0:ad:a1:9f:43:16:26:19:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
Validity
Not Before: Mar 2 01:00:45 2026 GMT
Not After : Mar 3 01:00:45 2026 GMT
Subject: CN=335e10d4d8ef5a0f89c7b6a934095a8724035f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:6b:cb:6c:87:bf:ab:5d:95:93:ab:b7:91:
3a:11:09:d8:7f:87:1e:85:19:3b:93:f5:ca:65:20:
ec:d5:55:f3:2f:d4:13:1c:e5:63:5b:30:d9:5f:6b:
3c:bd:c0:e9:c4:9f:c7:53:4b:72:07:63:d3:59:08:
f2:be:bd:7f:cb:19:7b:09:e4:21:5a:36:57:6b:0a:
82:b6:8f:5c:89:44:31:f2:ba:9b:bd:8c:7c:ad:a5:
81:5f:ad:f3:35:09:71:5b:e4:a0:41:92:9c:ef:13:
84:d0:2a:c7:82:4d:58:8e:f0:47:dd:95:09:10:bc:
a8:7b:b3:2a:d0:44:39:da:72:6c:bd:ed:c6:08:5b:
26:04:a8:95:65:33:c9:20:cb:e8:bd:46:b5:0b:fd:
5f:33:86:17:65:50:de:c0:a9:3a:ba:b9:34:76:e8:
96:ab:7a:59:5b:6e:e2:e1:98:2d:c8:77:42:d0:de:
e0:e8:e4:2e:2f:8f:b6:81:b1:3f:d8:a4:64:69:a5:
d5:d3:01:07:66:a6:b2:71:a6:72:14:54:9b:53:7f:
e6:77:e3:e3:28:37:6d:40:75:83:fe:59:90:87:95:
56:5a:af:77:1a:25:3e:c1:1a:ac:18:8f:e9:93:ba:
63:bb:66:a1:69:76:c5:ba:15:49:54:85:95:43:7d:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5E:10:D4:D8:EF:5A:0F:89:C7:B6:A9:34:09:5A:87:24:03:5F:59
X509v3 Authority Key Identifier:
keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a3:a1:40:03:2c:9f:ec:ae:d5:fb:d1:0c:7b:7c:c6:ef:dd:
cf:ca:13:51:ba:b9:e7:e1:3c:a8:36:b2:cd:de:90:ec:bd:9b:
84:14:22:6f:d3:3e:c6:9d:0d:d1:95:e7:b8:04:6f:10:55:06:
74:be:ae:60:8b:1d:5b:c1:d0:fb:1d:c6:04:7c:82:16:6f:5b:
c4:7d:da:92:c9:20:f3:2c:ee:b9:c6:a9:fe:35:c3:76:f5:a2:
ba:08:8f:8d:c6:35:dd:4d:67:b1:1a:a8:8f:36:9c:f5:c4:2a:
3e:8c:cc:85:42:9f:dd:01:9d:a9:eb:de:26:9f:af:17:ce:f6:
9d:28:4a:23:6b:f9:62:a8:a2:7f:c2:61:5d:ab:93:5e:70:d5:
0f:93:4b:55:89:d6:af:c9:13:eb:28:a8:bf:75:3e:58:f6:28:
3b:15:f7:9f:8d:84:70:28:38:ea:0f:c6:fe:d1:53:b7:16:52:
d4:22:d5:21:3b:7f:3f:8e:81:e7:11:b8:89:a2:b2:9e:56:67:
8a:11:e3:73:12:f7:a1:19:33:f2:db:95:d4:ec:37:cc:2f:76:
56:01:fa:b4:17:54:09:42:3a:19:16:ae:ba:8d:d2:46:7b:d1:
48:68:43:1a:dd:2b:43:91:05:a6:fc:da:b9:b3:7f:a1:f8:4a:
f3:6d:d6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:19 2026 by rpki-client