Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
File: gViH9Fq7wIGqRpplwXmN5hENnIk.mft (raw, json)
Hash identifier: t+6v49/xY2AHXGOmp8KbIScmM228nCuEZphyhvIfgkw=
Subject key identifier: F6:EF:F5:F0:ED:7D:AD:65:BA:45:20:C6:63:1C:A8:DC:29:BE:52:52
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial: 019CABD9590BD559905DC937B4102D62EAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
Manifest number: 0F28
Signing time: Mon 02 Mar 2026 00:01:13 +0000
Manifest this update: Mon 02 Mar 2026 00:01:13 +0000
Manifest next update: Tue 03 Mar 2026 00:01:13 +0000
Files and hashes: 1: WC6EBIjiAER5lgIGGhXpUnsJaMY.roa (hash: fIsVrWQoNzwMR1jG4hms/me3nMp9f7WFOVArNQIs1TQ=)
2: gViH9Fq7wIGqRpplwXmN5hENnIk.crl (hash: wqMFvm7SDc6ANC8nHIbE6jfwRYkT++vwO38OUgzSBcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:59:0b:d5:59:90:5d:c9:37:b4:10:2d:62:ea:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
Validity
Not Before: Mar 2 00:01:13 2026 GMT
Not After : Mar 3 00:01:13 2026 GMT
Subject: CN=f6eff5f0ed7dad65ba4520c6631ca8dc29be5252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:84:31:5b:8a:58:1c:47:74:09:a2:94:48:
13:7e:95:db:76:b6:8a:6d:ce:48:e1:3b:7f:e2:79:
a8:0b:84:ac:d6:2e:cf:99:16:41:af:cb:89:ee:14:
92:e1:87:a5:c5:67:17:23:fe:bc:3e:2d:bf:80:1e:
a3:a9:2d:8e:e2:25:f1:f6:9f:b9:35:9a:a3:a8:88:
6e:45:7f:a2:80:80:7f:53:7f:ab:d3:e6:a1:d6:be:
93:e4:5d:71:77:7c:59:fa:88:7c:5f:f1:c2:3b:43:
15:e2:5a:03:a5:ec:5c:50:c5:00:9d:bf:18:2a:75:
f7:0f:f0:4b:a5:ad:5a:e4:31:f7:d0:f8:51:41:af:
a8:c4:07:55:3c:5f:09:eb:a8:b3:4d:1c:c4:9c:55:
96:b7:cb:d6:51:35:28:9f:92:df:47:66:8f:4b:46:
57:b9:5c:e2:6a:15:d7:e9:63:a1:33:97:fd:3c:0f:
1f:14:df:db:dd:61:d7:9f:c8:eb:71:08:39:dc:5a:
36:35:4a:11:77:ab:2b:9f:be:f1:c2:6b:44:ff:04:
8d:de:74:db:3e:17:d9:88:15:c5:c6:81:ea:bf:cf:
66:45:9d:e0:dc:2e:3c:b6:dd:7f:bf:a4:fd:8e:84:
e0:98:6b:44:18:20:78:9a:5f:4d:0f:b9:1f:3c:50:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EF:F5:F0:ED:7D:AD:65:BA:45:20:C6:63:1C:A8:DC:29:BE:52:52
X509v3 Authority Key Identifier:
keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:62:0a:e1:f0:ba:59:23:d2:fd:d4:eb:62:2a:f7:92:da:23:
c0:97:58:51:4c:d1:a5:95:82:ac:84:02:84:70:78:2d:08:b3:
15:9b:ce:14:46:37:ed:f6:3a:da:97:83:c7:b6:14:bb:26:6a:
12:1b:39:44:24:ee:7d:0f:53:d6:24:90:ae:70:13:d9:51:c5:
23:5d:b5:9f:44:74:69:61:7c:e0:ea:a8:91:dc:c0:14:cd:44:
b4:8a:d5:79:9a:26:0d:e3:4b:a5:90:89:da:4b:5e:a0:82:4b:
c5:71:93:1d:96:49:fc:21:35:db:c7:a9:06:13:33:42:5b:d8:
81:5d:5b:1a:5e:a9:24:81:b8:e7:b9:ce:ac:d4:ca:48:dd:36:
df:9d:81:bc:9b:d2:e9:c2:ca:c7:ea:27:db:26:49:52:ad:e1:
fa:31:96:9b:79:c4:33:88:a4:0f:7e:5e:d8:ff:42:76:0b:d3:
4c:bc:25:b3:ba:d5:34:f1:2a:c8:57:00:57:4e:2b:2c:06:d7:
bc:d3:30:ef:9b:f8:6f:3f:30:e7:e4:24:ef:1d:df:93:8e:dd:
4d:18:ff:d4:a1:87:35:b1:2b:50:56:fb:d4:39:45:92:4e:14:
78:b5:e0:fa:10:b5:b6:01:72:9d:fa:fb:ac:fb:9b:f8:98:96:
92:60:74:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:20 2026 by rpki-client