Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: 6IKOuFIKPaaUup2engpajF1TmrRau1i6XZxNTz8wWSA=
Subject key identifier: 0C:55:EC:1E:88:80:04:9B:8B:D0:9A:0B:F5:AE:1D:37:15:E5:79:E7
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 019CAC7E04F0563AD61A0D6441DF305DD8A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 070F
Signing time: Mon 02 Mar 2026 03:01:05 +0000
Manifest this update: Mon 02 Mar 2026 03:01:05 +0000
Manifest next update: Tue 03 Mar 2026 03:01:05 +0000
Files and hashes: 1: QcGVhryX4x7bfWIgC0U3JlcZMH0.roa (hash: Bat9oEb0UFv1zJKscTa1DuwM+XuSb3SLfJDIXRZHQRs=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: A/xYS4wzZ2itGJK6idsreE+OGTj55R6LfLcF7qyuKs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:04:f0:56:3a:d6:1a:0d:64:41:df:30:5d:d8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Mar 2 03:01:05 2026 GMT
Not After : Mar 3 03:01:05 2026 GMT
Subject: CN=0c55ec1e8880049b8bd09a0bf5ae1d3715e579e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:4b:6d:1e:c5:c0:d1:fd:ed:2a:6b:c0:bf:
9d:3f:4a:a2:a1:ee:8f:50:0f:52:77:96:12:bf:f2:
1e:7c:7b:fc:a4:da:12:55:aa:01:31:b4:81:56:dd:
78:61:20:cb:fd:33:61:49:65:2c:26:c6:65:c0:e3:
cd:e0:e3:8e:70:64:4e:22:2f:e8:31:3e:8f:99:a6:
9b:2b:78:eb:d9:97:a6:ea:15:fb:c7:86:55:06:85:
53:5a:45:a7:38:17:aa:d0:f1:eb:f6:71:d0:a3:8e:
d1:cb:43:0f:d3:0c:b1:0e:72:79:e8:e8:e8:3f:e8:
a0:fb:2f:61:f9:98:b7:0f:c4:24:4e:83:23:ae:8c:
03:5d:9d:a1:84:92:36:56:e3:21:96:25:1c:e9:01:
0f:25:37:dd:dd:b4:e9:38:6f:26:a9:96:c2:d4:33:
6a:e7:41:3b:74:ab:0d:ac:f1:27:85:db:e8:be:93:
71:48:b2:39:ee:1a:8b:de:4a:b4:cb:d2:12:83:4f:
1a:36:4b:53:61:d5:9f:a6:0b:b0:77:79:04:6a:ad:
db:61:35:81:7b:43:72:78:59:bf:29:70:19:4b:53:
7e:ed:58:e3:c8:6b:f6:9a:5c:e2:56:99:ea:4a:57:
d2:42:89:ea:33:b6:a5:57:2b:eb:5f:d0:e8:40:f2:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:55:EC:1E:88:80:04:9B:8B:D0:9A:0B:F5:AE:1D:37:15:E5:79:E7
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:88:dd:60:2e:07:f7:2c:97:84:0f:67:1e:2a:46:3d:7a:05:
b1:88:c0:e1:3b:2b:e4:66:6e:36:35:4f:c9:7a:f6:4b:5d:d2:
f4:48:47:6a:72:b0:43:a3:b4:90:74:d2:97:29:c9:2b:09:fd:
b9:2c:77:7a:77:cb:75:af:06:88:b3:35:f0:a5:b7:7e:47:72:
8c:c4:bb:91:f4:5f:54:90:4c:0c:7d:83:5e:93:4e:b6:ad:b6:
f2:09:cd:9f:8c:ac:7e:8e:32:99:65:7f:43:96:21:4d:4c:c6:
a3:c9:41:ee:dd:bf:1e:66:4e:06:21:cf:e9:ed:d7:62:86:73:
14:7a:1a:8b:07:a1:fe:5a:b8:48:49:3e:d2:69:05:cd:85:83:
51:b7:01:16:a2:63:ad:d6:f9:7e:d4:30:13:25:07:bb:1c:e9:
41:5a:32:d7:7c:5c:7e:a7:e5:ed:97:d8:9e:a0:d0:24:d3:72:
a5:a6:75:f6:9a:a1:2e:66:af:6b:67:14:a2:d8:16:46:06:07:
e1:0d:8d:17:62:44:7a:c3:f4:40:23:87:4f:b6:77:70:21:b5:
8b:1f:af:03:8b:7f:e1:30:60:46:ec:d6:27:b9:bd:37:db:3b:
9e:39:ae:9a:c6:78:6c:b0:e9:92:18:b2:14:80:9a:8b:eb:b9:
b4:33:90:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:16 2026 by rpki-client