Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: Zlj0E4SQDnSdVigQLWd0n+evAiTmDgiGmugZeVqCe2A=
Subject key identifier: 49:33:62:10:C2:1B:84:F3:42:38:31:5B:FC:63:2F:F4:4C:BB:13:3B
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 019CAAFD2655702C511BEF5577A735AB721B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 1506
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: CiIrcBM9yA3ZewdtgV4N1CH8GZY.roa (hash: /RFq6SqUsBxBmefl/oJJgPlTdelQAi+UQdtXbYFfKHs=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: VUwRaNbFNdDz0YRQx0chlmbgaL1wY/+kdLUoD9p9pd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:26:55:70:2c:51:1b:ef:55:77:a7:35:ab:72:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=49336210c21b84f34238315bfc632ff44cbb133b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:12:b3:a7:d8:79:cc:01:b8:8e:ae:84:3f:f0:
56:8a:02:e8:c1:00:51:f6:33:04:95:d0:de:20:ef:
90:92:27:99:b0:bf:91:ce:9c:86:b9:8f:40:91:ac:
16:02:b1:4d:62:6a:a9:29:76:67:1a:f3:e9:95:9d:
8b:42:b1:4c:f6:5f:aa:b7:39:c7:7a:f2:37:f8:57:
b2:63:e8:9b:7f:7f:c2:e3:43:5b:ce:74:0c:79:38:
5d:f1:9f:07:64:c9:08:bc:e3:70:91:c4:b1:de:f4:
98:7a:eb:5c:b8:ce:54:55:1b:ef:3c:ad:f9:e4:a0:
ce:f8:5d:a1:2e:36:53:24:87:9a:18:67:7c:e0:79:
20:48:12:06:86:4f:dd:14:b5:3a:24:3a:56:48:99:
06:00:02:52:8a:ee:93:5a:21:b7:ec:9e:a3:27:6b:
9b:6b:01:0e:f9:57:19:2b:1d:a4:42:31:16:43:12:
0c:f7:ca:a8:69:ac:38:ca:82:6b:15:f3:ec:04:e1:
d7:12:00:d1:92:f7:b5:2d:b1:ca:14:ab:7e:b1:78:
ab:f2:e1:f5:b1:1f:cf:2f:93:2f:f6:1e:39:4c:16:
5d:d8:25:bc:c1:02:4b:e9:17:4e:bb:ca:4f:c8:d0:
70:2e:82:39:d9:c1:a5:f0:9f:3c:32:99:42:52:51:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:33:62:10:C2:1B:84:F3:42:38:31:5B:FC:63:2F:F4:4C:BB:13:3B
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ac:36:47:85:ae:5b:eb:84:16:0f:b5:6b:f1:7f:62:20:48:
4a:a2:70:14:ae:7d:6c:8f:71:cd:21:37:35:06:fd:44:26:e3:
c6:ba:ac:05:4a:94:fe:0b:91:d2:ee:86:e8:ed:fc:a8:28:88:
36:6b:12:7c:e0:eb:b1:37:47:06:06:6b:fe:d1:4f:c0:bc:a7:
11:6b:9b:25:00:d2:47:12:3e:66:62:b7:7c:4e:f6:e0:ac:92:
c4:f6:d5:4f:88:63:61:f4:8b:b0:29:49:2a:d7:51:df:37:b6:
82:c7:92:95:4d:26:3c:5d:32:e0:a9:51:6e:f7:de:bd:a0:a8:
19:7d:b4:ec:1b:cb:17:13:0f:45:83:03:5a:ba:52:88:7f:ee:
e0:c8:48:6c:6b:35:18:8c:d3:d9:4c:fd:64:71:1f:73:4a:9b:
89:28:8f:1b:7f:8c:be:62:22:37:c0:34:e3:12:9d:5b:1e:52:
3c:53:23:e9:25:48:2e:8e:a4:69:7b:94:42:f0:61:31:81:75:
73:9a:0b:7d:49:5f:12:d7:f8:1a:e4:18:b9:68:0f:4c:48:2d:
4a:19:81:57:6c:c2:7a:20:b6:ef:04:54:03:28:27:53:da:8e:
a2:5b:73:23:31:01:78:28:5f:a2:59:19:ae:71:3b:31:93:65:
fd:85:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:34 2026 by rpki-client