Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: CTCZzpJx+0vZAWgtnvs7j6W55Mn2ML0Qkpzejop4lAY=
Subject key identifier: 9E:22:85:69:C4:59:0F:64:3C:BF:A6:0E:FD:DE:03:60:60:82:CC:FA
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 019CAA585A1B2E4B48ADF0BCC43E93C6723A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0DCB
Signing time: Sun 01 Mar 2026 17:00:42 +0000
Manifest this update: Sun 01 Mar 2026 17:00:42 +0000
Manifest next update: Mon 02 Mar 2026 17:00:42 +0000
Files and hashes: 1: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: EzLyg2WZgvLZ/DbNKvugfH+V/02Rd47k55IZ2IjRvRo=)
2: ioSKJKkF_4HM_F6u6RJnkLY1uWU.roa (hash: WbXNH1FTymiYyoPgw712is108gr5GM8N98thfxq0yjg=)
3: s7B9p4vTJAow4sBYhbnToQXwFKo.roa (hash: nHDCoe/MNgEdbVoOhEHnJFTP5BTnyS6pKwNLw3+w7aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:5a:1b:2e:4b:48:ad:f0:bc:c4:3e:93:c6:72:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Mar 1 17:00:42 2026 GMT
Not After : Mar 2 17:00:42 2026 GMT
Subject: CN=9e228569c4590f643cbfa60efdde03606082ccfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:30:85:ca:1d:61:24:84:e8:21:cb:e2:3a:
49:8f:64:d4:9f:55:4a:0a:37:39:15:03:d0:53:2d:
95:3e:2d:26:66:80:ee:3f:f4:40:95:3b:60:84:75:
39:24:ec:d5:95:e1:0a:0e:b2:d2:49:03:c0:aa:03:
e6:66:ad:cd:b2:d6:a6:d6:22:ea:2b:dd:6f:da:0d:
ed:5b:54:d5:1d:f4:e4:f6:b9:39:ac:71:16:cc:be:
cc:52:2c:62:fc:9a:19:d6:5e:31:29:fd:59:b0:e1:
99:8e:5b:ae:4e:4a:f4:ab:ed:58:ea:9a:15:33:e3:
98:f5:2b:a4:07:c4:3c:a8:7e:dc:8c:d4:f0:3b:80:
ed:8a:88:d1:48:16:c1:2f:c0:12:cd:a9:78:c2:21:
12:1f:65:b7:39:cb:e0:bf:52:2f:86:7f:2c:e8:45:
9f:98:e6:c5:cc:0a:b2:57:3d:ab:a5:79:3e:0f:89:
7c:49:11:5f:af:c5:4b:bb:56:1d:57:51:a3:4e:4d:
83:e2:b3:07:52:e0:9e:81:ac:fb:92:61:9e:b9:6d:
06:ae:f0:da:ff:f4:62:99:3a:37:e8:3c:61:79:c7:
8d:fd:dc:19:21:a2:3c:40:22:61:b1:d7:25:cf:88:
9b:66:b2:62:ef:b9:90:a3:31:23:1f:7c:5e:d6:cd:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:22:85:69:C4:59:0F:64:3C:BF:A6:0E:FD:DE:03:60:60:82:CC:FA
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a5:8a:60:76:14:72:e3:1e:44:99:33:71:3b:e6:29:ba:cd:
d1:c6:21:d7:c7:7f:eb:82:72:7a:39:de:10:1b:b2:e5:fd:a0:
d6:29:b8:2a:c8:8e:bd:6e:70:df:e8:b6:b9:0b:5f:b5:1e:50:
59:14:19:5a:f8:0b:8e:b4:3e:93:11:5b:e5:ae:67:df:a0:14:
29:ca:b4:b5:90:e6:4f:f0:a7:57:d6:10:23:fe:c2:df:ae:18:
12:25:c1:6f:c5:0d:42:73:85:18:83:89:15:53:6e:c8:c1:a3:
e8:a0:5b:0f:83:93:0d:9d:8b:46:8b:8c:03:03:5d:3c:0e:f4:
8d:1a:70:ef:cc:ee:f0:02:5f:a2:d1:75:12:fb:fa:93:56:02:
3e:a5:ce:69:60:6c:87:86:c0:6c:e5:78:77:82:1f:ed:53:5e:
4c:d8:9b:4a:b1:55:c1:48:da:5c:96:45:03:c9:3d:71:56:aa:
11:6f:26:5d:2c:76:c1:41:4a:3f:50:86:91:fd:fe:57:ed:2f:
1b:62:fc:86:6d:19:ba:a8:48:05:3a:6f:f4:1d:5e:74:be:5d:
bc:19:cf:dd:c1:f4:18:1e:d1:6d:71:c8:4e:6a:ac:99:e6:49:
8c:fd:9e:6e:b4:1f:dc:70:95:7e:32:9f:f8:b2:4b:28:a8:2e:
28:65:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:33 2026 by rpki-client