Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
File: GpRvSoJtYiozjtg-CvzfeMh2BPg.mft (raw, json)
Hash identifier: m/sAaklc6SIapTwlLkwlt3/zw2iLJJCSKb3/pknIav4=
Subject key identifier: C1:F1:1E:0C:3D:9B:A5:B2:12:CD:5C:EE:B8:63:1C:FB:8E:F7:C7:09
Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
Certificate issuer: /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Certificate serial: 019D28BB112AFCF2D789CA1020C9E80B1400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
Manifest number: 1184
Signing time: Thu 26 Mar 2026 06:00:41 +0000
Manifest this update: Thu 26 Mar 2026 06:00:41 +0000
Manifest next update: Fri 27 Mar 2026 06:00:41 +0000
Files and hashes: 1: Ch0DBTwPBELRLNgplM4F3s9-zYY.roa (hash: 9L/0ugpJ1EuWwvVV5p15VHSh4bTMj4enT9HVoaEisEA=)
2: GpRvSoJtYiozjtg-CvzfeMh2BPg.crl (hash: dRo7qBDFY1VSJ3Sx76kD5xaOmQSNhaufwQe/g7pZn+4=)
3: z3lXdGSjKPDwJS_9eOiM2U2dzYI.roa (hash: HNTupTEuceZ5gELV1uOyvKnT6W4FN7qKEOgUBgkkmsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:11:2a:fc:f2:d7:89:ca:10:20:c9:e8:0b:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Validity
Not Before: Mar 26 06:00:41 2026 GMT
Not After : Mar 27 06:00:41 2026 GMT
Subject: CN=c1f11e0c3d9ba5b212cd5ceeb8631cfb8ef7c709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:9c:31:a4:f6:89:aa:b1:4f:17:67:9b:75:
84:6d:75:54:85:24:96:08:c3:b1:4d:1f:1d:e8:47:
78:81:e1:e2:4b:6d:dc:67:2a:ea:43:24:30:68:3d:
da:ee:f2:70:77:51:63:43:3c:7b:14:84:18:2f:78:
37:b2:b7:a3:25:a2:7f:b0:7c:fb:f3:bb:9c:0c:db:
7e:d5:92:e5:63:41:55:aa:71:0d:54:5a:f9:61:be:
36:33:ed:27:5a:3d:a5:c9:be:a3:e6:be:9b:ec:80:
51:0a:3c:a6:ee:f5:24:94:04:eb:f1:e3:de:0c:12:
4d:ea:a2:0a:9a:0f:1c:63:82:28:08:e5:cd:18:d8:
60:9b:eb:12:fb:61:d0:da:8d:c9:9d:0d:66:27:00:
57:96:69:5a:be:95:b2:74:c2:e2:03:aa:93:d4:d8:
5b:bb:08:eb:ba:84:d4:c2:3b:89:b2:b1:9f:d9:fc:
ce:fa:c1:ae:44:ba:5c:ba:45:d9:69:35:e8:b1:64:
98:8b:56:a0:6d:b2:c0:ca:45:dd:c3:b8:0d:bf:78:
70:f7:4f:e5:23:58:4f:81:3e:48:22:8d:2a:5f:99:
9e:de:51:19:8f:e4:e2:df:62:c0:3e:d7:44:87:f6:
59:1d:94:8e:88:6f:8d:e1:d3:21:79:0e:22:27:cf:
81:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:1E:0C:3D:9B:A5:B2:12:CD:5C:EE:B8:63:1C:FB:8E:F7:C7:09
X509v3 Authority Key Identifier:
keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5e:50:a2:8f:9a:c3:0a:d5:d4:2c:2f:b3:5c:c8:a1:66:36:
01:2e:93:13:12:bb:f2:2d:8a:8d:60:06:1c:39:5f:1b:ba:10:
64:83:7d:3f:2b:3e:2b:e0:cd:d6:1f:d0:d7:0a:52:74:f6:38:
64:63:4d:4f:5d:f9:4d:c4:28:04:d7:58:de:ae:36:a8:f0:13:
bd:a3:58:22:dd:14:6f:5f:49:af:41:63:54:5c:f7:87:eb:da:
b5:66:a4:cf:cc:19:3c:51:3c:e4:83:52:64:31:48:30:e0:60:
9d:dd:fe:57:df:98:1f:2b:45:7e:6f:13:17:54:8d:7b:44:96:
2f:d3:6d:78:13:02:0c:a1:fa:87:49:32:fb:20:c8:9c:c6:cc:
f6:b3:9a:49:f2:e4:a3:98:60:e0:08:88:97:5f:b7:90:72:2a:
c9:f7:14:f5:68:9b:52:73:e9:4c:29:63:e9:de:69:0a:67:84:
7c:3c:3f:b2:a2:89:c9:98:2e:e4:8c:21:20:d7:2a:46:9e:4b:
c4:13:3e:47:09:12:5d:04:73:98:a3:0f:f5:38:7a:94:35:a8:
c5:0f:87:10:00:b8:72:28:5c:23:25:ed:a6:c5:12:aa:dd:42:
15:72:c7:4f:9d:f7:bd:df:50:bb:16:ee:1c:cb:e2:5e:b4:94:
8d:a3:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:14 2026 by rpki-client