Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: ttfAnBMye/8i6Ai1RznevkFMSkb/2K0TNnPIx6DOurg=
Subject key identifier: 83:72:0F:7A:D3:94:A0:B3:A1:1D:C6:27:AD:99:40:0C:B3:CB:94:F0
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 019D27DF53EB37A99FC6440396788A9CD13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 0A1B
Signing time: Thu 26 Mar 2026 02:00:40 +0000
Manifest this update: Thu 26 Mar 2026 02:00:40 +0000
Manifest next update: Fri 27 Mar 2026 02:00:40 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: v953duM/JkcCfp1hohhV8Y3V0tfuvcJ+YsV4aWUHK3I=)
2: oeqcCmqzmosVxM-WY8lmXD_44Ic.roa (hash: QSB9wBcelhQw6T6s+EAUaG07z6Fs95UlwbhmHAqSneQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:53:eb:37:a9:9f:c6:44:03:96:78:8a:9c:d1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Mar 26 02:00:40 2026 GMT
Not After : Mar 27 02:00:40 2026 GMT
Subject: CN=83720f7ad394a0b3a11dc627ad99400cb3cb94f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:fe:22:0a:8d:0c:74:a5:ba:a3:8c:51:ec:
e9:aa:68:fc:5a:54:87:ec:8f:00:a5:c1:89:c7:9b:
fe:e0:75:3b:d0:bd:ce:9c:f5:24:ed:8b:3c:45:c5:
45:a1:f6:e5:d6:d0:3b:03:eb:16:05:23:36:73:d5:
78:fc:2a:0a:e4:93:4e:07:a5:ea:dd:fe:12:a7:f6:
65:fc:56:ab:8f:02:c3:c2:c1:93:42:a9:73:97:f4:
62:ef:f2:9a:13:da:d7:40:73:cf:71:35:c6:96:fe:
3e:06:4e:47:cc:e0:0c:ff:6e:3b:17:48:38:18:ee:
d3:63:48:ac:ac:fb:3e:28:6e:91:14:d2:be:61:8c:
a1:aa:25:ca:e8:6f:b3:f9:55:0b:bc:ee:c7:02:9d:
e4:58:bf:4f:6e:d1:96:80:23:20:77:bb:aa:42:b2:
df:56:7c:ea:fb:51:97:9c:a2:94:31:d8:40:98:e3:
77:c0:37:ef:20:9e:1b:7c:c6:70:c3:e3:e4:b0:e6:
cd:63:90:d8:3b:82:e2:5e:62:e3:f9:3f:2c:04:9a:
71:1a:ad:36:2d:80:44:22:20:69:6a:0e:70:46:d6:
58:68:e0:33:1e:a4:a9:f7:0c:7c:0f:aa:a8:ca:6e:
bc:5d:cc:88:63:26:66:da:00:b8:32:46:0f:fc:56:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:72:0F:7A:D3:94:A0:B3:A1:1D:C6:27:AD:99:40:0C:B3:CB:94:F0
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8b:b6:c9:06:c3:9a:ab:c3:33:88:3b:22:c4:0b:4c:a1:c3:
53:1e:45:96:23:89:02:8b:a6:90:74:7d:c5:db:65:8b:d3:8d:
47:4a:86:74:cd:a9:a9:a0:31:8c:2d:f8:ce:83:a3:b4:de:6d:
fe:bc:11:1c:30:84:4b:ca:f8:85:88:9a:0c:1d:20:25:d3:04:
f1:26:eb:ab:4b:99:b1:48:3e:67:95:65:6a:41:53:c6:d8:a7:
ac:48:f5:38:33:ea:29:b4:c7:69:09:1a:cf:b4:74:bf:7a:8e:
a1:88:ee:f9:0c:ee:ef:56:7d:47:86:b4:ef:7a:93:77:c6:8e:
82:03:66:dc:6c:6e:3f:b7:70:20:44:f5:78:6b:81:fd:a1:8f:
7f:27:14:80:f7:e7:bd:ad:02:a7:b9:19:d8:1a:28:96:3d:29:
90:5a:30:55:a0:c6:6b:6a:5b:dd:e2:21:6f:70:4b:c8:21:ed:
ac:0f:5c:d4:1d:13:c4:09:60:45:32:e3:d0:02:90:26:e9:fa:
ee:8e:ae:1c:26:be:70:70:6b:20:e6:72:d3:8a:8f:00:73:39:
18:65:ec:19:16:d0:22:59:6d:da:78:06:8b:87:0c:e1:9d:a2:
e0:89:23:59:12:ea:82:14:4b:d8:e4:d0:ef:e1:67:92:f3:33:
92:a0:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:04 2026 by rpki-client