Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File: GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier: UGqs3pMsVzXy75B3SDpD4H4a8gbELOTkOpy/zhFbi9A=
Subject key identifier: 8A:D8:24:69:21:AB:6D:AD:9E:0E:6A:FE:AB:E5:1C:7C:D3:D5:4F:20
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer: /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial: 019D29CDE20366AC4F01F833061A1C3FE69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number: 139E
Signing time: Thu 26 Mar 2026 11:00:51 +0000
Manifest this update: Thu 26 Mar 2026 11:00:51 +0000
Manifest next update: Fri 27 Mar 2026 11:00:51 +0000
Files and hashes: 1: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: qsGOJSDgBouXe/KarnjwXLwhQNiNwjxCag0jnvrPk1A=)
2: PvoOGCPl9_uRABB0axn6ZoPjSfw.roa (hash: R0bL5Wz36hlUi6u7PbZBlbeTSW6yCz9pE1JTno5Jnd4=)
3: f2RzKPqHeeSwshGgaI03kVuo9ZY.roa (hash: vcuUb/xuMjhKt4KDFSNHCcpL3GkZRwfPEaVwfoajM48=)
4: v6DHuOuOQo5ADYQoffR2c_O6QS8.roa (hash: i6eWCZPdAHUsEhQJa4fw9gAODBNNYJr2pgzQXjsynVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:e2:03:66:ac:4f:01:f8:33:06:1a:1c:3f:e6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Validity
Not Before: Mar 26 11:00:51 2026 GMT
Not After : Mar 27 11:00:51 2026 GMT
Subject: CN=8ad8246921ab6dad9e0e6afeabe51c7cd3d54f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:3c:9a:2a:5b:f0:98:87:26:97:31:e8:db:
18:e8:58:af:ed:38:8c:c4:8f:c4:cc:88:c4:b1:f5:
c8:95:18:83:65:da:03:04:c6:96:69:ca:37:74:f6:
4e:ae:4b:4a:cd:7c:4b:39:a9:3a:3d:92:b5:a9:73:
e7:c5:7f:e8:ed:4c:2f:95:e8:d9:69:7d:37:fa:45:
c2:8b:22:4a:3c:bd:30:06:a0:48:be:b4:20:85:fd:
5d:a4:8b:24:ce:67:93:ad:51:c4:b6:a3:1f:b3:ca:
e7:ed:21:7d:fe:17:4e:9a:49:28:69:53:b5:7f:72:
bb:17:7b:48:fa:09:e4:99:a9:b8:b1:49:a3:17:fe:
28:63:af:9b:e9:64:6f:62:6b:d5:79:d2:1b:ff:09:
31:a2:17:3d:81:a0:90:4c:f0:80:60:d3:43:da:5b:
85:06:a1:9b:00:c6:23:b7:9d:4c:0f:d7:ef:e6:97:
20:0b:55:cf:50:74:e0:ae:58:50:ac:4c:bd:1d:82:
b7:f3:df:6b:fe:39:35:ae:e2:89:05:8f:7a:e9:ac:
1f:8a:f7:bf:b1:64:91:96:c1:2f:f7:d0:41:3e:5e:
0e:82:77:35:6e:53:c3:41:fc:6e:b0:83:23:fc:34:
88:f7:59:e2:26:1e:16:d9:d5:39:cc:a4:0c:12:60:
22:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D8:24:69:21:AB:6D:AD:9E:0E:6A:FE:AB:E5:1C:7C:D3:D5:4F:20
X509v3 Authority Key Identifier:
keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:67:bc:26:99:44:fb:d3:5e:be:e6:47:e3:5e:b9:6a:da:2e:
22:f0:4e:98:a1:31:b8:fd:df:6c:08:c6:8b:3b:86:20:3a:b8:
41:e5:9f:3f:f2:42:4a:d9:f4:72:5e:1a:20:2a:8a:fb:2e:72:
7b:09:b4:0b:4f:5f:f7:2a:27:fe:b0:69:74:71:f7:fe:b5:e3:
2b:7f:5d:16:58:44:0a:11:43:49:2f:a3:6d:34:52:f5:0e:6b:
ed:9e:22:51:75:c4:a9:cd:da:ad:83:c1:32:dd:67:94:50:ca:
79:ce:76:06:b8:ac:2b:68:2c:cd:eb:23:ee:f8:41:71:b4:04:
35:a6:fd:dc:2b:af:ed:83:96:3b:87:a1:44:42:61:55:71:8c:
f1:6a:72:7e:8b:70:c5:a9:ce:c8:e8:34:3e:86:01:8b:38:2c:
ce:a4:35:ac:ce:4d:be:68:cc:c1:34:ab:84:55:bc:4c:19:c3:
7a:b9:0c:1c:81:5f:91:8f:0f:fc:c9:ad:d9:7c:d0:02:30:e6:
6b:82:92:56:66:f1:77:df:b7:fb:d5:d0:72:28:9d:62:f7:86:
64:ed:f6:16:11:31:0d:df:d6:1c:18:11:cf:f2:e0:d5:28:f9:
d6:83:4e:94:1d:eb:ec:31:b4:9a:de:3f:16:9c:39:80:04:66:
1e:2a:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:21:53 2026 by rpki-client