Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier: 7NCOKu1ZZ5YtiUgaVY7fkHiR+pQpu4ayx3K9eKSoQeo=
Subject key identifier: FF:CA:6F:9E:46:F4:7F:05:1C:F4:F7:59:4A:A5:87:E3:44:C4:C6:7B
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer: /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial: 019D27DFB6315E6AF3784339F5CAD18FBC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:05 +0000
Manifest this update: Thu 26 Mar 2026 02:01:05 +0000
Manifest next update: Fri 27 Mar 2026 02:01:05 +0000
Files and hashes: 1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: AV9t0UY2ojycqm6qc0HIG0kIvypfM3UoGaX4A9bpUNo=)
2: R5kKLGujwVyN11kdJlzsqOL8oRw.roa (hash: cDKxoErZto4JESswwKsE0Hav5uBoVZS9w/0qja84b7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b6:31:5e:6a:f3:78:43:39:f5:ca:d1:8f:bc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Validity
Not Before: Mar 26 02:01:05 2026 GMT
Not After : Mar 27 02:01:05 2026 GMT
Subject: CN=ffca6f9e46f47f051cf4f7594aa587e344c4c67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:54:d0:b4:41:4c:d2:5b:83:f0:4d:08:e2:
7d:5c:53:ca:e7:1d:1d:34:5d:e7:a3:bb:2e:f1:aa:
7a:93:c1:97:9e:96:29:42:25:96:18:2e:f7:d1:ae:
1a:20:9a:ca:8b:8e:48:73:fa:15:58:a4:82:fc:93:
98:38:b8:45:1f:06:87:8d:e3:a6:57:7d:37:ae:64:
92:8e:e7:dc:8d:77:47:cc:99:a0:e7:6c:af:a7:ea:
74:72:63:6b:f2:af:eb:94:11:92:64:83:0b:83:c6:
2d:29:b8:71:b5:15:ad:d6:1f:7a:f0:67:ec:9e:05:
2b:ca:b9:0e:e8:8c:18:1a:e4:52:d7:75:0c:39:70:
3e:8e:b4:69:3e:b1:f5:4e:48:a9:7a:82:41:ef:38:
41:be:69:58:2d:c1:a5:ee:6a:48:c4:98:4e:00:86:
c2:8e:be:fa:8d:f0:80:5f:bd:ab:20:d8:36:e0:3b:
3d:0c:14:a2:87:97:59:2e:f9:62:da:a1:ae:92:84:
8e:55:7a:ef:61:e9:b2:7c:bb:76:27:43:59:d7:e6:
8a:87:f4:a5:04:bd:17:bb:7a:25:f3:04:39:3b:f6:
db:97:60:c7:22:ad:93:06:b2:9d:0d:8f:80:bf:d8:
ba:9e:78:d8:cd:fc:78:b0:d2:13:6e:01:87:c2:6b:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CA:6F:9E:46:F4:7F:05:1C:F4:F7:59:4A:A5:87:E3:44:C4:C6:7B
X509v3 Authority Key Identifier:
keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:51:cb:0b:e9:33:b0:d6:59:aa:71:50:ac:03:30:15:51:7e:
6c:a1:78:ea:a4:0c:fe:27:d7:75:41:40:7a:1e:e2:60:5f:eb:
5e:7b:be:c5:61:b3:58:b2:d7:14:65:30:12:b5:7f:5f:9b:16:
75:61:d9:86:11:33:9f:b1:a3:cb:d6:c4:10:27:c8:e1:77:f9:
9f:ff:9d:80:9f:65:f6:90:be:b9:df:08:f6:74:fd:14:f1:ec:
1e:93:02:5a:da:c0:91:7b:ed:65:5f:3e:1d:0d:cb:0f:6a:9d:
97:48:c7:f4:1e:68:58:40:45:a8:a3:ab:1d:94:a7:57:b2:98:
40:06:f5:6d:28:98:c3:29:44:ce:48:20:3e:b9:53:35:a1:77:
19:ad:eb:a4:ef:0f:d9:cf:20:50:95:23:e0:47:52:e6:63:ee:
f6:d4:f5:1f:c5:05:62:a1:5b:22:78:cb:09:04:95:21:80:31:
81:b1:66:af:50:5d:09:db:7b:c5:c3:d4:82:26:55:47:d1:63:
a0:6b:b1:8b:b9:b2:b1:ba:f1:15:97:25:fc:fd:e4:8c:e1:68:
b9:8d:e4:95:a7:28:2c:3f:e4:50:af:2f:6e:ce:ef:3f:00:fe:
29:a7:9c:cc:eb:66:9c:2d:1d:24:32:37:20:c2:85:eb:d9:a0:
04:38:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:54 2026 by rpki-client