Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
File: GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft (raw, json)
Hash identifier: luSVxzT4uojU0bMOepGnmytTTFKdWhkaNLxklma+1f0=
Subject key identifier: C9:8B:A4:2A:99:6B:C2:80:09:5E:79:41:AF:5F:B7:6F:0D:21:36:E3
Authority key identifier: 18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC
Certificate issuer: /CN=186590ee4a796301c422e033f944d263d6adeebc
Certificate serial: 019D25F1E13FAF400FA2E3222B21CF348979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
Manifest number: 13B5
Signing time: Wed 25 Mar 2026 17:01:41 +0000
Manifest this update: Wed 25 Mar 2026 17:01:41 +0000
Manifest next update: Thu 26 Mar 2026 17:01:41 +0000
Files and hashes: 1: GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl (hash: +l6Urwkve/VjIoGcWsDHs1EVfuOv8hg73GI3ioLbN4A=)
2: vDqQuNVASWfux49ii3xxJFfRld4.roa (hash: Ez2ZHwckh0VhggajM0dkx53jzrau9P9RypSE4OGXJCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e1:3f:af:40:0f:a2:e3:22:2b:21:cf:34:89:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=186590ee4a796301c422e033f944d263d6adeebc
Validity
Not Before: Mar 25 17:01:41 2026 GMT
Not After : Mar 26 17:01:41 2026 GMT
Subject: CN=c98ba42a996bc280095e7941af5fb76f0d2136e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:10:d6:5d:dc:01:a5:fb:c0:3c:49:a3:b9:
46:37:82:6a:de:f3:2d:84:ac:f0:05:e7:39:ab:cf:
da:2a:49:55:5f:e0:28:9e:11:2c:72:6d:ce:fc:fe:
d0:f4:0d:dd:7f:18:57:df:63:95:91:f0:c9:0c:f9:
27:7c:d1:ef:ad:0e:73:54:48:d5:ee:a9:88:aa:62:
75:8a:06:ce:9f:1c:00:ff:fc:df:d0:2a:a3:f3:c2:
b2:9e:f5:9c:b9:6e:35:8d:79:89:95:26:6d:a2:f5:
5b:6d:2e:d6:3b:51:6a:d3:66:46:43:2d:de:cf:46:
59:ab:3d:d5:32:ed:08:52:5f:2c:01:41:92:a4:e7:
4e:b2:99:b7:51:8b:b6:f7:7c:a6:bf:d1:75:a7:9f:
df:da:1c:46:cf:70:c9:10:60:26:ba:69:04:8a:81:
5f:e5:2c:84:b3:35:ca:f0:fe:76:fb:a1:b2:6c:eb:
4e:67:37:f8:a7:14:4d:01:69:36:7a:f8:23:9e:7c:
db:11:3b:4e:c8:22:8f:4b:50:3a:69:36:b7:45:e2:
46:18:ff:20:e5:03:c8:6e:40:75:f7:e1:29:8b:4b:
4c:db:dd:c4:d6:32:cf:26:ff:6f:e6:46:01:e9:50:
76:d4:36:f1:24:4a:4d:c3:0a:e5:59:9d:d1:6b:87:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8B:A4:2A:99:6B:C2:80:09:5E:79:41:AF:5F:B7:6F:0D:21:36:E3
X509v3 Authority Key Identifier:
keyid:18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e2:b9:bb:59:b3:3b:90:c4:a8:93:a0:35:e0:ac:24:a6:1c:
44:1d:59:f7:66:9c:2b:a9:f2:8e:e8:2e:8f:a9:1d:4e:4f:a3:
24:ef:cd:86:c9:33:78:cd:95:02:35:78:49:bb:26:a8:4c:f9:
c0:e9:17:84:42:13:5a:e7:c4:54:08:df:74:71:99:8b:35:24:
bc:1c:73:37:d4:68:fa:b1:0e:2f:10:bd:81:e7:1c:ac:a0:7f:
d4:a5:21:04:34:59:25:3d:2a:dd:e1:13:b4:9e:ab:71:d8:2a:
7d:4c:a1:b1:38:f4:21:50:35:c2:a8:41:44:14:b2:48:6c:34:
ff:b3:dc:42:da:96:22:a6:d2:3a:14:08:e5:2b:92:aa:c4:eb:
4c:b9:57:b5:1e:b4:ee:6b:21:49:cd:b8:b4:e1:9f:e3:06:b4:
e3:cd:b8:af:09:23:87:4c:c0:d5:8a:b6:e6:c9:d4:22:94:0a:
2e:ea:ec:28:1c:78:07:ce:91:87:72:e2:ec:6f:86:b9:bc:f9:
08:49:b9:33:8d:9c:a6:d1:86:35:c3:1d:ad:ca:64:e3:63:57:
d1:dd:42:ba:42:64:5d:ce:ae:4a:bc:22:16:c9:b0:d0:61:f0:
99:97:19:2f:04:fb:ac:c1:95:c5:b0:b2:53:bf:dd:51:f0:67:
e5:c2:a9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:05 2026 by rpki-client