Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier: 38kSZeW09qPpfWuWMPVmb9lq5kvffy1gMrWTFPjDptU=
Subject key identifier: D4:43:D7:6C:41:1A:18:2C:CB:D2:B7:85:B3:42:ED:36:B2:6A:75:B6
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial: 019D28BB1B22808DEC8BF9748C4552393D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number: 03B0
Signing time: Thu 26 Mar 2026 06:00:43 +0000
Manifest this update: Thu 26 Mar 2026 06:00:43 +0000
Manifest next update: Fri 27 Mar 2026 06:00:43 +0000
Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: AOYSD1q9ntpFHGYgDnRq4xFX2Bx4QZJ6UnlpvOOTlww=)
2: tW75xisNBw44jYns_Y3WtNvzf4M.roa (hash: 1hevvajdIYdR4n3mWoJRqh1PcCq2VWdl5U2HS1l2lMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1b:22:80:8d:ec:8b:f9:74:8c:45:52:39:3d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Validity
Not Before: Mar 26 06:00:43 2026 GMT
Not After : Mar 27 06:00:43 2026 GMT
Subject: CN=d443d76c411a182ccbd2b785b342ed36b26a75b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:18:b9:85:ec:cd:a3:80:7a:1c:88:0a:48:
99:df:30:bd:50:b1:41:96:41:ac:a4:ed:8b:41:fc:
12:4f:6d:24:4d:53:3f:67:fa:ab:40:f8:a2:4d:78:
d6:0c:18:fe:f1:35:7d:11:ae:09:db:d8:97:f7:de:
a5:6e:1c:30:2e:5e:35:3a:33:47:d7:94:4e:e9:68:
62:bd:f2:3d:b1:56:c1:90:75:15:ca:25:a6:b9:d9:
f3:3c:08:29:c3:f3:d8:9f:92:47:59:4d:6f:03:0d:
ea:af:79:2e:65:fc:33:7b:04:fb:5d:b8:c1:28:75:
74:f2:ac:ea:87:92:64:4b:bc:15:a3:d3:44:5d:79:
df:02:b5:5a:9f:8f:fc:ea:6f:0a:25:92:7f:8c:69:
77:bb:39:10:15:a0:61:cf:67:35:ad:a4:8e:46:61:
f5:88:a0:5c:a7:ff:e5:e7:bd:a6:b5:b3:e3:da:81:
04:97:c7:3e:60:ac:7b:68:e4:24:dc:22:31:38:e0:
29:d6:af:3e:20:14:f5:2f:ec:b4:b7:67:ff:1a:f4:
cd:b6:53:ba:b2:b2:85:ac:61:ae:37:7e:e8:5c:6c:
02:db:56:08:5a:da:03:25:67:4a:b8:07:9a:4e:53:
86:03:7f:b3:49:e6:7e:42:83:98:e2:74:e3:1d:a8:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:D7:6C:41:1A:18:2C:CB:D2:B7:85:B3:42:ED:36:B2:6A:75:B6
X509v3 Authority Key Identifier:
keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5c:95:af:c6:d9:6f:14:a6:16:73:f3:ea:fd:49:65:bd:b1:
63:a2:b5:fd:85:ab:ee:f7:a1:61:62:f7:2d:17:46:36:7a:63:
ff:ca:45:3c:57:c2:bb:a3:0f:e7:00:ab:dd:fb:af:34:67:3f:
12:bc:83:19:4f:d5:b3:52:0e:cf:5d:ad:5e:b8:2b:1a:83:6b:
31:04:e9:a0:7c:71:ee:a7:fa:71:ae:d6:e8:d8:c6:ac:c7:46:
0d:07:ca:3b:8a:e7:1c:8b:64:19:53:71:04:71:21:77:89:b5:
06:92:12:4c:a8:8b:2d:c3:8f:65:a7:ed:aa:ac:fc:d8:9b:ee:
b9:ce:66:19:e1:a5:b6:a3:7e:04:62:67:fb:19:76:7f:27:0b:
d8:fb:16:29:2d:58:ba:cb:38:25:25:b0:17:3f:54:aa:d4:d6:
c6:69:7b:66:f5:f5:b4:81:96:0e:45:d6:30:41:9e:09:11:42:
e9:91:31:ca:3c:27:0d:eb:7e:b5:ba:ab:61:37:f8:2a:e3:58:
66:9e:9b:19:80:5b:83:0e:bb:f3:75:2e:8d:43:56:6f:a9:a6:
98:8d:01:4c:fd:75:40:c0:98:0b:e3:1b:63:c3:ed:4f:9e:6f:
53:95:95:e2:e8:b7:cf:b8:ae:6a:d6:97:02:13:47:d2:da:ca:
5f:0c:1b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:42 2026 by rpki-client