Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier: u0cTZr2NHWOjCULV6m62q90tCB6Jv7TkJVBbFadWJ0w=
Subject key identifier: 9B:DB:63:19:20:E7:66:47:E2:21:47:E6:BD:A8:8C:E2:B9:B1:18:6B
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 019D277259C0D8FF730FC4104C052E55AF6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:01:38 +0000
Manifest this update: Thu 26 Mar 2026 00:01:38 +0000
Manifest next update: Fri 27 Mar 2026 00:01:38 +0000
Files and hashes: 1: 75SRw9aNyewbtPYAMH8et8hfSr4.roa (hash: Ef79opNAcjrl49Rm2x5OxhpX27NyaA68e2jdXKrtpHA=)
2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: 88ZCgxAagxrNoeebD/m2Tgd5f7RQtlMhbi8WiGUefa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:59:c0:d8:ff:73:0f:c4:10:4c:05:2e:55:af:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: Mar 26 00:01:38 2026 GMT
Not After : Mar 27 00:01:38 2026 GMT
Subject: CN=9bdb631920e76647e22147e6bda88ce2b9b1186b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:7e:86:7e:e5:d7:46:e3:bd:3f:a4:b8:78:
c9:08:34:6b:df:a4:e8:e1:b5:65:9a:e0:01:bd:3c:
ff:36:7d:92:52:bc:ca:9b:22:fe:c4:58:db:d9:7d:
87:6f:69:8a:77:eb:5f:40:6c:1f:d5:00:6d:40:05:
50:3c:dd:ef:82:12:88:20:a5:68:29:af:1e:fe:27:
c4:68:98:7f:05:f5:e5:cc:00:9b:b9:fb:fa:e4:2c:
8c:ef:4d:55:7b:5a:25:da:7c:a2:2d:1b:e7:32:de:
c9:8a:28:66:a0:a8:46:88:74:a6:5a:89:b0:41:a5:
86:9a:a5:a3:1b:53:51:32:8b:08:bd:f8:08:a8:1e:
68:dd:19:2d:32:fe:e7:9b:9b:85:2d:65:f8:34:ac:
74:6c:db:92:21:0f:3e:8e:e8:b8:7b:23:12:cd:ba:
a0:3f:33:1f:78:93:ca:e6:15:b8:a3:6b:db:52:d1:
f2:1d:25:0f:08:ca:27:52:7c:45:b7:c1:8e:54:ff:
b5:96:4c:d0:33:04:65:25:71:2c:8e:bb:7a:6d:f9:
78:f5:3b:32:11:6e:c0:5e:ad:17:86:fa:cb:fa:2e:
b3:02:31:ee:bb:3d:13:a4:66:32:2a:44:10:a3:a5:
32:49:67:c1:36:cd:22:1b:4f:e5:f7:18:67:71:c5:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DB:63:19:20:E7:66:47:E2:21:47:E6:BD:A8:8C:E2:B9:B1:18:6B
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2d:4a:9b:a9:a5:61:5b:fb:34:48:89:b8:46:c3:f9:e6:45:
de:81:65:70:38:fa:b3:e9:3c:bb:49:8d:b1:c3:ee:c9:d4:ec:
eb:f1:58:1d:99:1c:03:f1:b6:16:96:fc:fc:58:10:bf:4e:0d:
cd:ae:d0:28:e0:4d:b0:26:ff:0f:4a:96:c9:a1:98:4e:9b:f5:
ea:bd:f3:ff:4f:20:80:65:7b:da:68:48:0a:71:8f:f8:dd:cb:
22:dd:6f:97:65:b6:c6:ee:18:e2:a7:ad:c4:28:ba:67:96:a7:
2b:72:aa:48:9b:cf:59:b8:85:9f:67:f7:dd:93:ee:71:4b:00:
e9:68:f7:a1:b6:6c:03:72:72:38:95:66:7a:0b:82:df:ad:2f:
34:d8:51:e8:6d:a7:cb:36:d2:ac:24:54:d5:38:43:80:38:01:
58:ba:df:c9:00:8f:dd:6e:f7:55:07:d7:cc:94:5b:08:c0:bc:
f7:5c:e3:ba:4a:e9:aa:64:53:ca:af:7d:d6:47:e7:84:65:6b:
cd:49:6d:6a:3b:ff:8c:62:2e:65:27:f3:52:0d:fe:f0:87:ba:
fe:a4:17:c2:96:5d:d2:94:7c:ad:14:4b:da:6f:17:61:0e:0b:
53:48:4a:62:b0:26:f9:09:c3:e0:56:b6:2e:d2:47:4a:14:0d:
e6:80:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:09:37 2026 by rpki-client