Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier: L3djr+1tqvh2VDWfWN6zy9f11QrUl3LA+1U93yjW3oM=
Subject key identifier: CC:AB:5B:E6:49:82:B6:F4:4D:35:3E:F1:0D:7B:2E:4A:CF:39:79:2B
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 019D25BAB341EF8225C3F59E04EB4D41B30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 16:01:25 +0000
Manifest this update: Wed 25 Mar 2026 16:01:25 +0000
Manifest next update: Thu 26 Mar 2026 16:01:25 +0000
Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: l4dGPz15QIRFOn4UgpwLIbH2Y0qnsqeLx9ZTGUt7qAQ=)
2: i220VObPvHT4HgCF-uOpmI807FY.roa (hash: s9QayADVhAmQKcOJ9dlrMCwrdZV1G0CVNvgi0G197E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b3:41:ef:82:25:c3:f5:9e:04:eb:4d:41:b3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Mar 25 16:01:25 2026 GMT
Not After : Mar 26 16:01:25 2026 GMT
Subject: CN=ccab5be64982b6f44d353ef10d7b2e4acf39792b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:39:09:9f:64:44:96:4d:6c:8e:54:12:2b:
d3:e4:2a:00:0f:92:fa:bb:c5:81:de:e4:98:98:80:
b7:a8:e8:d9:e5:da:3c:da:c2:7a:af:ec:4b:ac:85:
9a:5b:a6:49:ff:2c:5b:4e:2e:2a:da:4b:7a:81:7d:
b0:89:04:b3:b8:92:9f:23:eb:c6:2c:a8:d8:9e:6e:
7b:dd:e1:d9:80:a0:07:16:28:98:0d:76:38:ef:83:
0e:91:ed:90:b7:6c:a5:ac:90:22:0c:9e:47:93:e2:
3d:d6:ca:fa:3f:d0:f4:05:f7:79:8c:76:fe:ab:fd:
ac:a3:98:c2:81:33:b6:e7:e6:4e:a2:46:bb:14:5f:
aa:a2:b3:1e:18:04:21:32:7d:3d:ee:8e:56:ca:8d:
52:35:8f:04:d7:45:79:af:f6:7a:8d:ff:30:dd:ea:
cc:84:98:a3:ad:9e:e5:ae:6d:10:37:e8:ca:00:ed:
a1:70:cc:0a:84:41:5a:61:b5:ac:26:c0:2a:98:0f:
5b:63:d4:8e:43:ea:d5:5f:e9:6a:3e:68:3f:d6:cb:
5e:a0:b5:91:0d:da:5d:20:8a:57:3e:41:af:51:5b:
22:a5:67:69:e8:c3:77:a6:b5:d4:5d:05:73:56:b8:
a3:ec:0e:a0:c9:b2:a4:a6:72:86:56:8b:fa:37:d7:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AB:5B:E6:49:82:B6:F4:4D:35:3E:F1:0D:7B:2E:4A:CF:39:79:2B
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:10:56:20:40:c1:a8:7a:f8:21:ac:af:c6:10:08:91:fb:11:
27:19:36:9f:8a:06:10:a9:8e:49:5d:cb:68:c0:b5:82:f2:6b:
b4:f7:99:94:15:36:d1:b6:26:c3:e7:1e:0f:49:86:c3:e6:95:
b7:4a:3d:8e:22:81:04:83:4f:4c:90:52:ad:91:af:f4:c3:1a:
42:f6:e8:76:c6:1a:a3:81:8f:31:97:28:24:25:68:c1:7d:ce:
21:df:36:3a:f9:30:10:18:7f:14:2d:3c:82:ad:e0:56:b8:41:
fe:e8:41:0d:37:7b:e3:3d:eb:13:2f:71:5a:3b:b2:ab:0f:aa:
e3:b4:64:6c:e0:48:70:ea:ef:5a:bc:74:a8:ae:cb:07:db:b5:
93:fe:5e:c4:17:8c:b0:e1:b3:68:c3:f3:5e:8b:36:3e:ac:50:
ad:5d:ac:54:78:e0:b0:ae:bb:b0:54:7c:68:88:8c:91:04:e2:
8d:72:af:90:06:bc:3a:54:f5:77:6b:b6:47:38:51:d2:92:d8:
83:19:f2:55:c5:28:21:c2:22:7b:f9:b0:14:a0:68:76:6c:cc:
ce:80:94:c3:80:b6:f4:bd:58:fe:b3:5c:f2:3f:4b:14:d8:a3:
ac:fa:fe:95:f0:3b:40:e6:75:99:7f:18:ff:b0:97:3d:7b:16:
bc:e1:ce:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lurNB74Ilw/WeBOtNQbMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YWNmMDdmMTM1MjIyMjY1OGI3ODllNGZlNDBlYTM4YThh
YTcxZGYwHhcNMjYwMzI1MTYwMTI1WhcNMjYwMzI2MTYwMTI1WjAzMTEwLwYDVQQD
EyhjY2FiNWJlNjQ5ODJiNmY0NGQzNTNlZjEwZDdiMmU0YWNmMzk3OTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8A5CZ9kRJZNbI5UEivT5CoAD5L6
u8WB3uSYmIC3qOjZ5do82sJ6r+xLrIWaW6ZJ/yxbTi4q2kt6gX2wiQSzuJKfI+vG
LKjYnm573eHZgKAHFiiYDXY474MOke2Qt2ylrJAiDJ5Hk+I91sr6P9D0Bfd5jHb+
q/2so5jCgTO25+ZOoka7FF+qorMeGAQhMn097o5Wyo1SNY8E10V5r/Z6jf8w3erM
hJijrZ7lrm0QN+jKAO2hcMwKhEFaYbWsJsAqmA9bY9SOQ+rVX+lqPmg/1steoLWR
DdpdIIpXPkGvUVsipWdp6MN3prXUXQVzVrij7A6gybKkpnKGVov6N9cztwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyrW+ZJgrb0TTU+8Q17LkrPOXkrMB8GA1UdIwQY
MBaAFBms8H8TUiImWLeJ5P5A6jioqnHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMt
NzE2YzAzNDdhYTc2LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMtNzE2YzAzNDdhYTc2
LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuBBWIEDB
qHr4IayvxhAIkfsRJxk2n4oGEKmOSV3LaMC1gvJrtPeZlBU20bYmw+ceD0mGw+aV
t0o9jiKBBINPTJBSrZGv9MMaQvbodsYao4GPMZcoJCVowX3OId82OvkwEBh/FC08
gq3gVrhB/uhBDTd74z3rEy9xWjuyqw+q47RkbOBIcOrvWrx0qK7LB9u1k/5exBeM
sOGzaMPzXos2PqxQrV2sVHjgsK67sFR8aIiMkQTijXKvkAa8OlT1d2u2RzhR0pLY
gxnyVcUoIcIie/mwFKBodmzMzoCUw4C29L1Y/rNc8j9LFNijrPr+lfA7QOZ1mX8Y
/7CXPXsWvOHOFA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:01 2026 by rpki-client