Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: VvySXLJhrzr4UqvE3xj/Wyv7ierdy5kaMiyxJ6ON/t4=
Subject key identifier: 1C:DE:FE:96:9F:3F:F1:47:6B:54:D1:6F:DA:A2:7D:9C:C2:BA:BF:94
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 019D2AA9F4D7BB020C8308D100DE4540AE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 15:01:14 +0000
Manifest this update: Thu 26 Mar 2026 15:01:14 +0000
Manifest next update: Fri 27 Mar 2026 15:01:14 +0000
Files and hashes: 1: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: ENQmTv6zZhwRnqX9omlWjUnHgpGxy1fIJ2l79fd8yU8=)
2: NYfYWYZMa_439o1QRYF0WdRM5MM.roa (hash: 8UO+Z6kVQhD/teXdacx0W8x4zMZ5SdEkPaLtrfrmHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:f4:d7:bb:02:0c:83:08:d1:00:de:45:40:ae:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Mar 26 15:01:14 2026 GMT
Not After : Mar 27 15:01:14 2026 GMT
Subject: CN=1cdefe969f3ff1476b54d16fdaa27d9cc2babf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:94:d0:c4:61:b2:11:3f:0c:18:83:9e:eb:
46:c0:f4:c6:b2:ca:b2:b7:af:59:c2:39:83:26:c6:
b3:a3:bc:44:6b:29:fe:ec:0b:d6:ee:2a:18:b7:65:
17:40:92:b6:63:d8:f5:f6:23:d5:fa:10:4b:7c:19:
00:61:25:33:c4:1b:30:c4:34:d1:1a:96:c5:b3:a4:
88:88:3c:bf:33:39:8c:cc:93:02:16:70:6e:a3:c3:
58:98:fd:e1:a4:79:98:c6:8c:22:66:48:ab:67:56:
7d:a9:e3:7d:a4:18:29:ec:6d:b3:61:ce:f8:fc:e1:
b9:21:6b:1c:3f:2f:bd:4b:c9:10:85:70:a4:97:21:
68:2b:fe:b6:83:a0:d0:ff:8d:9b:19:01:04:93:c5:
79:cc:ed:40:cd:0f:0a:6d:dd:a5:ef:c6:23:81:35:
54:82:2a:4d:f0:9e:af:f7:0f:db:1e:db:5d:0b:a4:
bc:66:9c:56:ec:bb:f1:fb:07:04:2e:1a:39:c0:ac:
ab:45:05:f6:9f:3b:1f:17:3b:d5:83:18:32:54:0c:
74:4d:6b:b2:5a:ae:26:9c:b4:f6:99:5e:bb:5d:be:
12:98:fa:52:d5:17:b5:d6:11:68:4b:0f:cb:e5:9b:
aa:f6:cb:04:8e:61:70:52:c0:24:04:cd:c1:7c:0e:
40:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:FE:96:9F:3F:F1:47:6B:54:D1:6F:DA:A2:7D:9C:C2:BA:BF:94
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cb:0e:c7:eb:9f:6b:14:3e:b2:3b:30:0b:17:b5:1c:6c:c6:
b8:2c:49:6a:e2:2f:fe:2e:f2:52:39:e8:b7:16:de:22:5c:21:
9d:34:04:a3:5e:f2:4d:d2:bc:5b:32:ec:cf:40:4f:83:93:0c:
e7:9a:a9:5d:3a:57:9b:8f:48:32:60:ba:bf:e1:82:8a:b3:a1:
6c:f9:24:26:0e:87:e1:71:b5:16:01:b2:ea:7f:5b:b2:c3:47:
40:ca:7a:f3:d3:57:88:d1:32:b2:58:e0:35:b1:77:ea:bb:82:
33:8f:bb:0d:02:11:86:60:56:e4:56:61:75:fd:6b:57:44:48:
58:5a:7a:c7:97:67:5c:b1:8a:b6:3b:68:e9:1d:bc:1a:91:ea:
cd:7a:16:c5:f9:83:db:dc:c5:e4:47:77:79:0b:b1:d0:9e:ec:
cc:54:ff:c8:f5:b0:89:1c:dd:c7:c8:15:d6:19:17:51:76:3b:
1b:f3:07:a7:48:36:3f:04:29:fc:18:88:ca:f9:8f:4c:39:ac:
2e:61:7d:00:e2:46:43:14:02:1f:b1:17:a1:35:d4:be:77:ca:
3f:0a:06:88:c3:3a:bf:04:59:bd:a4:e6:ea:25:e7:ed:9b:8d:
13:c6:64:08:a9:40:4a:22:1c:7c:a7:21:e4:ab:1f:91:cd:33:
f7:9a:b9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:01:04 2026 by rpki-client