Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: 4aGdiOHtVnoHJa4kWC7FPmlO0G2SdyeddUsS63qFpY0=
Subject key identifier: 1B:8A:C9:8F:76:34:7E:4C:6F:56:2A:1F:EE:C5:38:2D:0C:31:6F:BD
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 019D265F8B7D461FF40858381D3F5C103103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 0A04
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: n4xQliYd9O6Eq1QXKTyvwAvHa3ss7CIJ43qvnueYdmA=)
2: ImbkEEuw8ciW4XZvQnskEOeml3A.roa (hash: s2ZZTRU19ZLlzKll7MUSBOLRlZD19z6bClWZADEJ0vA=)
3: xTy14ClaR4Rvu9WN2hIEK42ff6w.roa (hash: MWs9WTWsQLed5Ou31CqMyRYBYZdgWbH79vbLFld2S5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:8b:7d:46:1f:f4:08:58:38:1d:3f:5c:10:31:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=1b8ac98f76347e4c6f562a1feec5382d0c316fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:dd:0b:e8:4b:dd:c1:49:fc:21:0b:fe:d1:
c3:84:ae:6e:bf:a6:01:cd:cb:ee:92:fe:d8:d1:f5:
12:02:f7:44:43:d5:87:25:0d:f8:fa:7b:d5:fc:8f:
b0:fc:50:30:7b:19:24:4e:d4:78:c9:15:ff:35:b1:
d8:f0:a5:45:d5:9b:55:c0:7e:b2:ff:15:59:82:07:
2d:5e:bf:1b:72:3d:ef:bc:25:48:5f:7d:36:ce:8f:
ae:db:35:c3:cb:39:6f:24:e9:12:69:ed:e0:07:c8:
eb:8c:16:59:84:53:87:2c:de:7b:9e:89:d5:65:54:
08:f5:7c:c2:15:86:0b:7d:7b:e9:bf:16:1b:5d:f6:
e5:da:fa:b9:b9:11:2b:79:89:17:81:3a:ed:b6:0f:
bc:9b:ff:2f:14:f5:b2:95:80:26:de:d7:84:75:3e:
a5:a4:fe:fd:d0:8d:8f:a1:68:90:57:7b:23:55:3a:
8c:fc:71:5a:b5:6a:84:f8:e0:23:52:9a:84:91:0c:
77:59:fd:2d:28:56:f7:fb:0a:23:a1:bf:d1:d1:63:
f2:d6:93:8b:92:ec:7e:9d:ef:0b:51:ab:02:60:9a:
3a:8a:22:32:1a:4c:d5:b0:3d:81:03:c8:21:34:e7:
35:27:ae:dd:32:a1:8e:06:b0:45:f5:34:d4:ba:d2:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8A:C9:8F:76:34:7E:4C:6F:56:2A:1F:EE:C5:38:2D:0C:31:6F:BD
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:59:a8:03:70:13:bb:6d:02:c2:0c:3c:36:c8:90:a7:f6:33:
fb:1d:5c:c4:08:ce:08:25:bc:5d:84:50:a3:29:38:6d:eb:77:
27:61:cd:d9:fd:51:2b:fb:14:f9:5d:05:cd:03:45:98:77:0d:
08:12:c0:a6:49:5b:91:07:1a:54:fa:62:dc:b5:d6:16:40:0b:
2a:b5:44:91:01:e0:79:84:5d:f5:d1:e8:48:37:a1:0e:02:d3:
9d:d9:65:c6:26:70:0c:c9:26:c0:e0:9f:a3:a5:a0:75:56:b5:
34:fb:a2:70:8c:b3:95:cc:62:b7:14:05:08:1f:7e:2f:68:e6:
f9:49:a5:76:d5:a4:ef:59:23:2f:ad:be:17:b1:8d:2d:00:3b:
fe:38:64:ef:4a:41:fb:03:22:68:ff:d6:b3:b5:33:41:ef:61:
c7:6f:66:31:bf:27:75:82:96:50:53:e0:b3:c8:f0:ad:fe:08:
5e:f5:b0:96:8e:c9:2b:a5:fe:c9:01:9a:83:7a:1f:3b:f9:a9:
1d:04:3e:fc:b1:6d:ce:b9:26:ba:be:56:7b:76:5c:6c:0d:ff:
87:6a:f7:8e:83:fb:73:03:c0:8a:d2:a8:74:8e:1a:84:47:21:
c0:eb:64:75:d2:e4:2d:55:87:c8:e8:d8:fd:53:af:a0:15:bc:
35:87:65:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:26 2026 by rpki-client