Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier: iIzY3ANbv3CZq686bbr75NiGsDRPM8WdVbTsRSlXI1c=
Subject key identifier: 58:2F:A8:30:88:4E:92:D3:73:0A:51:45:13:2B:73:BB:6C:80:BF:C1
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 019D2C97AA1855E3FE991FAD0AB25986E185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number: 1887
Signing time: Fri 27 Mar 2026 00:00:30 +0000
Manifest this update: Fri 27 Mar 2026 00:00:30 +0000
Manifest next update: Sat 28 Mar 2026 00:00:30 +0000
Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: iI8OWiughnk4CXVF93A+a5GyK4sIaMOQfm49Hlgo68A=)
2: TF0dSC0QLLTkTEwt9luFemTVApI.roa (hash: diyfKwUJkYthuVIKND7w8w0AKfmlP8CVwmqLuMhQpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:97:aa:18:55:e3:fe:99:1f:ad:0a:b2:59:86:e1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Mar 27 00:00:30 2026 GMT
Not After : Mar 28 00:00:30 2026 GMT
Subject: CN=582fa830884e92d3730a5145132b73bb6c80bfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8a:25:59:d4:cf:d2:24:dc:05:5f:01:68:b9:
bb:cc:74:ed:6f:4c:13:16:7e:40:f1:af:c1:26:f1:
da:87:03:b1:d9:a9:86:f3:23:ab:51:f8:cf:b5:17:
a4:81:12:fb:41:7b:c6:90:d6:d0:da:20:13:72:9c:
be:5d:e7:e0:72:6a:37:a6:9f:0c:9f:7e:7e:9f:40:
c2:16:8e:2b:4a:24:ef:5c:3e:87:c6:b0:e7:09:d8:
ba:af:31:16:18:8c:75:82:ac:17:59:ad:93:a4:f3:
76:d0:d8:a8:6e:59:27:1d:83:ac:9e:c6:52:47:d3:
cd:7e:44:31:f9:f4:ea:1a:ef:44:c6:1a:a3:67:32:
5a:73:9c:25:d3:f4:77:10:d1:22:8f:4b:b0:0d:c7:
6a:62:09:bf:64:1d:6f:39:67:27:1f:68:68:1a:5e:
8e:2a:24:67:30:24:89:02:99:4a:5f:77:be:a0:ca:
c6:c8:46:d6:80:19:d0:7f:d3:cc:8f:3d:33:37:69:
c3:2d:78:a9:d4:d3:48:8f:d6:6c:96:29:ea:55:f6:
34:8d:9c:9a:18:da:28:b1:c1:fa:f3:4c:63:30:dc:
4d:fb:65:b0:77:97:94:eb:27:17:53:de:27:af:78:
e8:60:98:66:30:0f:48:cf:6d:ad:48:f1:34:75:e7:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2F:A8:30:88:4E:92:D3:73:0A:51:45:13:2B:73:BB:6C:80:BF:C1
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:22:c8:95:80:c2:72:2e:1b:18:17:e8:c6:08:a5:c7:26:10:
84:79:2e:05:d7:51:47:fb:8f:60:59:99:bd:9f:38:1d:80:d9:
75:b4:82:4c:52:c0:77:a4:00:bc:89:de:c7:39:40:32:0b:f7:
db:e7:aa:47:a6:d1:3e:c9:27:f0:5a:bc:9b:27:97:fd:ce:08:
03:23:d9:3a:8b:d9:71:b7:03:c5:bd:7e:3a:f0:65:35:d7:b8:
b4:03:b4:62:e2:d6:7a:f3:d0:ee:a0:20:c0:bf:f9:f9:9a:cd:
de:33:85:ea:dd:62:e4:32:15:5e:39:de:3f:01:1e:a9:ce:f8:
4f:12:23:90:e4:99:7b:b0:42:cb:13:e7:1b:2a:c2:80:8d:43:
a5:49:ed:ce:09:df:06:34:c6:f0:eb:29:a1:f2:91:93:1e:c6:
c4:b1:52:22:c4:02:71:09:08:fb:d4:05:21:3f:42:cf:48:8a:
1c:c8:71:2a:fc:64:02:89:e2:c2:6b:54:68:c4:40:9e:d5:79:
2d:22:f8:59:ab:0f:c1:f3:2a:76:0d:53:08:60:60:73:71:bf:
ad:b3:91:b4:57:e2:e2:ac:7d:cf:29:45:cd:b9:16:89:20:ff:
64:a7:3c:08:7d:5b:7b:fe:19:f2:3d:52:5f:64:5b:a2:70:ab:
3d:7d:74:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:07:27 2026 by rpki-client