Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
File: Gcxj87NPFwGJ0HPIi31lL3Azofw.mft (raw, json)
Hash identifier: wTvp4h0RGWSKYEfoKZdqa6qmvTc11ZRwdy3f5tuVNeQ=
Subject key identifier: 1F:25:2F:41:36:B6:1D:DF:A5:8C:F3:2D:D2:6A:FB:7B:20:A2:92:9D
Authority key identifier: 19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
Certificate issuer: /CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Certificate serial: 019D265EF318491D0B534688D4E980F596A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
Manifest number: 060B
Signing time: Wed 25 Mar 2026 19:00:49 +0000
Manifest this update: Wed 25 Mar 2026 19:00:49 +0000
Manifest next update: Thu 26 Mar 2026 19:00:49 +0000
Files and hashes: 1: 14hIFUW6vS2lRrFhhTcqnw5Y0_U.roa (hash: weE6FiUWFJlgjSn45t8SYEOqGWgUP2W1fkEVmJ8kNgo=)
2: Gcxj87NPFwGJ0HPIi31lL3Azofw.crl (hash: j7buJnppyiGrwH7rQt2GAbZPtGkOa3zNirrQZw3EwhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f3:18:49:1d:0b:53:46:88:d4:e9:80:f5:96:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Validity
Not Before: Mar 25 19:00:49 2026 GMT
Not After : Mar 26 19:00:49 2026 GMT
Subject: CN=1f252f4136b61ddfa58cf32dd26afb7b20a2929d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:80:c9:34:56:ce:f1:04:ff:a5:91:1a:84:
84:06:11:9e:67:36:43:b7:ff:c7:81:07:f5:2a:38:
38:fb:72:d1:7f:59:98:f7:33:f2:62:85:90:28:dc:
aa:cb:de:a3:63:ae:59:75:9e:d9:3b:f9:f4:97:63:
e8:4d:ad:c1:21:2d:7c:2c:00:8e:53:4c:a4:79:62:
bd:ae:3c:5b:b6:89:e2:7b:34:64:f5:d8:9e:73:1e:
1e:19:b4:70:61:e5:88:82:54:8f:f3:78:9a:0e:fe:
d6:05:59:1d:f6:c7:84:32:66:1a:54:21:c5:38:25:
75:f0:d8:98:94:cc:a1:47:12:3e:ff:33:10:10:06:
70:f9:f5:45:24:93:cf:c9:31:fe:e1:90:85:23:5c:
78:30:ff:6a:af:59:a3:24:5b:7d:a2:65:c6:54:f6:
3a:ce:02:a6:10:ed:64:aa:fb:b3:98:12:8c:50:d3:
25:c9:49:0e:4b:5c:29:14:69:de:74:d3:cb:80:b2:
39:36:fd:38:cc:0a:8c:8c:d4:96:f4:a4:95:10:12:
ea:e6:23:23:3e:89:fe:34:4a:7f:72:98:2f:fa:ee:
cd:c7:d6:25:3d:e8:bd:6f:6f:1d:e9:5a:7a:72:43:
f7:99:50:b4:0b:6d:fe:1b:34:eb:ba:cf:ff:91:eb:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:25:2F:41:36:B6:1D:DF:A5:8C:F3:2D:D2:6A:FB:7B:20:A2:92:9D
X509v3 Authority Key Identifier:
keyid:19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f1:e4:7c:6c:3d:e3:79:bf:e5:04:1c:89:96:09:9d:0c:b8:
60:65:67:b7:f1:20:9a:41:cc:b4:81:0a:42:13:2e:14:e9:d5:
20:7d:0f:92:17:88:30:d1:c9:39:53:32:25:d6:a4:9b:16:ab:
a3:df:59:bc:d0:fe:4b:29:aa:42:80:67:95:21:86:2b:06:cf:
84:a9:ce:76:aa:60:92:77:a2:7f:03:b2:3e:f0:a2:20:3d:f8:
d1:37:3e:92:80:73:1a:b4:82:9d:94:91:15:55:ce:c6:d4:1d:
29:5c:5c:9a:9e:21:36:99:a9:cb:43:28:d2:38:19:ba:c0:9f:
73:33:9b:4d:14:5e:3d:6f:e4:a9:fd:49:d2:93:75:2d:8e:f1:
d6:6d:61:10:1b:38:97:a6:fb:48:aa:4b:07:40:b7:11:2a:ea:
38:94:ac:71:a3:2d:7d:fa:c3:ee:0f:9c:f5:64:97:79:d8:a2:
6d:87:f7:4a:a8:78:59:8d:49:16:12:69:0d:81:8e:ca:39:c9:
e8:c8:45:b8:f5:d6:ae:3d:39:b1:7c:21:a2:19:94:e5:b5:6a:
73:86:a0:1f:02:0b:23:e3:7a:30:5a:6f:21:f8:1b:f2:c7:67:
a7:3f:2d:18:55:a2:d6:fd:f6:17:45:28:59:ac:cb:69:1e:ab:
11:79:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:58 2026 by rpki-client