Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
File: Gc3YIGweNSxQZeSBeX73evDD3o0.mft (raw, json)
Hash identifier: ed9ZzDewcQO95P3+m+wbke3v/cNwHXEV4EeF3a/T/4w=
Subject key identifier: 33:5F:BE:46:5C:CC:65:91:29:DB:D4:26:10:A7:4E:4C:3D:4F:B8:7C
Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
Certificate issuer: /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Certificate serial: 019D265F417B03083263179D01602189BF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
Manifest number: 0F3E
Signing time: Wed 25 Mar 2026 19:01:10 +0000
Manifest this update: Wed 25 Mar 2026 19:01:10 +0000
Manifest next update: Thu 26 Mar 2026 19:01:10 +0000
Files and hashes: 1: 1-saNr9bJQcaz_u-tEhmxvX4a2ak.roa (hash: 7zorjeV3sNrZB4yYlvElYM8rv3jdfw+76Izue9A3V6I=)
2: Gc3YIGweNSxQZeSBeX73evDD3o0.crl (hash: 3QZ5grWPk14xL5HErPHvmo682OYlSDrCFpgVg13tgkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:41:7b:03:08:32:63:17:9d:01:60:21:89:bf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Validity
Not Before: Mar 25 19:01:10 2026 GMT
Not After : Mar 26 19:01:10 2026 GMT
Subject: CN=335fbe465ccc659129dbd42610a74e4c3d4fb87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:11:05:91:17:e4:5e:3b:b2:9d:7d:9f:7d:9f:
08:7d:1e:d0:9b:88:20:26:b7:d4:19:27:21:68:c1:
5e:1f:c7:ad:44:0b:15:f5:16:af:e3:41:bc:b8:0f:
65:8a:28:fc:a6:74:ab:3a:49:2a:f2:ba:5e:7a:aa:
f2:18:1d:93:d4:7f:a9:6e:44:79:80:a3:88:fa:8c:
83:1e:e3:f9:1a:ae:bd:b6:f7:5b:9d:e9:91:cc:2c:
53:fe:3d:f2:16:c6:02:39:0b:d9:60:eb:0a:cd:33:
93:c4:32:88:b4:3b:c8:28:a5:97:83:d0:44:a0:e8:
47:8d:a2:87:75:6a:66:24:86:56:ab:d1:0f:ba:2f:
26:fd:4d:76:f4:73:f8:cd:f2:e0:a1:0e:86:9a:f2:
07:b9:47:42:8b:33:37:de:dc:ce:07:41:99:33:a9:
c1:d2:ed:ca:f1:11:8c:b3:5a:fc:26:a9:e9:94:8a:
4c:61:e4:61:e3:27:1e:e1:87:fc:70:35:31:a6:a6:
25:7c:a4:27:2a:92:7d:8d:4c:5e:6a:bd:cb:9b:50:
3c:45:a3:c1:ec:ab:75:be:b4:f7:74:29:d4:03:23:
d6:7b:9e:d8:bf:ec:34:b4:89:39:5c:e9:9f:aa:c7:
30:8e:c2:58:a5:51:05:ba:d6:58:3a:7c:d8:63:4f:
8a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5F:BE:46:5C:CC:65:91:29:DB:D4:26:10:A7:4E:4C:3D:4F:B8:7C
X509v3 Authority Key Identifier:
keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b1:2c:5c:85:f5:fe:81:e7:9f:3d:14:a1:f9:b1:ad:1e:b2:
fc:0a:6b:11:d1:10:0e:91:b5:46:a3:49:26:be:5c:78:80:6e:
37:a9:d2:a5:30:44:5b:25:c2:2a:b5:08:8a:1f:f7:3e:93:04:
19:14:97:73:8e:b5:ae:db:13:b0:2a:91:bc:26:70:6a:38:25:
cf:1c:78:fe:ae:50:74:87:b2:0f:b0:cd:46:30:af:c0:bc:79:
59:4b:93:ad:9f:2a:ba:1e:6f:6d:26:99:ee:93:af:93:cb:71:
74:15:41:b0:ab:4c:ee:62:af:04:c8:c3:7b:72:8b:35:b1:96:
23:a5:a1:cf:d9:2b:4c:b9:bc:81:7f:43:de:68:08:18:1a:fb:
bc:6b:57:21:c2:53:e2:c6:f0:21:de:94:fe:fc:2c:84:aa:ef:
c8:39:4e:89:f0:7e:86:54:0d:b5:72:42:82:09:c1:ff:1d:07:
d5:50:2a:f6:a1:a1:50:86:1f:09:96:05:d7:fc:1e:35:99:9c:
64:72:2b:46:19:05:63:57:3c:59:f5:57:bb:65:de:67:9f:e2:
ef:d5:40:1f:54:d1:bc:8f:fe:27:06:52:12:e3:0b:94:7f:05:
b6:66:ad:6d:d4:2d:11:e5:0d:0d:cd:c9:35:b6:8b:b2:7d:ac:
a3:c2:e6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:51 2026 by rpki-client