Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
File: GXYcuDMg_8ugH9gHoG6InMMdhec.mft (raw, json)
Hash identifier: qMt/doqwp84vPcZGgVv7+VOeHEXwhPJxex1U8tmWbOw=
Subject key identifier: E4:2C:3A:0D:C4:C1:3C:77:8B:C2:1B:19:03:60:51:03:E8:46:FC:69
Authority key identifier: 19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7
Certificate issuer: /CN=19761cb83320ffcba01fd807a06e889cc31d85e7
Certificate serial: 019D322BE3079B8A1693921C3AC4A1B8FCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
Manifest number: 04DD
Signing time: Sat 28 Mar 2026 02:00:30 +0000
Manifest this update: Sat 28 Mar 2026 02:00:30 +0000
Manifest next update: Sun 29 Mar 2026 02:00:30 +0000
Files and hashes: 1: GXYcuDMg_8ugH9gHoG6InMMdhec.crl (hash: DQDcpGGAm23d2cydxD0j7jyLhK1D577nXGZ8SslU8UI=)
2: oQ6UjA4POa_8uXATGFU457jPcNs.roa (hash: CGsZfbDOUFoB/m6p7m3E+q6k/tVWNbDEit0J2C57V8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:e3:07:9b:8a:16:93:92:1c:3a:c4:a1:b8:fc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19761cb83320ffcba01fd807a06e889cc31d85e7
Validity
Not Before: Mar 28 02:00:30 2026 GMT
Not After : Mar 29 02:00:30 2026 GMT
Subject: CN=e42c3a0dc4c13c778bc21b1903605103e846fc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:14:ae:75:43:66:a1:02:f8:b0:21:ef:fa:
a3:0b:95:c2:ba:c6:fb:bf:2d:6f:91:bd:cb:da:b4:
20:26:4b:f4:a3:bc:7b:8f:11:90:59:19:3e:7c:01:
37:8c:66:cf:ca:6d:01:05:4b:5a:bc:c1:c0:36:4f:
02:26:6a:ae:c7:7e:36:b9:8e:b1:d7:42:0b:72:7d:
70:d5:b3:64:3b:46:bd:5a:d3:6d:c2:32:f9:7e:40:
d9:76:56:11:76:74:15:a3:f4:01:86:77:7f:b0:17:
c5:2f:2a:bf:97:ab:92:db:1f:6a:73:11:07:58:28:
67:8e:f8:67:50:28:db:e5:1f:bc:0d:75:17:3e:7f:
69:48:ac:ad:7a:7f:48:42:bd:92:d4:4f:20:11:18:
67:d0:0b:5d:f3:c4:da:0e:8e:3f:bb:b3:b1:b5:b4:
87:ee:c6:2b:12:17:36:e6:1b:7f:04:5e:e9:2a:8d:
f8:39:31:bf:4a:94:6b:2f:71:39:b3:4a:1f:cb:6f:
ae:73:b4:64:1f:88:7b:4d:ac:cb:ff:53:69:a3:f7:
86:75:aa:b2:36:40:cc:af:7b:85:3c:40:7a:64:b6:
96:39:0c:5a:3b:e8:ac:42:c8:47:cd:3a:53:a1:94:
dd:17:63:e0:a3:fe:f6:3a:bb:6b:bf:7e:0b:3e:05:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2C:3A:0D:C4:C1:3C:77:8B:C2:1B:19:03:60:51:03:E8:46:FC:69
X509v3 Authority Key Identifier:
keyid:19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:be:24:d8:ee:bc:32:d7:9a:61:76:40:73:83:38:0a:d9:f9:
cf:bd:f4:7b:38:c2:e6:1d:66:c7:e1:5e:e6:94:2b:55:c6:de:
2b:81:8c:eb:f1:44:64:e4:4d:47:11:aa:85:b8:a0:4e:75:af:
a6:d9:84:38:21:a4:2e:3b:55:43:a7:0c:8b:aa:44:7b:68:9c:
31:54:92:92:8b:59:cc:2e:ba:63:79:70:ff:12:78:1a:45:a0:
aa:5b:3a:e5:0c:24:32:c8:2c:ce:50:ad:f9:02:2e:40:1f:ab:
32:90:23:60:74:f4:44:da:a3:6f:f7:37:6d:da:30:12:6a:6c:
32:07:d5:ac:21:66:60:36:ae:4f:ce:df:0e:cc:ef:9a:67:c0:
44:1c:37:d3:01:4b:fc:2c:15:52:55:a6:6c:f5:b8:c6:8d:e3:
ac:2f:48:d3:d6:8d:d7:ea:d9:ec:be:de:5f:35:c9:ba:cf:14:
8b:9b:d0:ce:d7:ee:ba:80:96:58:0c:48:cd:75:2b:fb:3c:6c:
4b:8e:61:72:2f:25:fa:10:6e:25:fd:f0:a4:f1:d2:5a:83:07:
e4:0e:fd:da:d3:8e:9a:b5:7b:76:86:15:4a:f9:84:6c:82:c0:
40:4e:6f:f6:b3:66:4d:59:31:c9:08:e8:19:c6:9f:af:45:d9:
f6:20:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:52:11 2026 by rpki-client