Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
File: GdZfozzls_e9tJfl_KUJ1_wDxpM.mft (raw, json)
Hash identifier: wLD4RVf32/nB3NSMMAsYEowTI2XDZXandLLVdcQiIIw=
Subject key identifier: 2B:01:6D:E6:A4:01:51:9F:9E:47:11:FF:4A:FB:B5:89:90:35:8C:BA
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Certificate issuer: /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial: 019D27DFC7C7A37C7B43261FD096E28A0F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:10 +0000
Manifest this update: Thu 26 Mar 2026 02:01:10 +0000
Manifest next update: Fri 27 Mar 2026 02:01:10 +0000
Files and hashes: 1: 3V9wiUwvfamuLVADXY0C4Wev7bI.roa (hash: l+RFmyKJ2p1Pn5PCTCrdi1at5JyBh4SapJ5re9I2vYw=)
2: GdZfozzls_e9tJfl_KUJ1_wDxpM.crl (hash: HL5B750x8iktcdMyAAHiP3gAvWo7O4D3ZI43JYLe9U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c7:c7:a3:7c:7b:43:26:1f:d0:96:e2:8a:0f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Validity
Not Before: Mar 26 02:01:10 2026 GMT
Not After : Mar 27 02:01:10 2026 GMT
Subject: CN=2b016de6a401519f9e4711ff4afbb58990358cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:92:15:8c:f7:1c:d1:60:c1:4e:cf:cb:23:
79:d5:bb:e7:a6:be:0e:1c:f2:a8:03:2b:fe:e1:0e:
fb:6c:fa:a6:f1:32:f1:19:ef:85:f3:6c:00:4e:52:
b0:7a:7e:a4:c4:12:8e:12:16:9b:75:27:1e:a3:7a:
b7:88:c9:31:6c:84:c3:70:4d:a4:76:9c:2c:ec:16:
e2:0d:5d:fc:a0:4a:a5:bc:97:69:ac:49:c0:56:50:
af:95:d5:d2:5b:1b:b8:9b:95:ee:d8:1d:d3:9e:67:
fe:16:66:3a:6b:23:4c:63:4e:c9:be:38:20:0d:79:
ae:04:1b:92:92:8f:de:1e:a6:a0:1a:e6:1e:bf:7d:
52:90:49:61:60:8c:1c:58:16:a5:7c:9d:4b:dd:9a:
7a:46:fd:35:8c:04:46:73:1b:8c:2b:06:21:c2:41:
37:84:c0:ce:4a:96:df:df:df:32:38:8a:b2:ff:88:
db:da:35:1b:25:9a:d4:94:35:f4:9a:50:df:f0:40:
c9:13:c2:f2:ec:dc:4c:6b:a5:ee:cb:e9:c5:cd:7b:
95:9f:c5:cb:3f:e5:a9:f3:28:9a:1f:bd:4e:1e:ad:
4f:8f:cc:34:8c:54:ac:89:13:16:72:38:a9:f2:d8:
a6:96:ad:d1:39:aa:fc:8e:ce:91:21:dc:4b:cb:35:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:01:6D:E6:A4:01:51:9F:9E:47:11:FF:4A:FB:B5:89:90:35:8C:BA
X509v3 Authority Key Identifier:
keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e5:fb:c0:aa:cb:60:15:15:e3:b0:0e:65:96:39:8c:d4:d9:
38:e1:ae:11:64:a3:f9:63:89:a7:d6:8c:79:88:20:de:7b:72:
55:e4:40:2c:22:61:56:2c:df:3d:a2:0c:ed:66:90:e8:7a:d1:
f5:b8:b0:4b:a6:11:10:08:b5:ec:8f:bf:57:c9:59:44:28:28:
85:45:96:c8:9a:8b:5a:f3:6d:91:85:40:94:9f:a2:92:2b:37:
aa:cf:aa:c7:ab:e4:c1:cf:b5:fb:6c:69:3c:ee:5d:84:69:20:
cc:a0:c8:98:20:a6:55:5b:2b:02:36:8c:ca:3a:8d:fb:6e:67:
de:c0:64:8e:ec:c1:a3:a4:0b:3b:1e:15:36:22:30:45:0b:9b:
20:67:74:35:93:3c:88:83:8b:cd:f5:f0:43:75:0b:b3:7b:95:
f5:59:8d:e7:58:cf:6f:3e:00:59:5b:55:a0:ff:3d:12:aa:a7:
bb:b1:fb:9a:46:b2:6e:2d:45:dd:39:ce:9f:66:87:36:32:0e:
dc:f3:3d:e4:2e:dc:7f:86:3a:72:57:d0:56:99:33:0a:7d:03:
a4:54:fe:4f:5d:88:b2:4e:d8:a3:4a:77:1b:f5:96:f7:8a:41:
12:74:2d:1a:f3:e4:4e:8d:5d:64:e9:26:85:8f:72:0e:b9:29:
42:a0:8f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:25 2026 by rpki-client