
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
File: GgEAlDqHCAKL5A1PpPKcmtnMVos.mft (raw, json)
Hash identifier: nmaXP56ZhJElTL6Py8h40Vh4qr4k3G373VcPHrDOfkg=
Subject key identifier: A6:64:77:4F:FC:1C:28:25:99:E8:AB:85:70:F5:0E:37:81:10:63:BC
Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
Certificate issuer: /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Certificate serial: 019D2B1751DA0A70871A21B3D43B4D00DCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
Manifest number: 08CD
Signing time: Thu 26 Mar 2026 17:00:41 +0000
Manifest this update: Thu 26 Mar 2026 17:00:41 +0000
Manifest next update: Fri 27 Mar 2026 17:00:41 +0000
Files and hashes: 1: GgEAlDqHCAKL5A1PpPKcmtnMVos.crl (hash: H+sGlYgVBAnxhVab4rKs8heWBUVqDEhQw9G7w6SCLLs=)
2: c-RKbXtHcflehkaW7_s-cfEhYzY.roa (hash: GHSgILgVbECkDEeWeGT0Z0WhcMXYxagSymWkAzUHFf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:51:da:0a:70:87:1a:21:b3:d4:3b:4d:00:dc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Validity
Not Before: Mar 26 17:00:41 2026 GMT
Not After : Mar 27 17:00:41 2026 GMT
Subject: CN=a664774ffc1c282599e8ab8570f50e37811063bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:72:5d:df:6a:0b:7d:6a:6d:1a:bb:68:db:
db:fe:cb:e8:37:b5:4b:ea:c1:01:2d:d2:ad:fa:ce:
5b:08:27:a3:ad:bb:dd:56:ec:06:0e:dc:7e:c6:85:
14:c4:32:5e:3e:84:dd:47:85:6e:84:0e:ec:93:c9:
08:0e:d3:a0:a8:46:5e:2c:1e:c4:cc:eb:d0:b1:d8:
43:8f:cb:00:4c:03:d7:14:ce:fa:1d:c1:b0:4a:69:
58:02:dd:aa:d3:2d:29:79:ee:a8:2e:6e:51:43:2f:
80:79:92:0e:98:cc:76:e2:67:f9:49:12:82:09:a3:
40:39:8a:b6:f3:d2:76:97:59:42:7d:c2:68:1d:24:
e7:f8:ea:78:70:7d:6e:94:f1:e6:2f:0d:dc:09:b0:
a1:de:cd:e5:a6:1c:74:fa:be:12:fc:cc:db:da:ab:
44:5a:e3:57:c6:c3:76:8c:56:5a:26:3c:16:86:bf:
1b:83:bf:08:b8:60:a4:24:66:41:54:54:54:ac:2b:
6d:6d:2a:af:0e:27:df:6e:42:63:1c:62:72:81:fc:
86:d2:f9:58:ec:6c:86:53:83:16:7b:57:22:a5:cb:
b2:be:35:56:06:ac:32:cd:f3:88:3d:8b:58:87:b7:
26:0c:e4:67:1e:dd:ee:4b:75:f6:76:60:26:93:9f:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:64:77:4F:FC:1C:28:25:99:E8:AB:85:70:F5:0E:37:81:10:63:BC
X509v3 Authority Key Identifier:
keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9a:e3:aa:dc:35:a9:31:ab:4f:1e:2c:29:8f:42:3a:39:85:
82:39:a7:a6:f4:f6:14:a6:20:ce:f7:b2:83:60:a5:15:04:41:
33:6a:e4:71:e5:79:aa:ec:9c:0e:ab:84:a3:aa:16:7f:40:08:
aa:15:10:63:34:94:f0:64:47:72:83:7b:16:20:63:43:e0:f4:
9d:9b:15:cc:05:00:15:7a:27:f5:1f:29:01:a3:a6:25:59:b8:
27:e9:78:00:14:d9:60:6a:94:c0:0c:45:a4:19:fc:3e:fa:ab:
f2:ed:3e:bb:ab:94:63:d3:78:f7:c7:c7:f5:27:e6:a2:4c:3b:
ea:bd:4d:1e:5a:94:10:49:68:04:1f:fb:08:15:50:26:6f:cd:
8b:60:d2:cd:7b:6d:6f:fa:f3:55:44:f0:16:46:27:c1:79:a7:
43:bc:83:84:5b:18:12:fb:b6:02:7e:8c:76:c3:ed:ca:61:78:
cc:a1:57:1d:2d:5b:5a:09:14:2f:a6:c5:7d:6c:ed:10:28:b3:
d6:3c:bc:7f:7a:c4:cd:ea:1b:ca:b6:4a:87:e8:6b:5e:21:bf:
b2:e5:8a:fe:b1:d5:1a:5f:c5:44:84:bf:48:ed:ff:80:ab:bc:
8d:59:f2:4f:a7:66:d8:28:11:54:0b:2d:34:8f:ae:e6:a4:23:
e2:a5:8d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:35:02 2026 by rpki-client