Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: 7cTfpfy7nRrxlNQ6e9KMednK0/W/L2MerLWrq+Mqhxo=
Subject key identifier: 5F:39:77:80:4A:73:EE:B6:D2:E6:7F:CC:C2:74:48:9A:5C:ED:A7:21
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 019D2772AFD8F2825A1A76F9094E94EC616C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:02:00 +0000
Manifest this update: Thu 26 Mar 2026 00:02:00 +0000
Manifest next update: Fri 27 Mar 2026 00:02:00 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: 7Xz6zpVGoNa8kmaGMbtsILGx6o/SBcp8/BLu+v87Igc=)
2: N_t0iSjnQlMLmJZKqbJJB1AKECI.roa (hash: CLalor9+rY0MRNCFPs5EzzFZ6W1RHuYiyZymjFGnJuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:af:d8:f2:82:5a:1a:76:f9:09:4e:94:ec:61:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: Mar 26 00:02:00 2026 GMT
Not After : Mar 27 00:02:00 2026 GMT
Subject: CN=5f3977804a73eeb6d2e67fccc274489a5ceda721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:d4:72:8e:1d:a1:00:94:cc:6b:d7:4a:ed:
aa:01:43:4e:17:61:87:f2:66:4e:93:23:18:ad:a4:
56:46:ce:51:79:3c:e0:ba:20:b4:bc:b3:5c:87:99:
ea:d2:23:ea:2c:9e:08:90:58:14:0b:10:c6:42:21:
ff:a5:1a:24:2c:d5:88:17:49:11:d8:7e:5e:49:8f:
91:5c:5c:35:f2:ef:5d:69:67:25:06:74:48:70:86:
6e:d0:95:b1:b5:b3:dc:66:ed:0a:88:2a:9a:21:f7:
51:c0:92:b7:ed:77:39:49:76:5f:e0:13:b2:69:bf:
c6:42:c6:9b:16:1e:67:dd:a9:c5:3c:5a:a2:c4:e6:
54:ed:3e:e2:8b:1f:09:d8:23:f4:c8:08:c3:ce:c8:
4d:6f:cd:8d:d6:35:cd:9f:0f:ed:32:6d:84:af:54:
d3:2c:5d:1d:43:4e:70:e8:64:13:11:73:1b:50:38:
a2:10:e1:86:1b:8b:b5:12:08:6a:02:05:a0:39:a6:
71:75:46:e9:c6:30:57:c2:2a:b5:e3:27:01:64:ba:
bb:62:98:9a:1a:97:af:18:9b:85:a1:bd:ba:4e:be:
3c:c2:8b:55:6f:17:b6:bc:57:c2:5d:d8:98:6e:2c:
f0:3a:15:9f:9e:c8:b7:ef:46:4f:9f:f9:cd:91:d1:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:39:77:80:4A:73:EE:B6:D2:E6:7F:CC:C2:74:48:9A:5C:ED:A7:21
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:41:11:9b:dd:d3:46:84:df:f2:0e:36:aa:a4:9d:b8:3c:3d:
1b:14:c7:c5:50:d1:b5:2b:b0:d2:5c:18:8b:b4:40:2f:25:cd:
c6:c6:7c:1b:d7:19:11:f5:b6:97:47:05:e1:01:79:eb:b2:b5:
f8:bd:44:9e:ed:62:a0:14:d3:76:aa:6c:c0:cd:13:e2:f4:39:
0f:cd:a0:db:2f:34:2d:56:9d:30:43:80:82:e8:cb:90:6f:13:
08:bf:e0:8d:51:de:bb:90:56:22:6a:04:2f:6b:e5:6d:a0:5f:
6d:91:5d:8c:00:fc:f2:6d:ae:d4:11:d7:d2:b5:c6:cd:10:9e:
a9:61:55:75:66:f1:8a:6e:7b:79:5a:69:d6:03:33:27:e8:ff:
f5:9f:b9:c3:50:43:a3:8d:35:70:a0:43:d6:7e:87:f8:73:7b:
8a:ca:2c:b2:bd:d4:91:6d:e0:0d:d5:93:45:5e:ac:03:95:b9:
f7:03:82:5e:2d:4a:5c:bc:6b:d5:7d:ca:8e:95:65:34:9f:db:
87:2c:88:68:8f:c3:c6:b4:bf:87:bc:9e:6c:e1:77:57:82:ac:
1a:d9:00:c6:a0:28:19:39:ad:6f:49:28:c3:46:d1:95:b9:3a:
88:96:7d:5f:b6:5e:21:5d:f8:ec:61:b5:1b:38:fd:a8:db:38:
da:3a:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:30:46 2026 by rpki-client