Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: +MHQnAtueJVPxx7m+3ViMvfpJcVGoD767esShyu98Q0=
Subject key identifier: 06:83:1F:7C:25:5F:14:86:BE:7F:B6:CC:B3:BA:DB:DC:1B:3B:9D:75
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 019D2703D7C9E687D11DF2C2BE61726864AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 14D2
Signing time: Wed 25 Mar 2026 22:00:56 +0000
Manifest this update: Wed 25 Mar 2026 22:00:56 +0000
Manifest next update: Thu 26 Mar 2026 22:00:56 +0000
Files and hashes: 1: 5m2yB9NEeUbzh_RrMBbFTl87vZI.roa (hash: +gJzTRd7yfkb9lyTBCKq01A8haFjWWwRmaKWjp0RAm0=)
2: Opf2QA1qNa28jjAr8yKuXu_bAbY.roa (hash: ovjEoKocSUBnOUVIGPdI/qSQMjayKXITtpelF2L20jw=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: OZ4d+WCkvhl/xsmuJXwSYNEsYk07qOcVeeyHauXdn08=)
4: yvE1riQnzN8M1_ohncQ6e5yrX4w.roa (hash: Bi2CKtLlem3xa/y5EAdM8w4Q0JN6Uyw6zRxbHmseyms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d7:c9:e6:87:d1:1d:f2:c2:be:61:72:68:64:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Mar 25 22:00:56 2026 GMT
Not After : Mar 26 22:00:56 2026 GMT
Subject: CN=06831f7c255f1486be7fb6ccb3badbdc1b3b9d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:57:01:e7:00:90:47:ed:65:c7:bd:9d:91:
05:a4:8e:4d:61:ae:0d:03:8a:b7:a7:c6:86:00:37:
ad:04:f7:2b:81:d3:93:dd:10:ff:01:0c:03:27:90:
63:04:c7:7b:91:b3:f2:f7:e2:b2:64:49:9b:b8:94:
44:f5:1a:ad:89:80:84:66:4a:f3:fc:13:62:1e:1b:
7c:0f:97:60:c0:a9:c8:67:49:1a:5f:75:33:f9:75:
ca:1f:3f:c4:75:4f:e7:78:6c:81:76:5b:34:e1:08:
02:8a:36:1a:a8:1b:25:68:39:49:96:06:ff:b0:2e:
17:11:8b:ba:41:15:8d:88:a5:8a:18:01:25:5d:26:
87:19:7f:81:6d:61:a4:a2:80:cb:3e:ed:64:13:f2:
a8:06:15:e7:3b:6b:bd:ae:ae:52:ca:ef:0b:27:ff:
f7:64:cb:17:72:7c:83:d9:87:ed:f3:f3:e6:86:93:
48:74:73:37:72:3a:82:93:15:cd:e5:96:e4:15:f2:
c4:dc:bf:e7:6c:fe:ad:d9:ff:72:56:a5:a6:f9:3c:
77:89:0a:96:a3:c4:87:6c:11:b3:d5:b9:f6:e1:0e:
a1:60:d8:cc:33:9e:47:8b:aa:45:a5:c6:c4:01:bd:
00:30:a4:87:ff:17:90:c6:b5:fd:43:71:8e:92:c0:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:83:1F:7C:25:5F:14:86:BE:7F:B6:CC:B3:BA:DB:DC:1B:3B:9D:75
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2b:1c:ec:c0:77:1e:73:d0:1f:c3:9c:15:50:8d:0e:0e:34:
b6:97:79:e5:61:d0:2a:ea:86:b6:c6:cd:42:3e:a4:ff:97:9a:
99:56:c2:e9:cb:6c:aa:6a:3a:f2:e7:b1:3c:a2:db:09:a5:2f:
9d:0c:0b:6c:a9:02:77:62:15:0f:0a:60:24:6c:c2:de:1f:da:
96:2e:89:d0:ac:7e:88:62:b5:44:9d:35:9b:58:99:43:c4:6b:
22:01:2f:f3:68:8f:7c:9b:3f:27:f4:58:5f:18:6a:a6:3e:1e:
0d:34:8e:ba:3e:23:5c:23:1a:8e:fd:65:3b:7d:d5:36:1d:d3:
00:74:e1:9d:86:ea:3a:10:48:b3:d7:85:07:5a:f5:67:d6:24:
0e:a4:88:d9:20:d6:f2:2f:83:16:1a:83:11:5c:0a:a3:76:c2:
af:a3:c0:ec:c9:22:35:c4:a5:b1:38:f2:37:8a:4b:58:38:14:
cf:98:2c:55:61:ad:74:17:d4:43:22:83:7e:3d:d6:ee:ee:3a:
2d:47:bb:9d:8d:e0:cb:73:4d:c0:e1:16:4d:98:45:a5:86:81:
fc:65:6f:72:37:e9:23:4d:b9:c3:cf:00:ac:93:13:ab:5a:9d:
a4:10:7f:4b:17:84:8f:9c:31:36:04:94:ba:89:64:f9:83:08:
5c:fb:e5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:13 2026 by rpki-client