Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: R6JulSy6a0I90k4DR5To8UG4gUSNpSgvB19UptUw9Lg=
Subject key identifier: A6:9E:40:B5:0C:A5:BD:6E:66:E8:62:F4:CE:8F:0E:9C:1A:F9:39:B2
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 019D26282FAD96E6E46F227AD895EDBE0CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:01:00 +0000
Manifest this update: Wed 25 Mar 2026 18:01:00 +0000
Manifest next update: Thu 26 Mar 2026 18:01:00 +0000
Files and hashes: 1: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: FKlbacNbJHM/IJPlyueCr8DUXsYT8akUonnCIc+5HZw=)
2: iuITZHgDGqsS4DJrT4QfGRfLmXE.roa (hash: fVRfv2or89WX0xzZk/shtCx6ccH1MSfEUDt1qC4R8eo=)
3: xXSGrl92krsM_urkQdlEmjIAToI.roa (hash: wQLg7nZor+SidlIxB4lToP07634dxcVXfhFUBua4qFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2f:ad:96:e6:e4:6f:22:7a:d8:95:ed:be:0c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Mar 25 18:01:00 2026 GMT
Not After : Mar 26 18:01:00 2026 GMT
Subject: CN=a69e40b50ca5bd6e66e862f4ce8f0e9c1af939b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:2e:06:e9:83:87:c0:3a:62:ed:b6:f6:65:
c5:22:58:4a:13:fa:a4:d9:e8:f0:92:c1:90:d1:d4:
aa:0d:05:96:f1:31:82:12:4d:cb:0e:e0:df:ea:f5:
d7:26:46:35:45:f1:22:3c:88:a3:07:8f:04:33:15:
2b:12:8d:83:3c:01:98:9d:93:34:71:53:ff:e4:90:
83:22:f5:03:67:59:c1:b1:a2:e3:5f:12:b2:46:b5:
ed:8d:c4:4e:c5:63:02:75:3d:e3:aa:42:79:1d:4e:
ed:aa:e9:49:3c:b7:08:90:0a:61:a4:a6:c5:17:1c:
a3:04:45:59:49:87:11:c1:58:81:a8:18:0d:e3:61:
bf:d4:93:ee:56:c5:3c:5e:33:f2:c2:86:68:27:01:
50:0b:85:48:32:a0:70:24:40:8f:1a:d7:f9:28:f9:
93:49:07:98:6a:69:90:9f:d9:84:7e:33:05:c2:2e:
f9:a7:ba:c1:58:f3:86:a2:65:e1:2b:c9:b6:01:2d:
b6:df:78:17:3d:c5:65:51:16:38:25:f9:21:fa:fc:
86:69:3c:c2:81:5b:86:4e:8b:05:f3:d3:ac:18:2f:
a1:8b:21:b6:6a:cc:f9:e7:d1:12:d8:0c:d2:a0:75:
85:04:8d:a9:69:a4:23:6b:de:1f:ef:5b:09:77:47:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9E:40:B5:0C:A5:BD:6E:66:E8:62:F4:CE:8F:0E:9C:1A:F9:39:B2
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e4:46:0f:d8:4f:86:5f:51:ad:bc:9c:11:8c:4c:d5:31:99:
c1:a8:a5:7e:4d:b3:85:f2:a4:2f:82:5d:fe:fd:86:bc:dd:91:
33:d4:53:ce:ff:c2:ff:63:f5:88:11:f7:ab:a6:b6:fd:09:c2:
a7:b8:cb:b1:75:20:3f:f4:65:76:f4:14:14:94:d8:0b:5a:b5:
bd:43:1f:ae:7d:3b:c7:0f:6e:ab:81:18:80:99:e0:6f:4c:eb:
b1:3c:c0:f6:c5:37:96:d2:75:81:f1:d6:ab:69:09:b2:b1:8d:
c0:33:6d:78:ee:3e:3b:9e:83:fe:1a:4a:6d:e3:23:25:12:b0:
31:64:97:ff:73:99:96:fe:d5:e9:41:73:7e:ce:27:01:06:5b:
dc:b5:db:0a:4f:85:39:60:ba:4e:2d:80:c3:df:7b:56:1b:3d:
a0:5f:af:72:14:d7:73:49:88:e2:d2:ed:3e:91:ed:36:3f:cc:
af:00:23:36:12:15:f8:e4:20:4a:78:7c:b2:3a:5a:06:f5:8b:
10:e3:16:6a:e1:51:b0:21:9b:e0:b7:3e:61:86:e4:b2:af:28:
16:0f:3b:9a:b8:c4:80:43:d4:34:3b:ee:04:33:63:9f:bd:0e:
19:fe:e3:5d:57:3f:eb:f3:5e:27:db:e5:f6:0d:6f:8d:bb:a7:
8a:93:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:52 2026 by rpki-client