Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
File: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json)
Hash identifier: zCDe7LzEBqGJ5dTkqukt5P9uIJAOHW3yJFOevCajNe8=
Subject key identifier: AD:FC:D1:48:DA:3B:E4:FE:CD:72:EF:60:BE:22:7E:08:16:3D:4A:15
Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
Certificate issuer: /CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Certificate serial: 019D29615969E7A29A05D3F54C2A6D2F2A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 09:02:18 +0000
Manifest this update: Thu 26 Mar 2026 09:02:18 +0000
Manifest next update: Fri 27 Mar 2026 09:02:18 +0000
Files and hashes: 1: Iu9PnHVM0LSwUFID8vLNCNKzD-U.roa (hash: tU7O1VjjD0lcgYnwOxVPASyTAKDrVm8qOBVH6F4eICY=)
2: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: gHsei0w3T0hfbX0u07L37bqdVOuq0H57OFKwLxUEZXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:59:69:e7:a2:9a:05:d3:f5:4c:2a:6d:2f:2a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Validity
Not Before: Mar 26 09:02:18 2026 GMT
Not After : Mar 27 09:02:18 2026 GMT
Subject: CN=adfcd148da3be4fecd72ef60be227e08163d4a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:35:66:c7:2a:1b:bb:fc:9a:da:70:f6:8b:
6f:5b:c9:1b:dc:61:be:b1:65:0d:7e:87:40:c3:3e:
ee:45:b6:38:6e:95:94:c9:28:79:0c:fb:4c:2d:e4:
c7:3a:46:97:04:b9:45:62:ca:11:7e:d5:e2:94:f1:
df:47:7c:d8:63:d9:4b:8b:54:eb:a1:cf:3f:74:69:
5c:fe:98:8a:15:94:65:b6:15:01:a1:8d:d9:2c:d5:
79:f8:8f:8d:c0:88:e7:68:d8:f3:29:0a:93:06:67:
1a:1a:49:17:8f:5b:1b:0c:e3:55:70:7b:f3:05:a5:
0e:5b:0e:4c:3d:65:1a:af:7e:3e:89:8e:3c:15:50:
6f:88:9c:3a:01:08:ab:17:d7:26:18:5f:ca:33:67:
05:29:aa:70:b9:d9:15:f5:64:24:8e:06:13:d1:da:
e6:1c:c9:5f:71:df:1c:ef:40:06:68:40:1b:29:95:
a7:10:f4:57:9e:ba:51:7c:0f:ac:74:56:6e:39:9d:
0b:fe:10:26:d3:6c:bd:40:77:1c:f9:c9:24:2b:a5:
be:ff:79:e4:0a:45:43:75:85:31:a8:4d:52:a6:7a:
15:8a:88:8c:46:1b:63:c5:32:0e:cf:69:bc:b3:c8:
95:a0:66:b8:6d:61:79:eb:1c:08:11:7f:d6:4b:9d:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FC:D1:48:DA:3B:E4:FE:CD:72:EF:60:BE:22:7E:08:16:3D:4A:15
X509v3 Authority Key Identifier:
keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f6:7d:bc:ac:65:95:c8:c2:cc:da:34:1e:87:72:a8:ad:d1:
a3:6d:67:99:ae:f0:34:c5:a6:02:5c:90:08:ec:52:34:66:95:
46:f0:f2:2b:64:68:53:ea:e0:92:6b:80:9c:9b:67:d0:7d:64:
f7:a1:74:ec:11:12:ab:02:b6:04:48:ff:ab:52:26:42:c5:a5:
d2:e0:5d:09:11:aa:8b:32:b5:1f:a3:eb:e6:b9:60:26:45:2a:
1e:17:1f:af:c1:0b:19:2e:36:b7:26:e7:40:de:50:11:3f:29:
0e:d8:73:72:ee:04:f1:a4:fe:9e:47:9f:56:9f:aa:d8:7c:83:
01:ee:50:6a:06:29:8d:9f:7a:98:f8:ab:30:b3:1c:84:3e:c1:
b0:5a:84:32:ce:05:69:a0:1e:e7:6d:93:22:7d:b5:41:bd:42:
da:56:2e:b3:65:f1:3d:ce:42:6b:c5:69:52:ca:b4:b7:71:ea:
05:12:00:ac:b9:72:45:57:46:16:c9:7d:c9:49:69:0e:15:b6:
10:60:90:e9:59:94:c5:9a:25:2c:57:97:05:0f:9c:52:ef:3f:
37:a3:6b:e1:63:e6:9a:0c:d4:75:ff:39:14:40:20:85:c9:b4:
02:be:f5:af:7d:fb:b6:c4:d8:fc:79:01:9b:7d:24:f8:f9:97:
c3:36:d8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:32:20 2026 by rpki-client