Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
File: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json)
Hash identifier: M9mJJEyRH2652PD4H5HgcRwPv2jMOfPk0g4U5r3Ig5g=
Subject key identifier: 39:11:8B:53:70:AD:BA:D9:F9:55:6D:E0:4C:D6:6E:08:EC:10:27:6D
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial: 019D273B14298A5AD42C9217C28E15AB6D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 23:01:16 +0000
Manifest this update: Wed 25 Mar 2026 23:01:16 +0000
Manifest next update: Thu 26 Mar 2026 23:01:16 +0000
Files and hashes: 1: 7eQNjnQdwqflqSKNBUSkeuNmw7g.roa (hash: KDiDs9BVR3uSy9uhf7YQ+EiuhvYGlWjEWXwSqzhl/zA=)
2: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: 0o+gt+nTUZcA3vlKRTByVcUUzIxLspyrV5MZjSdaAjg=)
3: HqFdFQd3mJjjEoQudvkZxqIuHF4.roa (hash: Q9RLxw/T80VOo7/+EDUnGtAF2QXxYd4cppakgqAvZwY=)
4: Kp3eYJ7kSiZsDu5GffXxRznucgA.roa (hash: +v7HVtK9kA/9s9DQL3HEcP41QigGiyaFVGj2AlPGBaQ=)
5: _YjoM5RgGEqDATh0dggO_ptSVwA.roa (hash: EvlNg6FSVXOlKLDCdTk6bjISKtxW5D9yTRIIrx19hkM=)
6: h4VPt_ezR6pBjF1ytqFfJk_RH_g.roa (hash: B+fnICpLokTB+5ePuFtzYa/q5V0EfzABtX3v8OW1PdQ=)
7: jJUpXp-wy4eDj-VTQpn033oPZ88.roa (hash: aKtKSKKKZ+/EZ2HpVdvSi+ll3PhhXXP06+cpHPYqgcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:14:29:8a:5a:d4:2c:92:17:c2:8e:15:ab:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Validity
Not Before: Mar 25 23:01:16 2026 GMT
Not After : Mar 26 23:01:16 2026 GMT
Subject: CN=39118b5370adbad9f9556de04cd66e08ec10276d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:87:91:63:3f:55:5d:fc:c8:1e:70:16:73:c8:
8f:4c:15:34:9f:38:6c:c0:d1:2a:2c:de:34:55:ce:
12:9a:85:30:f2:58:a8:12:f4:23:74:35:af:03:22:
dc:63:c2:27:6c:a9:43:8f:b7:1a:30:74:98:5e:a7:
99:27:55:73:22:67:47:78:0b:d5:34:ff:ea:6f:bb:
86:a3:04:3b:df:e9:16:eb:5f:b1:6b:d3:16:e9:cd:
af:b8:e7:72:74:f1:81:22:84:5a:cd:9b:bf:46:0a:
6d:e2:85:57:4f:77:9d:a7:4d:35:37:7e:73:5c:08:
7b:3d:8e:d9:75:2f:48:99:e8:6d:9b:80:7c:d1:01:
90:d2:6d:8d:4b:91:90:eb:34:e3:09:ea:ed:0e:11:
da:3a:f6:bb:6d:59:40:5b:ab:04:4c:bc:c8:21:f0:
3f:ee:9c:3a:bc:58:ba:db:4a:3f:af:c8:0d:74:05:
24:61:f0:3f:3c:02:81:c7:30:85:45:f7:81:92:72:
d2:8a:b8:b5:fd:9e:61:aa:91:13:c3:f1:bb:6e:df:
ae:bd:e7:30:63:b8:68:83:5c:7f:74:2c:22:1a:01:
97:f9:b7:c8:8f:1f:d9:5b:ed:51:6d:92:d6:6a:ab:
19:bc:9c:85:e4:a9:a1:d9:4f:25:e6:75:ce:56:76:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:11:8B:53:70:AD:BA:D9:F9:55:6D:E0:4C:D6:6E:08:EC:10:27:6D
X509v3 Authority Key Identifier:
keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b1:d7:c2:f0:0c:26:02:95:b0:c4:cc:fa:04:4e:ae:93:de:
08:56:2c:40:00:b4:91:7f:25:41:4c:86:c4:5f:4a:39:be:70:
71:e3:9b:a6:31:a5:39:5f:c6:b5:73:98:78:43:ef:1a:5d:f1:
7b:08:00:b2:0b:01:0d:c0:cc:11:04:b2:3c:8f:40:24:b9:ec:
22:30:c7:3a:e5:32:2c:4b:27:1d:9d:ec:0d:cb:2a:be:f7:10:
55:f5:af:3d:8b:9f:f2:46:71:39:80:1a:03:e9:6e:e7:bb:f1:
fa:7d:75:56:da:4b:24:71:41:b9:29:b9:5c:b6:47:8a:15:00:
c7:64:34:cc:2e:6c:2f:50:04:b8:bd:f7:79:ee:b2:8a:b5:37:
82:6c:46:38:90:99:9c:86:6e:30:e6:19:1b:7e:6e:f4:23:6e:
0c:23:73:aa:9a:cd:77:80:12:fa:0f:85:d6:95:1d:5f:e6:ce:
47:45:fe:de:ac:3c:ea:a8:c9:46:c9:55:21:99:28:91:d0:88:
38:e4:db:69:30:fa:a9:a4:8a:8c:3a:34:d6:e7:a4:15:68:2d:
25:51:7a:7b:80:71:db:80:b6:d1:9d:70:50:5d:ab:a1:f9:1d:
57:b2:4c:a0:a7:4e:d5:52:ab:24:98:29:6b:68:bc:90:eb:c7:
8a:54:af:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:19 2026 by rpki-client