Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
File: gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json)
Hash identifier: +ZZ8Rxv3BBw2UVtnNbtw2PzEQRK9Sd1auXPAUPeiR2E=
Subject key identifier: 38:AB:F1:FC:5F:21:89:B6:79:BF:E6:E7:31:02:05:74:4B:C4:24:90
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial: 019D265F57B61E1AD59C8C84F6C8C416AFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
Manifest number: 0F6C
Signing time: Wed 25 Mar 2026 19:01:15 +0000
Manifest this update: Wed 25 Mar 2026 19:01:15 +0000
Manifest next update: Thu 26 Mar 2026 19:01:15 +0000
Files and hashes: 1: 5GkzwsX2SAkCt9B6c4atkjd4rkM.roa (hash: 8XwwTszWSwQ0ODWiARrL0mvIBAeBsaR0WFrNoJhXWyY=)
2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: 1K9nzk696Xs2OMUMgp+0Xj/93FM5fG13tAbpifplwNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:57:b6:1e:1a:d5:9c:8c:84:f6:c8:c4:16:af:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
Validity
Not Before: Mar 25 19:01:15 2026 GMT
Not After : Mar 26 19:01:15 2026 GMT
Subject: CN=38abf1fc5f2189b679bfe6e7310205744bc42490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:df:5a:4a:97:3d:20:23:80:7a:da:44:81:
82:03:a3:5a:2f:e5:b1:96:e2:57:77:3d:a8:de:93:
96:e5:ca:a8:16:8d:cc:1d:4f:37:d3:44:9b:65:27:
98:fd:37:5d:81:0a:99:13:b4:b8:29:3a:13:76:a8:
28:aa:52:ce:6f:2b:a0:bc:9e:93:4d:85:13:26:f6:
03:aa:b0:2f:1d:2c:67:25:e0:7b:3d:4b:91:d1:fe:
7e:32:06:55:1e:50:54:09:4e:a6:5b:0e:45:aa:c0:
0a:0d:74:ba:df:9b:f7:41:fd:8a:14:f9:f8:8c:0b:
7c:af:58:42:d9:dc:0d:d2:65:af:3c:f0:4b:8b:a7:
25:47:3b:16:13:48:d2:9e:ff:79:8a:d5:d8:85:93:
f0:68:b1:16:de:d2:66:7d:d6:9c:95:97:2f:e4:f6:
41:99:26:f9:ea:54:19:e7:49:15:df:de:a0:d9:86:
ea:6b:38:db:6c:fc:3d:82:ee:0b:08:0d:b4:a4:c9:
60:30:73:b0:cf:63:12:70:da:27:bb:4f:e6:f2:d9:
da:ae:b5:22:e6:87:f5:a5:69:ff:a4:b5:f7:73:5d:
94:66:16:6c:98:ab:4a:b2:1a:39:61:42:43:01:cc:
4d:37:5e:e6:d1:7b:6c:47:51:6a:e5:2e:0b:72:d0:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AB:F1:FC:5F:21:89:B6:79:BF:E6:E7:31:02:05:74:4B:C4:24:90
X509v3 Authority Key Identifier:
keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b5:4f:70:af:68:cb:69:59:9c:ed:ce:ca:12:b6:67:66:19:
40:a9:f1:46:fa:de:fd:21:e3:af:4f:ba:be:98:48:58:e9:bf:
39:71:73:60:8f:e6:3f:8c:eb:bc:63:36:13:88:6c:71:d4:38:
7f:d0:f4:ae:13:14:12:c0:07:95:59:f8:ea:7f:b0:1a:89:89:
3b:2f:d8:33:ef:5c:7d:06:3a:99:4f:7b:9f:4f:bd:8a:82:a5:
1c:8d:d2:76:89:5f:e0:b4:6e:c3:2e:1e:17:36:1f:87:93:55:
83:99:b2:43:79:d0:6f:17:d4:07:a1:d7:b7:37:cd:cf:6a:af:
58:9d:68:b3:56:24:7e:90:d9:82:94:0b:5b:bd:f5:b6:8c:73:
ad:e1:95:54:fd:64:51:c7:61:a0:30:ca:8e:c2:39:3d:55:99:
6c:17:ea:e4:b9:13:c3:09:38:9a:e3:1f:50:44:56:d7:38:a5:
ad:14:29:e1:0b:a9:d1:e8:09:df:de:48:e1:61:5e:c2:f9:e8:
82:d6:af:59:b8:4b:c7:26:db:bd:6b:f8:9c:85:34:f9:13:d8:
ee:41:7d:cf:2e:5a:11:1d:7a:d4:ff:df:3c:32:97:eb:64:6a:
0c:b0:d6:91:d2:d8:98:46:56:48:4c:ba:e3:89:96:2b:77:5e:
48:a0:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:12 2026 by rpki-client