Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
File: gvWThvzeWW90WQde3qTXTBmwHKI.mft (raw, json)
Hash identifier: WyrJS9nJ0oHESjxFrDlQB8uUPgVrH+Hh9uyOwN5YoZ4=
Subject key identifier: 2B:83:9B:85:E1:C8:77:CB:3B:66:0B:F8:24:F3:92:43:28:68:DC:64
Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Certificate issuer: /CN=82f59386fcde596f7459075edea4d74c19b01ca2
Certificate serial: 019D2AA9B026729F71648E2FFC7EA25F677C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
Manifest number: 0B27
Signing time: Thu 26 Mar 2026 15:00:56 +0000
Manifest this update: Thu 26 Mar 2026 15:00:56 +0000
Manifest next update: Fri 27 Mar 2026 15:00:56 +0000
Files and hashes: 1: gvWThvzeWW90WQde3qTXTBmwHKI.crl (hash: QAZbuS4zHdwaLycgktrWR3rNb8ZLWcb8CO7eYYZtYLo=)
2: oNme18aqaGDrD5K5b2ZaxV8XqFA.roa (hash: jX5vfMnloLvbY3zgwIk6xP963slmPBqIZT69KIJCHjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:b0:26:72:9f:71:64:8e:2f:fc:7e:a2:5f:67:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2
Validity
Not Before: Mar 26 15:00:56 2026 GMT
Not After : Mar 27 15:00:56 2026 GMT
Subject: CN=2b839b85e1c877cb3b660bf824f392432868dc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:58:68:17:99:29:59:7d:bc:ac:82:8a:b8:
1f:9c:f5:0f:00:d0:d8:8b:94:80:b1:52:89:7f:ed:
c9:0b:cf:73:81:16:e5:1a:8b:7d:ba:67:07:25:83:
2d:0b:a9:c9:86:46:4f:11:93:99:e5:1e:34:af:ea:
2b:ef:8d:66:26:dd:27:41:0c:84:41:43:9a:d0:c4:
23:81:cc:4c:1c:85:28:1c:af:2c:5b:ec:bc:90:9f:
b1:34:03:00:6f:61:a8:1e:2d:b7:5f:37:c2:69:4b:
48:45:2c:e8:4e:d5:e5:29:c6:f4:a8:b7:c5:4f:35:
0b:6f:da:92:5b:a3:d1:f5:b8:ed:03:6c:69:37:fc:
f2:a2:9a:20:92:e8:96:92:d4:09:b5:87:47:71:11:
ee:10:5c:cd:4d:74:51:91:1d:79:f9:57:42:a0:a8:
a6:66:90:64:de:2b:f4:60:a1:69:8e:b6:97:07:ca:
06:6d:6b:f6:c6:0f:67:94:44:a3:0e:85:80:4b:45:
db:b3:58:fb:ef:0a:3c:c7:c7:bf:e9:d7:32:70:1d:
68:6c:cd:cd:8d:c5:1a:8a:7f:c1:55:eb:14:22:e4:
de:a6:d1:5a:4a:37:9e:aa:61:21:18:d9:99:d4:00:
30:03:80:3f:35:5c:b0:75:80:83:39:98:9b:43:08:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:83:9B:85:E1:C8:77:CB:3B:66:0B:F8:24:F3:92:43:28:68:DC:64
X509v3 Authority Key Identifier:
keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cb:ce:dc:9a:de:6b:f6:7c:3a:d0:8c:3f:3a:de:ea:83:0a:
0c:e6:45:57:89:ce:51:c5:78:7b:f6:fe:81:fe:68:97:cb:9e:
1f:77:95:64:fb:a1:a3:df:8f:cb:49:23:ac:70:7e:13:32:3d:
3b:04:2d:e7:d5:3b:11:0c:db:56:6e:a6:79:32:35:4a:f9:b3:
61:cf:4f:9a:a2:08:d1:41:75:8c:a7:74:f1:e5:5f:a4:aa:9e:
4f:94:2d:ce:cb:fc:51:cd:2d:97:f0:78:96:c7:ef:13:4f:d0:
b2:b6:40:73:68:9b:e0:5e:08:3f:1f:61:44:a8:d0:dd:7a:95:
e1:2b:67:7a:25:bc:2d:9a:96:5e:ec:85:6f:15:72:13:e3:6a:
54:8c:69:09:53:53:2b:81:1b:06:f2:67:f9:9e:26:81:1b:76:
5b:48:dd:85:49:d0:6d:e4:5d:c1:6f:e2:83:a0:ad:ac:85:93:
14:f0:64:f4:af:6e:3c:b4:b3:52:dd:5e:1f:e5:5c:d8:40:da:
f6:82:d4:7c:40:51:1d:77:b8:e2:c5:9b:6c:75:13:8d:d4:9a:
b8:17:e1:00:31:65:73:44:2e:c2:08:94:a6:e0:73:26:5c:58:
5b:5a:71:cb:de:fd:95:72:b0:1d:be:55:2f:e5:36:b9:69:ec:
18:ac:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:00:25 2026 by rpki-client