Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: MjEhEc3DbquJmydEldCCKmHfzQOK2QfoXwNY7+RF9wo=
Subject key identifier: 35:60:FB:E6:A9:6B:20:CE:9D:8D:25:53:ED:96:0A:0B:6A:18:1F:6B
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 019D25842C7CE1EC0BC53E468DC8264E2581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 15:01:52 +0000
Manifest this update: Wed 25 Mar 2026 15:01:52 +0000
Manifest next update: Thu 26 Mar 2026 15:01:52 +0000
Files and hashes: 1: 84Vy4QZqvQZUIRmhoX03xS6PmHg.asa (hash: mu6fp0Fipel740MCIXuJN9FB1rFnZw35tGJ95/rLm3o=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: Is5z40DAzXGS5bhspeeZ+uTSf4uUtzW5W92oXM8INSs=)
3: zfQjLRUyouMoxd3eQ6QBiqQWAMo.roa (hash: fytzxgaA8VilTty70xA4ueAmIkMerr/peaUGm58YXCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:2c:7c:e1:ec:0b:c5:3e:46:8d:c8:26:4e:25:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Mar 25 15:01:52 2026 GMT
Not After : Mar 26 15:01:52 2026 GMT
Subject: CN=3560fbe6a96b20ce9d8d2553ed960a0b6a181f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e1:6c:18:6f:75:55:d6:c9:2e:25:c2:d7:cd:
6c:ec:34:e7:ed:18:ea:9b:13:9f:8c:a7:2a:88:24:
00:f8:78:db:b5:02:eb:5e:35:6a:f7:bb:6f:1c:a0:
ed:ee:04:10:a5:ae:45:66:56:14:35:30:90:85:db:
f7:40:28:3f:73:63:8a:25:59:fb:7b:63:e3:40:4e:
bd:50:fc:ae:49:94:b0:6d:a9:5b:42:cf:bf:49:0d:
dc:35:89:d6:1f:c9:60:5c:69:ac:dc:c6:db:54:7f:
fd:cf:06:62:1d:35:fa:4a:7e:fc:ba:15:a8:8d:50:
a3:78:42:40:6d:43:20:ee:77:4a:8e:26:3a:32:c8:
d1:5f:54:b2:db:e0:11:04:51:a6:02:54:44:0b:f8:
d3:54:1d:36:20:b4:08:0e:e9:2c:fd:11:c8:c5:33:
ff:bd:da:0b:61:60:86:56:96:0c:d9:10:f6:aa:64:
84:11:40:e1:d8:42:aa:71:73:12:bc:e7:67:64:61:
4a:0f:9f:c1:1c:05:a3:b0:9e:2d:fd:21:33:1b:6d:
67:66:49:3c:38:19:dd:db:0e:6b:1a:3c:59:a5:ec:
74:90:cf:72:88:13:ab:7b:0b:98:ef:f3:16:01:89:
a4:86:d8:9b:37:dc:94:16:be:a6:5c:5a:a5:bb:98:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:60:FB:E6:A9:6B:20:CE:9D:8D:25:53:ED:96:0A:0B:6A:18:1F:6B
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c5:46:0e:0e:6a:3a:a5:e9:b4:88:e2:b7:d9:3a:f2:0b:64:
16:b9:0e:c9:e2:4d:ae:8a:30:01:72:bd:d1:0e:e6:59:2c:b9:
9e:5c:38:a7:52:9a:7c:b9:96:5f:c4:60:ac:1e:d4:7d:12:83:
c9:49:0a:e8:74:50:0b:cd:8c:c5:e3:f5:df:00:6d:5f:a1:f3:
6e:3b:76:78:0a:4d:c3:0b:22:e7:63:5d:b9:d2:74:cb:65:c8:
d6:82:f1:74:26:13:b8:db:13:e1:7c:30:fd:99:fb:04:bb:48:
9e:b2:d4:26:2b:0e:e5:5a:3f:ac:38:56:5a:07:d0:f5:d2:2a:
c1:4c:5c:23:a9:cf:6b:7f:95:d0:ec:7b:a4:8d:3f:d4:78:66:
b5:1f:63:f9:b8:c3:50:9e:63:06:8b:69:3d:37:4f:e2:2f:52:
2b:b5:75:b5:4c:5c:86:6e:3f:15:b0:13:66:4d:c6:a7:ed:6d:
cc:32:86:00:79:41:7d:91:6e:aa:59:34:ea:39:b7:ae:05:87:
a9:e1:c2:57:9b:a7:34:93:7d:a9:8c:68:a0:d1:f5:e5:6d:5a:
ba:33:91:7e:43:cb:16:17:68:3f:59:03:30:de:b7:83:ec:a5:
80:4f:67:35:8b:11:ab:4b:0f:fa:f0:a1:d6:04:76:e5:64:23:
c0:84:07:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:44 2026 by rpki-client