
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File: GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier: BhOiTTzAXaoKy+ArU3SKFdRXmoZsciEr0FIAxRwZ51E=
Subject key identifier: 9C:A2:FA:2E:B9:DC:95:E1:60:33:7F:99:9E:31:02:EB:FF:AB:8B:63
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial: 019D28BBD0B3B06F2296CA9FF8893B1A4F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 06:01:30 +0000
Manifest this update: Thu 26 Mar 2026 06:01:30 +0000
Manifest next update: Fri 27 Mar 2026 06:01:30 +0000
Files and hashes: 1: 7owqXESGy_RXh39I2zXYrOmIRmY.roa (hash: uD/kXqY4+DVU4PEvK0O92LooxshLndRFHktHnH9fzjs=)
2: FhTqn0nI2AOefAde-zGtbwEbRRY.roa (hash: pvmj7N2aWwyL4DhPFHc9oWpCfcCMtoks7zjIuX/XA3M=)
3: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: dnlmM7pZUtchtILqT0atq5SaYpAGfjm/NCBIv+ukLlg=)
4: IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa (hash: 9Z9gCW1kabV4H10WypJ+CcaUnOFek5gLKpjj5o/RjC0=)
5: nnLZ_anjPSOLRayVOL-RzewgHwI.roa (hash: 2WaAIYb59kGhe6tvXHb5ioUayH6vLhFoDq8NRlocKJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d0:b3:b0:6f:22:96:ca:9f:f8:89:3b:1a:4f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Validity
Not Before: Mar 26 06:01:30 2026 GMT
Not After : Mar 27 06:01:30 2026 GMT
Subject: CN=9ca2fa2eb9dc95e160337f999e3102ebffab8b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:52:2f:7f:06:62:56:84:be:3c:e1:87:3e:
88:c2:80:bb:95:78:85:31:c6:9b:d8:8b:85:0c:ee:
88:5e:2f:56:d9:68:a2:4e:7e:a0:2a:0f:af:a7:63:
37:47:a6:75:e9:fc:f6:10:d3:9d:89:27:09:a3:ac:
60:b1:71:f8:25:13:5a:bc:bf:c5:69:23:10:81:58:
06:31:91:47:34:af:59:0d:32:2b:d1:0f:f9:6e:18:
db:31:05:98:b4:2d:4b:29:38:7f:43:88:b5:59:e7:
29:b7:e6:45:f4:41:54:ac:d9:68:e1:25:94:fc:bf:
be:8e:4b:2a:11:47:a5:d1:a5:d2:f4:2e:b6:9f:ea:
b3:28:00:60:97:6a:22:d0:df:29:92:97:2a:dd:f2:
10:f4:d6:c1:67:f8:9f:ee:d7:6a:1c:6d:2d:fe:ae:
e7:0d:9e:a4:8f:61:5d:68:b1:23:28:c5:83:73:8d:
36:28:2a:96:64:fe:0f:e0:72:35:7b:8d:ec:35:a0:
d0:34:d3:ac:d9:b6:72:03:4d:61:61:72:e0:e6:d9:
f1:44:3d:b3:d9:46:52:b6:cf:7d:9b:da:6b:8f:30:
df:0b:ba:27:fd:73:29:cc:5d:2a:b6:2e:d1:04:17:
15:49:1f:f4:67:be:f9:12:65:ec:bc:61:bb:1f:17:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A2:FA:2E:B9:DC:95:E1:60:33:7F:99:9E:31:02:EB:FF:AB:8B:63
X509v3 Authority Key Identifier:
keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9a:63:82:22:89:06:a4:a6:a5:60:db:37:c0:e2:e9:cf:30:
60:11:3d:63:5f:b0:71:49:62:70:bf:1c:ac:b4:1d:7a:f1:c5:
d1:08:fc:dc:f1:e4:c7:a8:52:ed:f9:fe:29:52:ac:48:8b:10:
d5:59:68:12:09:ef:85:cd:4d:f2:c0:a2:3e:c0:45:d8:a9:d1:
3d:71:51:dd:34:3d:4c:be:da:67:3f:bf:f4:32:f4:82:90:89:
00:7a:ed:c0:44:af:e5:13:84:9e:2c:0b:3f:a0:b8:5d:35:d0:
2e:3b:d0:59:8a:54:58:0b:9f:35:c1:5e:83:9c:15:64:0d:2a:
b8:b5:2c:71:8a:c5:2a:dd:b8:88:44:ee:26:a3:8f:51:0d:21:
30:ae:cb:ff:6b:cb:85:a0:61:4c:d4:ab:ed:b9:da:a8:07:ae:
41:66:a7:81:c9:cb:4b:d3:21:31:0e:b3:b8:ce:8e:67:eb:a1:
c9:64:eb:f8:f9:67:d1:73:53:89:54:e0:40:f5:58:7f:b3:b1:
93:02:b9:cb:e1:87:bf:a0:7d:64:37:3d:63:eb:88:1c:46:f2:
47:fa:06:86:c3:06:b8:7e:3b:93:0c:08:74:7e:09:4e:1c:f9:
e5:3a:44:50:81:b1:4a:f5:16:56:6f:84:32:db:eb:87:f8:89:
e2:3a:b4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:34 2026 by rpki-client