Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
File: _GpMWV8LLdBaH-Zyh8E84OvICts.mft (raw, json)
Hash identifier: OPfskUT14dIOYZT5G0VxlSWv7qhInOypXZ2A7Y24r0I=
Subject key identifier: 22:08:0E:BC:D4:01:D6:DA:70:20:A2:80:19:37:14:76:F9:60:DB:C6
Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Certificate issuer: /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Certificate serial: 019D2583E6E37D735334DC2267EEB8A9A39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 15:01:34 +0000
Manifest this update: Wed 25 Mar 2026 15:01:34 +0000
Manifest next update: Thu 26 Mar 2026 15:01:34 +0000
Files and hashes: 1: NLoNNi5CjHst33m7ywBlAPo2j9g.roa (hash: fKsxjWS8XzZz8fe3QPRIR0J9BUvOdRhlN77VHIREw+U=)
2: _GpMWV8LLdBaH-Zyh8E84OvICts.crl (hash: JTSxBIrbckpgvhNlVioDx1PmgRJzVRZbeb8odemRs0A=)
3: ieUGguqrKvcNhkrMXAP72jx_K8Q.roa (hash: FH+hfr4zdjk2044475wgvLS1qj40hiexUTsIxUjhke0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:e6:e3:7d:73:53:34:dc:22:67:ee:b8:a9:a3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Validity
Not Before: Mar 25 15:01:34 2026 GMT
Not After : Mar 26 15:01:34 2026 GMT
Subject: CN=22080ebcd401d6da7020a28019371476f960dbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f3:14:fb:f3:07:40:68:c2:38:53:c0:2f:5d:
40:c2:6c:4b:7f:2f:a2:9f:68:ed:78:78:45:d9:62:
4f:36:35:56:a7:1c:86:e8:30:11:a3:eb:52:ec:03:
b7:b5:da:d6:77:62:fb:16:86:ec:63:fc:ab:2d:ca:
e8:83:00:11:7b:3b:91:b1:ca:ae:44:f6:06:e9:81:
c3:b3:0d:1c:74:7e:06:c0:05:64:3d:d4:de:5c:b6:
cb:fc:e2:cc:b0:4e:07:95:e9:6b:51:18:46:7d:ce:
a4:75:38:98:d4:63:36:d8:fb:7d:de:5b:b8:0b:a6:
be:50:38:06:80:17:52:70:95:d6:2a:1d:a3:90:53:
dd:6d:38:7d:f0:77:dc:f4:d9:8f:c0:2c:6c:16:ff:
84:7a:a2:e8:5b:11:d6:9c:76:c1:ed:13:14:b6:58:
5a:ca:18:a1:9a:08:47:db:f3:7a:7b:df:a9:7f:00:
58:c6:a0:e0:34:7b:ae:db:22:d9:60:52:2d:37:0f:
07:d8:1d:64:9b:e8:75:2e:b7:94:9b:de:40:2f:e9:
9d:63:d8:91:ca:0f:3c:04:42:69:9a:a1:59:42:3e:
0a:c0:4e:40:1d:59:4b:21:fe:98:5d:9b:08:03:f7:
7a:69:4f:b1:81:b5:7a:2e:c0:a0:41:44:d2:82:0a:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:08:0E:BC:D4:01:D6:DA:70:20:A2:80:19:37:14:76:F9:60:DB:C6
X509v3 Authority Key Identifier:
keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0c:23:c5:c4:50:12:51:4c:b4:d9:0d:8f:27:2c:68:32:67:
0c:b4:d0:2f:27:f5:28:f5:37:6f:22:7a:20:ef:f1:63:93:16:
0c:06:88:72:1e:30:7b:dd:4b:ee:7c:74:4b:e1:10:5a:51:7a:
e3:d4:c8:c8:1a:6e:8a:2c:a3:38:7d:d1:b7:8a:c4:f1:a0:e2:
94:71:a7:89:fd:1f:8b:db:4e:97:fa:01:48:44:15:a0:df:bb:
3a:a9:13:da:8a:5d:f3:b5:ac:fa:f7:c6:8d:c9:c0:ad:cf:2c:
e5:66:9a:3e:1a:0c:da:47:4c:4e:2d:c3:6f:af:8f:9b:cb:2a:
bb:d6:e9:23:7e:3e:aa:7f:ff:56:5e:bb:8d:fd:3a:0a:62:88:
4d:01:5b:81:d3:dc:34:7d:da:5b:96:de:39:cb:eb:2e:dc:86:
18:d5:86:e2:ef:e7:0a:72:c2:7e:71:79:70:88:bd:11:05:21:
15:6f:ca:23:d6:90:3c:e3:97:d0:50:c2:0c:d1:1f:b0:83:92:
b4:ba:46:8a:a7:f3:67:4b:69:86:3e:3e:29:b8:6b:f3:1f:e4:
59:5c:ff:8f:1f:dd:1c:4e:e6:2f:26:41:67:05:60:45:e1:6e:
87:57:4e:26:dc:7f:22:d3:f5:cf:aa:66:0a:a2:a0:ce:92:44:
9b:4e:59:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:23 2026 by rpki-client