Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: lqtbLAdpytJu8RuRbGn1cUmqsgH8B5KNPm7Noynhgqw=
Subject key identifier: 47:A4:4F:A0:BA:97:B7:0D:1E:FE:1C:CB:0B:B7:DB:2F:E8:DD:1F:96
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 019D28F257E1839C2E9E3EC816EB44FCD467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 0962
Signing time: Thu 26 Mar 2026 07:01:03 +0000
Manifest this update: Thu 26 Mar 2026 07:01:03 +0000
Manifest next update: Fri 27 Mar 2026 07:01:03 +0000
Files and hashes: 1: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (hash: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: qiFOUIFsIiIhEodxuQpoqzNMu8ggr9w8apeuibkAqK0=)
3: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (hash: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY=)
4: XtW69XYWfcYs9FhfW77svXCHmQk.roa (hash: +2PiuVV/xd9FID0vQ4PS/1nWqfCBv4fOx6GV++A7pIo=)
5: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (hash: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:57:e1:83:9c:2e:9e:3e:c8:16:eb:44:fc:d4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Mar 26 07:01:03 2026 GMT
Not After : Mar 27 07:01:03 2026 GMT
Subject: CN=47a44fa0ba97b70d1efe1ccb0bb7db2fe8dd1f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:54:8e:8f:18:51:82:bc:0e:ce:1b:0d:c5:
b1:62:fd:a6:aa:6d:3a:9f:ec:db:d6:e9:8e:5a:58:
d9:52:dd:36:7f:c8:93:17:73:0a:d6:c9:a4:b1:25:
51:dd:f9:da:76:1f:e3:f0:8d:40:60:ee:cb:5d:6b:
36:e6:42:96:b6:9b:fd:79:2c:86:a0:2d:1b:65:d0:
07:26:ee:95:75:32:b7:a8:54:83:17:2e:d8:61:10:
e0:fb:47:21:41:2a:9d:a7:d4:24:5c:42:e0:85:d9:
87:81:0a:bd:c4:4a:5d:be:1b:55:d0:0c:66:33:8f:
50:8c:9b:e9:e3:1d:7f:19:76:d8:fa:cd:23:74:65:
a1:b7:ef:99:2c:3e:02:ae:ab:b9:18:a0:85:22:41:
28:3c:0e:6e:88:89:fc:a4:68:88:ed:fb:47:b1:10:
c3:8c:db:e5:b4:36:86:fc:96:dc:f6:65:6f:42:b3:
a0:da:ad:75:e2:7d:cf:c0:c9:be:83:90:bc:52:21:
c3:e9:ae:65:6d:df:c9:fc:06:6d:a0:86:d5:34:4a:
5d:7f:98:06:21:a7:24:2f:66:16:fe:db:f3:3d:3f:
1f:34:db:52:c2:b1:7b:43:17:c6:5d:75:7d:f0:6e:
49:25:5b:f1:71:f3:d9:53:5c:7b:03:54:27:37:4b:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A4:4F:A0:BA:97:B7:0D:1E:FE:1C:CB:0B:B7:DB:2F:E8:DD:1F:96
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f2:d3:87:d0:8f:5a:33:00:72:1d:d2:34:90:42:7a:43:c9:
27:53:d8:81:c5:bd:37:0a:94:09:da:da:a1:e4:b5:c9:56:fe:
f3:cd:e7:04:b4:b2:38:18:61:8c:5b:90:c2:22:75:34:20:2c:
95:8d:f7:7b:7b:9e:02:73:ef:04:dc:51:46:c9:fc:6f:80:b6:
28:4f:4f:de:7e:b5:27:bd:b8:9a:0c:78:45:70:6a:1f:e5:68:
2c:96:16:bf:65:2c:a4:26:ac:9c:71:22:b9:9a:36:01:cd:ac:
10:72:1d:f1:97:56:b9:da:ea:ef:a8:fd:c5:03:45:57:50:60:
19:2c:77:c9:5b:01:65:35:84:b2:66:a5:cd:08:e9:2f:cd:f6:
66:1b:40:6d:2a:cc:4a:d3:4a:d6:38:b1:e5:9c:b1:7f:fa:8a:
d8:69:1a:7d:c0:58:34:ac:f8:af:02:b3:bd:4a:71:69:a8:9a:
bb:1c:95:8d:a4:d2:93:48:25:f7:dd:d5:b9:00:d4:ae:cc:3f:
e8:73:60:b4:a5:67:12:76:8e:f6:9e:dd:aa:0b:e6:4b:a0:f7:
ee:35:2b:43:9e:54:00:6f:d5:80:71:3c:8e:14:01:ca:53:1e:
e8:59:1b:32:01:9d:0f:4b:3a:e4:56:fd:fc:a1:ad:3d:08:1e:
48:ce:08:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:34 2026 by rpki-client