Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
File: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft (raw, json)
Hash identifier: AWxeham4Q4Lvl119RhwNqqw+iwF7tokJz78UdsGD4Dw=
Subject key identifier: B4:0C:F0:DA:11:3E:95:27:07:9A:A9:C9:19:47:E9:AC:EE:D8:D8:93
Authority key identifier: 19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4
Certificate issuer: /CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
Certificate serial: 019D2A3C3F34C192CA0876E0F07921CB4F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
Manifest number: 0CD1
Signing time: Thu 26 Mar 2026 13:01:24 +0000
Manifest this update: Thu 26 Mar 2026 13:01:24 +0000
Manifest next update: Fri 27 Mar 2026 13:01:24 +0000
Files and hashes: 1: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl (hash: Gy9pZNoXofN26wGP1wWvj/3YGG28kCRrtAtYFC0RP+A=)
2: SnBUF-l7sU2GN1xYWmkSVmuspLE.roa (hash: NWqfON704hEJ6MRTsiaDYlhowGx3tqMVvkRiS8+G1qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:3f:34:c1:92:ca:08:76:e0:f0:79:21:cb:4f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
Validity
Not Before: Mar 26 13:01:24 2026 GMT
Not After : Mar 27 13:01:24 2026 GMT
Subject: CN=b40cf0da113e9527079aa9c91947e9aceed8d893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:63:f6:63:ef:08:2b:db:c3:1b:23:c6:22:
05:6b:54:4e:c6:63:90:0b:be:bc:10:41:59:a6:70:
72:c3:2e:7e:20:54:d6:77:f3:32:a0:3d:3f:9a:c2:
c4:1a:5d:f8:e1:ed:55:11:a6:c5:7a:e5:0d:54:34:
36:4a:d2:89:3d:d9:b7:69:02:89:10:14:df:ad:e6:
b8:f9:95:46:5e:8d:eb:90:0c:3b:b9:fb:b4:0e:af:
26:35:17:35:5d:74:9a:ae:66:e8:42:f3:67:7a:53:
41:d6:1f:68:00:9b:30:7f:db:b9:c2:99:d0:15:21:
15:b6:c6:26:01:cd:bb:eb:8b:5c:10:8f:bb:ad:d6:
9c:06:fc:b8:4d:22:a3:fa:32:80:56:9f:06:69:97:
78:63:79:4c:19:90:7d:31:75:65:56:c1:23:70:5d:
88:f2:5a:5a:87:7f:92:8f:24:65:83:6a:77:a2:78:
90:73:e6:ba:32:97:ea:a6:4f:11:b4:00:46:f3:12:
9b:87:b6:be:81:28:f1:82:ed:51:55:bc:8b:7d:fe:
bd:53:8f:ea:0c:ad:41:21:85:6f:d0:13:44:e2:07:
36:38:02:e5:2b:cc:0a:3c:0b:69:ae:36:d0:5e:f8:
41:c9:a8:17:f2:5d:53:8a:2f:60:f9:e6:3e:a4:c7:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0C:F0:DA:11:3E:95:27:07:9A:A9:C9:19:47:E9:AC:EE:D8:D8:93
X509v3 Authority Key Identifier:
keyid:19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fe:5d:2f:fa:b7:65:86:1a:f5:3f:49:72:66:78:2e:a2:bf:
22:c6:02:a0:cc:3b:50:71:c4:c2:8d:ba:07:91:bc:69:87:ba:
62:85:5a:ac:c8:4c:23:e9:51:a3:98:56:12:3b:ca:06:26:10:
64:20:ca:52:ed:96:6e:31:91:34:87:32:9f:ee:6b:50:b9:70:
f8:de:a8:7a:da:86:86:4b:62:d7:3b:75:6c:3d:28:6d:d8:69:
d6:cf:e5:33:80:58:57:72:ba:a6:7e:2a:53:24:f5:73:c2:27:
14:48:0f:2c:5c:56:37:8c:80:ab:5c:af:8a:3c:fc:67:d1:db:
f9:7f:c7:1a:00:46:29:d6:ea:a2:33:8f:f7:e9:95:a5:84:4c:
2e:cd:90:78:68:de:66:ad:64:34:08:9b:2b:69:68:d4:c4:32:
17:ac:04:77:96:9e:27:89:b1:71:e8:8d:4b:fe:bb:17:51:e3:
3b:be:a1:d5:b7:f9:aa:e0:72:3f:cd:5d:19:c4:3a:f8:3b:e5:
61:00:f3:1b:5f:96:d6:bf:b7:91:b8:1b:3d:5a:f6:33:c2:f6:
eb:42:40:ca:29:07:1f:31:9c:8d:94:f3:0b:d4:34:12:75:79:
6a:4b:47:5f:44:1f:62:91:d4:0f:3c:78:a1:7f:9c:e4:8a:0b:
0b:3e:01:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:54:38 2026 by rpki-client