Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: 0cd2YfWf7eKaLpL8MZOQMBeutWvxCS63r27spmm8Sd8=
Subject key identifier: FE:88:91:F4:77:BD:CB:B4:8B:BA:9A:BA:02:AC:A8:2D:9C:D1:B2:E4
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 019D27041DF708325CF1890FE68974B88184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 189B
Signing time: Wed 25 Mar 2026 22:01:14 +0000
Manifest this update: Wed 25 Mar 2026 22:01:14 +0000
Manifest next update: Thu 26 Mar 2026 22:01:14 +0000
Files and hashes: 1: BCTCosehzN-IVujDky1DFPEPdk8.roa (hash: dD51Omff3fmTkuQoAW0zLyIe0HD79k7wegGUmnwdJ5U=)
2: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: rXFKeDal6mgX4ZvsASrFFYwrH+Jzz7wMpteNI2CbiKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:1d:f7:08:32:5c:f1:89:0f:e6:89:74:b8:81:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Mar 25 22:01:14 2026 GMT
Not After : Mar 26 22:01:14 2026 GMT
Subject: CN=fe8891f477bdcbb48bba9aba02aca82d9cd1b2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:8b:3a:e7:e4:e1:cf:e4:09:bd:5a:45:58:
af:6e:f8:d2:3e:de:5b:82:6c:56:12:fc:9b:63:c0:
8c:39:ac:7a:f0:15:d9:87:0b:48:10:2f:46:da:07:
cd:fe:a2:f8:f9:c2:6d:92:83:18:10:f7:45:d5:1e:
4a:f1:b5:b2:4c:eb:30:6b:79:e6:d5:66:37:72:8d:
d0:68:da:f8:df:09:74:d1:42:f2:88:f0:34:87:33:
8f:b0:d9:29:7b:bd:aa:4f:17:c0:a8:2d:f1:4b:26:
4e:11:67:e6:47:95:78:30:c9:6b:12:c3:16:a4:f0:
72:5f:38:bb:f7:b7:25:1b:8a:49:87:ae:d0:45:2c:
a9:c1:ec:c8:b3:48:ed:68:06:32:ab:66:c6:10:2c:
b4:60:31:70:61:59:db:39:9f:13:f6:9e:d6:18:c6:
87:ba:7e:17:c5:fe:7d:99:4d:67:b0:08:b3:ce:f9:
2e:74:98:37:47:ed:55:53:13:cb:29:9a:02:82:0e:
a2:01:d4:f0:f3:6e:79:1e:af:e1:6b:24:13:1f:a1:
95:68:cf:45:22:e5:c5:da:15:4d:cf:72:0d:4d:44:
b2:78:cb:0c:03:bb:50:0b:53:8d:69:51:41:66:eb:
1e:ba:d4:37:57:bd:ce:1d:30:5a:a9:d0:40:f8:b3:
f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:88:91:F4:77:BD:CB:B4:8B:BA:9A:BA:02:AC:A8:2D:9C:D1:B2:E4
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:93:ba:c4:12:50:29:66:c4:bc:fa:ed:57:99:3f:2b:cc:e1:
f0:03:07:7d:54:d9:c3:a6:23:6b:1e:2d:92:8c:8f:64:22:ba:
48:14:d3:83:08:99:51:16:a7:17:6b:ad:e0:02:23:e8:48:3f:
56:22:32:14:60:d5:d6:f4:8d:7f:af:a0:b0:17:01:f1:20:d3:
1d:19:2c:79:d1:29:5b:16:f3:08:62:9f:d8:ab:96:4a:98:64:
3e:1e:6c:f8:e0:86:58:db:f0:41:65:46:96:c9:11:ae:c1:7f:
80:f6:97:89:29:d4:be:6f:cc:9c:dd:b2:55:60:86:3f:91:0d:
bd:ae:b3:40:3f:48:95:b2:61:be:a4:c6:e0:21:03:6c:2d:eb:
8b:fd:40:fd:e2:c1:d9:67:5d:7a:1a:bb:79:9d:79:b9:a6:85:
c9:34:0c:2c:b9:f4:98:16:c2:94:17:05:ad:75:06:f6:45:b3:
3d:57:6f:13:6b:66:12:cd:f6:89:9e:ee:a0:75:37:d2:48:29:
90:bd:23:53:53:07:83:5c:5d:ad:07:f2:25:f5:45:03:64:e1:
d7:73:9f:bb:9d:a7:48:98:92:1a:57:46:c0:ac:4f:6e:6b:27:
81:13:ca:b2:b4:f7:08:1c:c1:e2:f3:9a:c1:0f:79:0d:94:be:
ee:d5:c6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:57 2026 by rpki-client