Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
File: gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft (raw, json)
Hash identifier: O2GuO5GJT8ulboereA9OdY0yQfwFkafjeeVsiVQwzoM=
Subject key identifier: DE:7D:CA:44:96:6F:74:E9:D8:E7:E1:BE:F2:8E:3C:0D:C2:45:1B:1D
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 019D26967CB49D062C5DEE57BF04A13F273F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
Manifest number: 1042
Signing time: Wed 25 Mar 2026 20:01:29 +0000
Manifest this update: Wed 25 Mar 2026 20:01:29 +0000
Manifest next update: Thu 26 Mar 2026 20:01:29 +0000
Files and hashes: 1: AOFzHIFEP91V8Omac3aKie9xki8.roa (hash: HMkFQ86ieg8/vv84gq6sItk0FTIJYyGV0fWrEdqsQ4o=)
2: COXiBfifc_qmKtRo5iliPytbk6Y.roa (hash: Yk5Ow5nOsEoU8dsAMXQclepMDy3OLtvSY8ZeR+T0oyI=)
3: CzK0ougq6DriQml9weFMesSYYgM.roa (hash: tRLuwh0Bv5JNCdg32ICwjGupdf04tX4gLT0oELFtUjQ=)
4: gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl (hash: W6JgCJsvgLoRh9LxS33Dz4r79eTLK5OtriSVGhWbOrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:7c:b4:9d:06:2c:5d:ee:57:bf:04:a1:3f:27:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Mar 25 20:01:29 2026 GMT
Not After : Mar 26 20:01:29 2026 GMT
Subject: CN=de7dca44966f74e9d8e7e1bef28e3c0dc2451b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:80:8c:e5:af:34:3e:f8:41:7e:01:0f:30:
da:6c:68:1e:a6:36:de:0b:35:94:b5:fb:e2:83:57:
e5:e4:be:ea:05:e0:2f:29:a2:dd:c5:85:e7:d5:5b:
cd:12:21:21:fa:d8:17:a0:6f:8b:04:68:fe:c2:51:
0c:3d:c7:c2:ca:a8:ad:f9:a8:c3:a2:92:ea:eb:e1:
be:bc:b3:d8:73:57:80:91:0c:ff:8f:e7:80:4a:89:
ff:42:9c:81:a7:fa:0f:85:8d:69:a7:66:7c:45:0d:
13:60:95:44:5f:49:88:7a:77:a7:94:f1:1f:58:06:
0e:be:59:0f:b0:e1:1d:52:a6:fe:0c:6a:38:6d:fe:
c7:f2:35:67:24:97:bd:c1:41:e8:90:6a:72:de:f1:
b9:04:a1:3d:0d:5f:22:7f:3d:36:82:b3:20:17:6c:
14:55:4c:bc:8f:a0:73:1c:4b:3d:5f:4f:46:ba:9d:
0a:b6:bc:1f:a3:b3:ea:f9:81:ad:75:0b:5b:4d:38:
ed:65:06:e0:11:79:3e:af:72:06:14:4c:2e:ef:83:
00:50:a4:94:b8:7a:ad:39:cb:2a:7a:49:f4:88:ce:
8e:6a:8e:93:a5:90:7d:6d:e1:4b:a2:e7:3f:d9:bd:
47:40:0a:78:48:77:ff:43:c2:52:e2:00:56:c8:44:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7D:CA:44:96:6F:74:E9:D8:E7:E1:BE:F2:8E:3C:0D:C2:45:1B:1D
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:58:32:9d:3a:ee:de:3d:ed:09:6b:ed:a5:ce:80:09:db:59:
f9:08:6e:d1:17:ab:fa:3c:c4:0c:08:95:20:2b:eb:b3:b9:ae:
d1:f3:a1:b3:b0:91:28:3d:94:db:2c:41:27:36:4e:b8:88:82:
c6:2b:db:d2:17:44:67:f6:a8:c5:67:eb:26:a9:d3:2d:17:9c:
0d:c2:b1:9a:57:a8:5b:f8:4f:4c:25:26:03:b2:66:ea:d9:e3:
6b:c7:2f:c9:55:2f:87:1b:6e:e3:7d:97:4f:87:04:4e:08:6b:
42:10:6a:72:dd:56:52:12:dc:17:92:46:7e:5d:19:61:e8:1a:
6f:aa:2b:ec:fa:d2:2d:4e:de:8a:14:77:ba:34:e7:4a:8c:28:
8f:e2:06:54:ca:00:84:4b:0d:b2:9b:c2:cf:50:15:df:46:a1:
b7:82:0a:3c:67:f2:25:77:99:28:5e:41:c1:2e:52:29:04:14:
ff:47:86:ba:01:05:a5:aa:df:6a:9d:43:d9:4e:70:f1:15:4e:
70:15:de:e3:c6:66:5a:e1:61:09:45:46:cd:1c:50:a8:34:9b:
4f:37:d2:93:71:68:44:a4:8a:c7:e8:a2:27:0b:e5:6b:fc:ba:
9e:f7:e0:cb:57:e1:91:d7:07:3c:b1:95:44:1a:4a:09:f8:7d:
70:28:bf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:21 2026 by rpki-client