Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: iotBxRFGDGROGiot4DDRuZND4GJlH/QHBsIwndNxFVQ=
Subject key identifier: B5:CD:44:81:CE:7A:DD:B2:BA:09:8B:35:E7:D7:8E:24:F1:BD:0A:D8
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 019D2884CDE555D267D84E44CEF22DC494AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0A6C
Signing time: Thu 26 Mar 2026 05:01:25 +0000
Manifest this update: Thu 26 Mar 2026 05:01:25 +0000
Manifest next update: Fri 27 Mar 2026 05:01:25 +0000
Files and hashes: 1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: oHSw65ChxXLtbrgBhHTm7PPIr5qJJxwdja40wt9FjhM=)
3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:cd:e5:55:d2:67:d8:4e:44:ce:f2:2d:c4:94:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Mar 26 05:01:25 2026 GMT
Not After : Mar 27 05:01:25 2026 GMT
Subject: CN=b5cd4481ce7addb2ba098b35e7d78e24f1bd0ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:f6:4b:a8:86:a9:b4:e8:a0:66:02:b5:b6:
27:27:dd:2c:82:b5:0a:81:31:36:41:cd:88:a7:8c:
f5:2a:73:05:a7:30:4e:97:40:df:46:aa:50:be:8f:
4b:85:2f:d9:45:ae:63:0e:5b:47:81:78:cf:d4:6a:
1f:5a:78:ca:7f:01:92:56:56:ea:8f:94:0b:b3:41:
88:38:60:da:e4:cc:d9:a7:1a:a9:45:69:cc:b0:dc:
aa:78:e4:ba:02:96:fe:59:40:08:0c:a8:b9:27:53:
d5:91:a4:ca:db:b8:dc:6b:62:a1:57:87:1d:82:69:
62:0f:96:35:d6:14:9c:3d:4a:36:c2:c0:bb:8c:19:
40:0a:37:8d:5d:b9:2b:b0:91:b3:b5:2e:4b:8a:a3:
6f:ee:5e:b5:43:bb:56:ef:3f:f8:c1:cc:94:d8:17:
05:38:43:94:85:3a:c3:93:07:15:18:e8:f0:94:6e:
f5:df:0f:b9:cc:7e:9f:2c:85:a8:e2:21:32:74:30:
10:e1:61:4a:22:f1:5d:54:81:23:9d:93:11:f7:48:
b9:cf:7f:fd:92:de:31:d4:74:6a:7d:7b:ce:63:a4:
7c:ae:4b:78:9e:e3:44:47:fb:f8:b2:34:55:7f:50:
19:cc:1c:db:5e:b7:12:3e:3f:2f:c8:3f:06:c8:ab:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CD:44:81:CE:7A:DD:B2:BA:09:8B:35:E7:D7:8E:24:F1:BD:0A:D8
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5d:98:f6:02:82:80:df:15:91:5c:33:13:4e:83:95:25:70:
f5:83:3f:7d:23:30:00:bf:bb:2a:49:0b:6d:37:86:5d:ca:40:
59:d0:22:de:23:67:16:38:dc:b3:3e:64:d6:e4:e2:b4:15:d0:
7a:bf:fc:79:cb:c4:6c:68:72:15:1a:d5:9c:d7:04:a0:a9:46:
14:5f:5c:40:ea:12:df:5e:ea:d1:5a:38:46:43:4c:53:37:6d:
bc:c5:a3:28:f6:08:2a:4a:85:af:ca:98:55:80:de:50:c7:76:
37:45:87:78:fe:48:9d:d9:c7:ce:d5:7f:d9:76:c5:fc:ce:0c:
32:7b:4e:bd:02:c2:f3:a9:58:95:db:6a:52:0e:8d:40:c0:22:
d4:ed:93:e4:3e:2a:fa:2e:ee:20:52:04:b6:a0:21:1b:31:be:
d1:eb:d3:7b:e7:5a:f4:92:67:b2:01:87:33:50:8a:24:94:84:
d9:3f:d1:58:4d:97:7b:21:d2:fc:f7:79:fb:10:a8:05:76:d6:
15:a5:c8:45:48:2b:36:34:b1:36:f3:b4:49:31:34:d8:e3:06:
81:77:ec:d3:e4:e3:9e:50:18:f5:8d:2c:8d:b6:6b:92:c8:2c:
9b:0a:bb:4e:0a:9c:95:96:12:1c:2f:bc:1b:51:7e:92:8e:14:
a1:61:47:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:02 2026 by rpki-client