Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
File: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json)
Hash identifier: Idc0SeR8AqKUT9qGuPYhiO1jrft9wZ6vCtrlCWWNTT4=
Subject key identifier: 77:B1:CE:94:AF:C2:4C:F8:5D:09:45:A3:ED:4E:D8:87:C1:4B:24:B6
Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
Certificate issuer: /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Certificate serial: 019D28F29B5F3504C54B43909E2B2259CBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
Manifest number: 1144
Signing time: Thu 26 Mar 2026 07:01:21 +0000
Manifest this update: Thu 26 Mar 2026 07:01:21 +0000
Manifest next update: Fri 27 Mar 2026 07:01:21 +0000
Files and hashes: 1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: NrdVFyrkN1hbw50kRCcagrk6wHXHnx7TbK1PrqG+rfE=)
2: sy-wPXvfKLWfZlxG6JFjMdz2jc4.roa (hash: hlaNZxdKE60uOdHncJsjvUxLctHZFlI5jG9Xoxf9FL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:9b:5f:35:04:c5:4b:43:90:9e:2b:22:59:cb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Validity
Not Before: Mar 26 07:01:21 2026 GMT
Not After : Mar 27 07:01:21 2026 GMT
Subject: CN=77b1ce94afc24cf85d0945a3ed4ed887c14b24b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:48:0c:3c:95:cd:83:fa:e7:e4:dd:95:a6:
3c:06:5e:9b:66:e4:fa:0f:86:88:60:af:50:2c:aa:
77:4e:77:7b:b4:7d:70:aa:e0:88:c0:8b:15:f1:d2:
25:1d:f8:e6:cd:b0:5f:39:ef:4e:a2:31:4a:3f:4e:
9b:6e:3c:2e:8d:92:3c:31:d2:01:91:c0:5f:d2:cc:
89:18:9a:ea:1f:d2:ac:f1:fe:c2:90:b0:87:e2:51:
0d:05:6c:ee:5f:89:75:03:88:60:75:57:dd:9a:51:
48:5e:fc:61:49:b6:c8:21:dc:7e:6c:e2:39:fc:93:
34:a4:a5:66:f5:5f:4f:53:05:e1:2f:18:78:86:ff:
8d:98:d4:0b:8f:95:8b:b8:f4:93:84:02:86:0d:b6:
16:5a:81:5b:72:98:68:96:2d:7d:3f:df:79:d3:9f:
8a:66:03:3d:98:f8:71:b3:1b:80:24:d7:45:09:55:
63:1c:29:f5:e2:ee:b5:7b:f6:79:14:18:76:32:86:
46:af:dc:c1:d5:c3:19:8b:49:f6:89:34:bf:f7:00:
7d:46:99:23:84:9b:09:ce:f9:f2:41:f2:38:88:35:
e9:24:71:8b:2d:6a:8f:7c:fa:c1:53:b8:66:e4:d7:
70:ca:a5:d3:2d:16:03:e9:3e:e8:27:37:2b:57:56:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B1:CE:94:AF:C2:4C:F8:5D:09:45:A3:ED:4E:D8:87:C1:4B:24:B6
X509v3 Authority Key Identifier:
keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9f:0e:d8:28:77:53:19:a0:8a:60:63:5f:13:74:23:c5:c7:
79:f4:e6:c2:21:19:62:e1:6c:ef:c7:e4:62:3f:a4:2c:0d:11:
6d:3f:7f:e0:d8:51:c5:6d:79:90:25:bb:63:98:a8:5f:7a:1a:
86:fe:a8:c5:3f:39:76:23:97:73:17:0a:45:2d:93:c6:6e:07:
89:44:c3:b2:88:6d:6e:4d:4e:3c:ef:d1:56:de:5f:6a:1f:94:
80:51:58:93:b7:2d:df:8c:bc:5a:58:83:2e:60:0a:7d:dc:0a:
68:3c:5e:76:c6:c1:db:6f:b5:28:29:33:d6:74:22:3d:e1:a4:
c2:4a:c6:66:17:58:66:f5:b1:f6:23:55:6f:9c:ad:2d:fe:de:
8b:e4:05:b9:ac:84:a2:3a:1b:ed:0a:e9:27:49:cf:14:ed:5f:
3c:21:bf:87:d4:83:56:92:6c:98:44:da:16:31:2e:45:e5:ed:
06:4c:1c:98:ea:db:f1:a0:b5:12:4f:61:58:c3:30:29:c8:03:
02:c1:7e:23:43:1f:b3:fb:22:7d:67:5c:01:3a:ac:9f:c1:be:
61:e4:1b:3a:37:4b:dc:d3:9b:76:5e:f4:d3:a2:4b:fe:81:d6:
48:16:db:1e:7b:72:b4:2d:07:30:3d:0b:55:5d:a4:54:02:a7:
e2:7d:c2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:29 2026 by rpki-client