Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: nqrq1RnA70D2LyL00K3MlyPGpi7mlxE8kMwkanGCTH0=
Subject key identifier: 5E:83:68:CA:CB:CB:EF:1B:1A:0D:CD:61:21:2E:08:68:29:9E:31:D0
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 019D2703EDCCCB0ADB2B3BB916D4D1D03303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:02 +0000
Manifest this update: Wed 25 Mar 2026 22:01:02 +0000
Manifest next update: Thu 26 Mar 2026 22:01:02 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: Ttzwshn9z1MTZOor9pReywzXxMCGUf+bRQgv/cPVkr4=)
2: QjFn6_kap5YT5wJGjuWydP9ovDM.roa (hash: /kI/7NdcivqH51KbH9Az38dv1Sm+7SZzBZyhFKOG6OY=)
3: U8WN1zqZlitTPF__hjyiuUy0R1c.roa (hash: mDHRfN2i8bM/0SSYCQob7Dr24tBbE96JKVBgc95p8M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ed:cc:cb:0a:db:2b:3b:b9:16:d4:d1:d0:33:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Mar 25 22:01:02 2026 GMT
Not After : Mar 26 22:01:02 2026 GMT
Subject: CN=5e8368cacbcbef1b1a0dcd61212e0868299e31d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e6:e6:91:da:02:d2:db:a3:cc:e9:8a:c8:19:
55:3a:c2:d7:82:d6:39:14:35:77:ac:73:d7:fa:82:
c5:ab:ee:4d:7e:db:16:8c:54:14:e1:70:10:ab:a4:
8d:64:04:f7:95:d5:34:c9:5f:03:a9:9f:0c:e6:f7:
b4:e4:89:ab:97:1e:d8:ce:ce:e2:c2:a2:3b:e1:66:
c6:77:55:cd:cf:14:fe:ff:7b:d0:46:58:73:cd:d3:
77:3c:85:d6:f4:64:37:66:30:e9:cc:20:88:c3:f3:
0f:54:c4:91:18:9c:e0:cd:94:7e:65:44:b8:2a:6e:
a9:a2:1f:87:52:a5:84:27:54:05:4a:82:9e:d7:48:
73:9a:a9:19:af:f7:9d:6e:e9:1f:67:2a:93:8d:fc:
c8:21:2e:d2:24:25:83:0a:06:18:ac:56:97:5c:59:
c1:da:fd:d0:b6:60:d5:65:3b:f6:43:2b:7f:5e:98:
f6:e7:7d:9d:35:9d:02:97:02:53:22:f2:c3:74:45:
00:ee:73:f5:7d:9b:f0:63:0f:3e:5b:e5:2c:41:bb:
55:e7:e1:4f:89:ab:6e:29:52:b6:01:c6:f9:ef:28:
91:12:40:1c:22:3b:ea:0a:55:d6:a4:5f:38:42:97:
99:89:f1:2b:14:e4:11:04:02:6b:d5:bb:43:11:ca:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:83:68:CA:CB:CB:EF:1B:1A:0D:CD:61:21:2E:08:68:29:9E:31:D0
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ac:4a:f2:5f:5f:ee:43:ee:d5:ea:f3:9c:79:8a:52:4b:0d:
56:f5:ce:da:dd:08:1b:2a:62:38:ac:01:a8:ca:ee:14:69:14:
a5:25:a2:9e:dc:ca:f7:7f:92:18:d2:36:79:61:38:c5:91:ee:
1c:cd:6a:e0:4b:ac:39:71:a0:8e:cd:a0:64:03:b5:1a:0c:b6:
c9:b5:3b:2d:78:b7:77:a2:28:2c:52:fb:5e:ab:12:58:e1:90:
36:55:de:ac:d8:b7:5f:ba:47:6c:9d:53:15:a8:b1:0f:21:d0:
35:bb:88:32:e3:32:c1:f1:33:81:00:66:a0:93:53:af:9c:44:
7c:a3:da:6d:09:55:ff:0b:71:cf:78:a1:04:66:29:b0:ef:79:
b8:c2:ac:78:9f:eb:52:86:ac:a8:fd:4a:12:4b:0f:a1:c3:e7:
73:21:37:71:2a:23:9e:c7:99:7a:b4:b2:ae:ff:d6:f3:64:8b:
7c:cd:5c:b4:8f:c7:88:14:8c:f5:94:10:5b:1a:c3:73:e8:37:
02:80:3d:91:d9:82:84:53:dd:e5:6b:80:cc:7c:5d:27:39:e0:
52:4c:cd:6e:7b:9d:18:4e:40:33:47:cc:d3:51:c5:d9:be:09:
26:a3:43:d1:a1:aa:e2:7b:3c:ca:3c:79:85:1a:bb:66:24:20:
6a:9d:7f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:40:08 2026 by rpki-client