Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft
File: gjwMX13-U9s74NqofrgP8jOghVU.mft (raw, json)
Hash identifier: m1u8LM06oMSZxzz7fI3nAhCcr8vgUvL1tEgMkCHBRno=
Subject key identifier: 7A:6C:27:C3:05:8D:47:5B:90:58:43:33:AE:90:38:E7:D4:21:D9:F7
Authority key identifier: 82:3C:0C:5F:5D:FE:53:DB:3B:E0:DA:A8:7E:B8:0F:F2:33:A0:85:55
Certificate issuer: /CN=823c0c5f5dfe53db3be0daa87eb80ff233a08555
Certificate serial: 019D26CCCA885B074D20D06C597E20EFD795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft
Manifest number: A5
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: V34l5uFzYw3kKb1sTTfoMorRyxQ.asa (hash: MTaS52CxVyh3Tkcvp3/p/Y0eCYEdwzDZPEbKIi5PiFI=)
2: gjwMX13-U9s74NqofrgP8jOghVU.crl (hash: iJAEn4jLyas//brS7y0K8DPgR0GVlyq6V1SNdu4BSls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ca:88:5b:07:4d:20:d0:6c:59:7e:20:ef:d7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823c0c5f5dfe53db3be0daa87eb80ff233a08555
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=7a6c27c3058d475b90584333ae9038e7d421d9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:9b:4a:e0:ba:3e:22:a9:53:3f:15:ff:49:
56:7e:66:54:79:64:88:32:37:33:74:01:5e:a5:9a:
22:44:e1:3b:4a:8f:ec:1b:bb:5b:67:f0:7e:19:c0:
73:49:80:d0:7a:c3:92:35:bc:67:19:17:47:e1:12:
4b:d2:b6:84:7a:b0:3e:fa:91:62:b4:bf:b9:31:0d:
6f:bf:0d:40:4c:b4:4f:fb:a7:8f:43:a9:44:8a:da:
87:e9:9f:42:1b:fa:7f:58:8b:f0:ef:bc:bc:14:4c:
d5:b6:6a:f1:d2:70:ac:d9:c5:09:70:97:5b:7b:95:
c0:33:0b:0e:a1:ae:5e:d0:a2:3d:62:d2:ae:bd:20:
2c:63:f2:20:15:e6:45:e7:42:17:40:cc:71:e9:bc:
01:8b:f3:e6:eb:56:a1:42:fa:fb:11:bb:81:0e:00:
9b:48:ef:42:0a:b0:98:68:34:74:ce:a1:51:d1:79:
f8:80:1a:80:6f:85:2f:75:69:f6:5d:e7:17:50:9a:
8b:6e:11:f5:eb:fd:6f:57:fc:89:23:d9:ca:68:a3:
c0:7b:cf:a2:28:c0:79:4b:f8:d1:4d:bd:1c:00:3e:
c3:09:0b:29:a3:7b:a5:5f:77:8d:ac:d1:4a:59:61:
12:6f:a5:29:15:14:7d:51:f8:62:9c:76:46:89:87:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6C:27:C3:05:8D:47:5B:90:58:43:33:AE:90:38:E7:D4:21:D9:F7
X509v3 Authority Key Identifier:
keyid:82:3C:0C:5F:5D:FE:53:DB:3B:E0:DA:A8:7E:B8:0F:F2:33:A0:85:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9b:51:f0:e0:8c:8f:dc:d3:2d:0f:a5:78:6a:8c:22:3b:ca:
b9:7f:69:fa:e1:92:fc:7d:53:53:1a:4d:81:6d:0c:32:65:ba:
33:f8:ce:95:29:48:73:08:5f:87:81:ed:9c:a4:65:85:a0:7b:
a8:77:22:e2:ed:1b:11:fa:b3:42:dc:df:c0:a5:ed:40:a1:f6:
a8:8f:7a:1d:b5:b3:9e:3c:a6:b5:fb:3a:33:c4:25:7d:89:3b:
92:a4:66:0f:ca:31:6a:65:cd:b5:e2:10:73:41:b4:6e:b1:a7:
f1:5a:3f:68:47:ea:b4:fa:46:7e:96:9a:74:53:51:21:9a:62:
07:09:5c:9d:7f:2a:e6:14:8a:47:7a:89:c5:77:12:e3:ff:83:
b2:9e:db:bc:f0:22:80:af:78:cd:fd:a6:1f:38:21:9b:cc:1c:
42:3f:bf:e6:45:5a:3a:5b:d9:8c:87:2b:c4:39:ee:ba:9b:ff:
58:e0:ab:3d:a6:16:13:3f:c1:5a:b8:af:b2:6f:c2:e6:b4:76:
a3:8e:2a:74:fa:8d:de:58:d7:91:63:11:0e:31:fb:fb:c5:51:
d8:c5:82:33:82:07:91:3e:77:1b:3b:18:51:80:c8:02:eb:68:
88:9a:17:c3:b7:c2:60:20:8d:8a:44:bb:90:c8:56:75:a9:8a:
ce:28:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:16 2026 by rpki-client