Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
File: GpRvSoJtYiozjtg-CvzfeMh2BPg.mft (raw, json)
Hash identifier: AG85fIJAivOFv8BbkZAKXe1PQXV5YtD6nr8+X9DG0/8=
Subject key identifier: EC:89:B4:7C:F5:DB:96:D7:17:94:56:5C:35:93:43:78:8F:EF:72:5B
Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
Certificate issuer: /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Certificate serial: 019CAD22893ED60DEBDDFF6D904094C92FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
Manifest number: 1144
Signing time: Mon 02 Mar 2026 06:00:47 +0000
Manifest this update: Mon 02 Mar 2026 06:00:47 +0000
Manifest next update: Tue 03 Mar 2026 06:00:47 +0000
Files and hashes: 1: Ch0DBTwPBELRLNgplM4F3s9-zYY.roa (hash: 9L/0ugpJ1EuWwvVV5p15VHSh4bTMj4enT9HVoaEisEA=)
2: GpRvSoJtYiozjtg-CvzfeMh2BPg.crl (hash: VrZZLYFBTltFUwyHoPIQBAHQddWCRuzplk9tQ4OQXwg=)
3: z3lXdGSjKPDwJS_9eOiM2U2dzYI.roa (hash: HNTupTEuceZ5gELV1uOyvKnT6W4FN7qKEOgUBgkkmsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:89:3e:d6:0d:eb:dd:ff:6d:90:40:94:c9:2f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Validity
Not Before: Mar 2 06:00:47 2026 GMT
Not After : Mar 3 06:00:47 2026 GMT
Subject: CN=ec89b47cf5db96d71794565c359343788fef725b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:cd:2a:fb:c4:04:2c:cc:43:62:84:77:1c:
92:89:a4:91:a4:ab:df:04:d0:66:c8:d3:74:a7:29:
a8:ea:b2:56:be:ba:16:28:e7:07:57:dc:52:8f:01:
e3:8c:e0:62:1b:bd:8d:ba:72:5c:75:2c:8e:0a:24:
61:b6:45:28:55:17:07:49:c5:ba:c1:e2:b1:90:ee:
0f:30:d7:48:20:5a:be:2c:f0:ae:58:06:50:cf:f8:
a2:c6:72:4c:4d:10:49:09:50:61:07:84:78:0d:6a:
88:3b:83:ac:3b:c1:84:c4:ff:f4:8b:ff:5e:f5:2b:
6d:b1:6d:04:fd:b9:5c:f4:62:a9:78:74:a6:28:2c:
94:18:aa:34:e1:1d:cb:26:c6:df:bc:ae:ee:f7:2d:
ad:22:26:0e:fe:4b:36:7f:0a:3b:ab:5d:e8:e0:14:
bb:3c:88:62:0a:6d:b2:18:b4:53:cf:cb:1a:81:1a:
c7:d6:92:8e:37:01:a8:13:5f:12:be:4a:fc:85:e3:
65:2c:8a:a7:57:0e:77:74:79:74:8d:db:4f:92:53:
ac:4d:29:8c:89:2b:f8:43:2d:cf:cb:24:33:c4:46:
bd:9e:38:54:55:2c:00:39:0d:4c:f2:2d:6e:ce:d3:
b2:40:df:39:43:0b:ff:82:07:17:dc:50:8b:a2:83:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:89:B4:7C:F5:DB:96:D7:17:94:56:5C:35:93:43:78:8F:EF:72:5B
X509v3 Authority Key Identifier:
keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a2:98:92:16:6d:92:33:6d:b9:c0:3a:dd:9a:c7:ce:f3:70:
5d:1c:35:38:29:d7:82:21:c7:dd:f3:60:4f:70:f7:6e:03:43:
ea:e4:c0:28:1d:2b:63:6c:06:f9:ee:e1:9f:9e:4f:e4:9d:94:
5b:9c:72:c2:8f:1b:ce:16:de:86:a0:9c:4f:69:46:3a:d3:65:
06:7c:67:d7:9d:4a:6e:00:61:3b:cf:1e:4a:25:3a:78:59:84:
59:76:7a:e5:b1:17:67:18:07:8c:f5:a0:bd:88:a8:0f:d1:60:
fb:e5:7f:63:42:2f:15:4a:9c:97:e0:d1:1c:a4:fb:6f:db:3a:
13:7a:32:5f:75:72:1c:52:64:37:7f:77:2c:b0:21:8b:44:9d:
2a:c9:5b:28:6a:8c:56:59:ce:83:05:91:49:91:00:61:34:68:
e1:3e:2c:88:60:73:18:c1:d3:c0:e4:2c:aa:a7:8c:65:9e:6f:
a8:94:99:03:79:b3:d0:4f:db:17:e0:70:15:fe:a2:4d:b9:53:
66:b1:5e:d2:cb:2c:5f:6a:de:cb:34:47:94:33:15:93:4b:70:
f4:e3:0b:c3:6b:07:26:2b:78:c9:ca:28:c0:15:ed:82:29:d6:
6a:60:a5:bc:e5:d6:a8:dd:47:a0:c8:22:b3:9c:7d:a9:68:ec:
4c:8e:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:44:31 2026 by rpki-client