Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
File: gHmvy6Wodi-3n05eDXo17oTNPfQ.mft (raw, json)
Hash identifier: RrJ6gaYUdP0lYxYtrLraSz3WOJbZFw/f8mQhSqS2UMI=
Subject key identifier: BE:13:E6:EC:17:16:AE:09:03:FD:B0:ED:EC:E6:63:C7:89:3C:8C:1C
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial: 019CAC0F9696A92AE1C02BB8EE5E41934D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
Manifest number: 0EC3
Signing time: Mon 02 Mar 2026 01:00:28 +0000
Manifest this update: Mon 02 Mar 2026 01:00:28 +0000
Manifest next update: Tue 03 Mar 2026 01:00:28 +0000
Files and hashes: 1: 3WDU47d2fLscnSW7F3hgvaXG5ss.roa (hash: BfORbJGgiA+wWZ0EeMRYkEWvSYxDk7NkNvd7Q4xSZco=)
2: C5clDNKWWV0HBKYFKcpzORw8EhA.roa (hash: XUJvNLXyYDdL2C6nEB+rx6DsIA04Nnq77ZyzZhlVv1Q=)
3: E50tmVkqcKJ8hvkMgzElVUsN-nk.roa (hash: v6/X+2RH7lba53xOm7erhTp0p/yhNOGtKRcVvRlqm6o=)
4: gHmvy6Wodi-3n05eDXo17oTNPfQ.crl (hash: OydrvTwWuaAJVnibMP6aaFefHdYEhSo4U0klURM5jew=)
5: ppKOK1k4bpVipnmImPdupSEmNC0.roa (hash: F13uVr28Hl5+Q/lhAirlIzj/fvyS+AXLflKOQ84sZ2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:96:96:a9:2a:e1:c0:2b:b8:ee:5e:41:93:4d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Validity
Not Before: Mar 2 01:00:28 2026 GMT
Not After : Mar 3 01:00:28 2026 GMT
Subject: CN=be13e6ec1716ae0903fdb0edece663c7893c8c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:e7:9e:59:ff:9a:e8:e4:c6:bf:b1:2c:89:
33:cb:f9:92:ab:8b:65:df:9c:3c:ff:9c:c8:0e:df:
91:df:7c:5e:fc:3d:91:d5:f7:8d:54:b9:ea:a3:35:
fb:8c:9c:ae:f6:73:b1:e1:ba:14:01:ab:b0:c7:00:
6c:c9:fe:07:97:a9:d8:61:0e:ac:08:0d:68:10:67:
45:74:0c:30:2b:10:8a:69:04:81:f2:a1:cf:d5:ea:
83:a0:be:57:d8:63:eb:cc:e9:10:47:5f:0a:59:a1:
29:bf:8d:b0:1b:77:fa:5a:fe:42:0a:7f:f0:ce:15:
32:aa:7a:54:22:6e:43:e4:8c:d3:01:c4:af:4d:61:
e2:91:11:6f:fd:a4:c4:6f:11:a6:90:9b:5b:9d:ce:
a5:4d:b5:cc:c5:2e:51:2f:9c:23:16:b1:6b:30:4d:
31:bd:8f:ca:81:7e:ca:4a:07:61:ec:30:a2:95:49:
ea:1f:d5:fa:87:13:fb:18:d3:69:94:98:ac:30:4a:
59:31:22:35:93:d9:79:76:2d:1d:6b:b7:29:7d:15:
b6:87:93:77:16:3f:eb:57:14:a9:a2:30:49:19:3f:
31:c2:f9:57:16:6c:55:67:a5:49:4c:99:78:1a:19:
2e:46:56:8d:7d:81:d3:4e:6b:82:e5:30:ec:4e:3b:
ee:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:13:E6:EC:17:16:AE:09:03:FD:B0:ED:EC:E6:63:C7:89:3C:8C:1C
X509v3 Authority Key Identifier:
keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:d8:82:90:a9:6f:2e:d4:43:88:f4:df:57:e8:33:41:87:7f:
3a:7d:88:b0:1e:06:ab:41:7e:db:63:c4:32:7d:5e:ae:74:b3:
ff:4d:f2:67:40:ac:5d:39:17:08:21:b9:c3:2d:4d:e9:87:18:
b4:91:3a:79:9f:c7:a0:07:02:8a:7e:b4:a0:15:40:6f:6e:2d:
9d:39:86:fc:b7:63:8a:2f:58:0a:27:4e:3d:89:68:49:73:13:
27:16:4b:87:36:f0:fd:33:eb:1e:bd:96:cd:33:5d:d5:37:34:
e5:af:86:89:9c:89:ca:ad:95:50:81:4d:a7:c3:39:77:83:38:
47:60:b0:9c:05:57:03:be:c4:69:22:38:07:b3:43:a3:ad:70:
af:1f:9f:1c:8a:03:8c:9b:07:c8:53:d9:ca:dc:5e:67:f7:69:
ce:b0:87:30:a0:90:fa:9a:a8:b5:8c:d0:8a:37:ae:20:21:8b:
3a:fa:28:5a:67:5f:dd:5f:37:41:a1:72:c8:a5:3d:93:c6:c6:
06:c6:f4:0f:f4:82:82:b9:63:b6:5e:4a:e4:5f:48:39:d8:7d:
da:2d:7d:84:01:06:72:ec:6a:1f:76:3f:1d:43:5f:52:9c:50:
a6:cf:02:68:2f:8b:b2:e3:6d:69:d2:76:a7:d1:d4:6d:94:49:
0b:08:ba:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:35 2026 by rpki-client