Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: NHnQNLnt4hc+jdEo9yFzXTPF7WSL86btOq8LYKMOmUg=
Subject key identifier: D4:9D:C7:66:CC:F0:33:E3:45:44:F8:2A:41:62:69:84:40:0D:0B:94
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 019CAA588173572152E56E516E04357E32BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 09DA
Signing time: Sun 01 Mar 2026 17:00:52 +0000
Manifest this update: Sun 01 Mar 2026 17:00:52 +0000
Manifest next update: Mon 02 Mar 2026 17:00:52 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: C6by328DbUKBU3ZZ99ndOFATRGAm2npGgrH8uV3e/GU=)
2: oeqcCmqzmosVxM-WY8lmXD_44Ic.roa (hash: QSB9wBcelhQw6T6s+EAUaG07z6Fs95UlwbhmHAqSneQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:81:73:57:21:52:e5:6e:51:6e:04:35:7e:32:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Mar 1 17:00:52 2026 GMT
Not After : Mar 2 17:00:52 2026 GMT
Subject: CN=d49dc766ccf033e34544f82a41626984400d0b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:f8:d9:36:27:0e:80:5a:84:cb:d7:16:6e:
83:6f:20:a8:48:72:56:e8:17:fa:cb:ad:bb:84:12:
7e:79:0b:2f:db:f6:a9:3e:fa:eb:38:f5:e8:7f:c9:
b9:4b:fe:15:ee:e2:cd:20:88:4b:ea:4c:f1:8b:b2:
62:e8:bb:41:dd:fc:a0:29:0a:5a:31:0c:66:1d:1f:
ba:3b:94:19:44:9e:e2:7e:ed:15:4c:35:20:a6:82:
e2:31:e7:f6:35:bb:99:d4:9a:2a:cb:e6:54:10:8f:
68:bb:35:9b:2f:c8:ad:99:55:a1:1e:e1:b0:fe:86:
c6:ff:ec:81:7c:1f:b9:88:b5:6a:58:01:3f:c8:a3:
49:d2:97:ee:25:1e:57:05:b6:61:82:e7:15:4a:11:
be:c8:66:74:c8:22:7b:26:22:2d:1f:87:d2:a6:35:
0a:6d:2f:b5:32:83:68:33:50:07:1c:2f:63:e2:9c:
e1:3c:ee:30:67:54:d2:df:2d:f9:b5:a9:40:0b:17:
8e:b0:21:69:50:37:fe:3f:ef:86:da:57:d9:c4:23:
f2:53:76:d0:9d:9b:c4:e5:f6:8c:26:2b:7f:cd:b7:
cd:cb:2b:f2:d6:a5:6c:e1:1c:78:a8:40:d9:af:fa:
9c:65:59:97:83:6f:a5:ab:91:81:d5:c4:63:9b:18:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9D:C7:66:CC:F0:33:E3:45:44:F8:2A:41:62:69:84:40:0D:0B:94
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:48:82:a0:27:a7:0d:4f:5f:58:79:ee:88:28:3d:d7:61:2d:
c2:92:80:c4:cd:a9:32:3b:c8:03:46:30:03:d0:97:3f:d2:8b:
19:0e:52:93:b8:62:43:af:0b:10:3a:da:52:3e:ad:30:28:f3:
ce:b1:5b:0d:92:df:a4:53:18:57:50:57:9a:05:28:28:0a:d6:
84:eb:75:5c:c0:8e:ab:cd:a7:e7:41:78:73:0f:c0:3c:7a:54:
b5:df:f5:96:ee:f0:cb:6f:f0:ef:9d:6f:7f:db:88:30:72:20:
48:7f:f5:a9:59:c2:b1:cb:33:0c:53:27:af:dd:19:85:27:5b:
21:72:59:cb:e1:e0:57:a0:83:2e:89:59:1a:95:93:45:52:3a:
5e:40:90:03:63:c3:1b:f3:0d:0b:89:6d:7b:3a:a6:af:b4:07:
4d:3b:f6:8a:a1:e1:c0:15:57:70:29:8a:9e:a4:59:32:12:28:
1c:92:d8:b9:8e:67:77:f7:34:dc:aa:9e:9e:52:e1:51:93:44:
71:8e:a5:ff:15:8b:c2:4f:72:12:45:2d:cf:a2:bf:5c:59:46:
20:39:d3:1a:43:57:01:74:11:e8:a1:fe:a6:c6:14:1a:27:0c:
e9:3c:ac:5a:7b:92:87:9c:ad:a7:8e:dc:d2:d4:94:ae:5d:94:
e2:95:58:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:49 2026 by rpki-client