Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json)
Hash identifier: fCqqu4ILjSeM7Oe3yFgTu5/6RpA+3+JSg5ZZpBuQK48=
Subject key identifier: A9:1F:73:BF:7C:36:7D:D9:BC:53:54:3E:6B:F8:F3:3D:51:98:6A:B3
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial: 019CABD909CE25DC12910C6843351D561D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
Manifest number: 0BBA
Signing time: Mon 02 Mar 2026 00:00:53 +0000
Manifest this update: Mon 02 Mar 2026 00:00:53 +0000
Manifest next update: Tue 03 Mar 2026 00:00:53 +0000
Files and hashes: 1: IVL7dLrg6wGDU1LsfYsBBP5fLww.roa (hash: nXXz2gE0BqsxA3+AlASgnT6agymsn4mqf9G776nMdI8=)
2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: 5YW2CIj5UnFak1Zm1q8rawsv3F3PnG2XUKsNmXJmDwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:09:ce:25:dc:12:91:0c:68:43:35:1d:56:1d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Validity
Not Before: Mar 2 00:00:53 2026 GMT
Not After : Mar 3 00:00:53 2026 GMT
Subject: CN=a91f73bf7c367dd9bc53543e6bf8f33d51986ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:c5:d5:8b:6f:8d:b7:11:32:0d:11:23:84:
8e:f1:44:2b:40:c0:22:67:55:fc:07:ff:63:ab:18:
33:08:07:5c:a2:64:2c:da:85:97:62:d1:29:7e:0e:
23:64:7c:b0:15:86:c4:dd:d2:3e:d8:b6:6b:7d:b5:
68:00:27:46:17:8c:5d:ea:dc:1d:48:9a:d0:7e:b0:
7b:bb:b9:4f:d1:e0:01:f0:b7:c3:88:9e:8b:05:64:
26:ab:60:de:f3:ad:e8:3a:1c:16:68:06:b1:8a:b6:
d7:35:75:7e:32:1b:e8:4c:70:bc:3d:55:57:05:33:
61:d9:82:32:1a:f0:b1:bf:b4:69:3c:9b:82:fd:cc:
c3:3b:c2:98:ca:a5:4d:5e:d7:da:7b:19:24:fe:23:
f8:ba:98:26:af:99:1f:16:6e:70:66:c8:ea:86:8e:
c3:f8:0a:46:e7:9d:fd:d0:3d:4a:6e:8e:9c:27:a0:
13:42:5b:41:fb:7c:15:4c:5a:fe:94:d5:28:02:d5:
a4:2d:f0:c4:0b:a0:1f:3d:c3:37:8b:4f:89:f5:17:
39:41:1d:92:c2:66:fc:13:22:d8:ec:4e:9d:b2:05:
0c:66:80:42:65:d4:c2:c9:7a:50:89:91:6e:94:80:
d8:1c:c3:67:48:3a:0b:8c:73:e4:ff:e3:b9:f0:e4:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1F:73:BF:7C:36:7D:D9:BC:53:54:3E:6B:F8:F3:3D:51:98:6A:B3
X509v3 Authority Key Identifier:
keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:75:e9:d3:9c:9a:ae:95:fd:33:03:d5:87:32:8e:51:c4:d8:
c7:37:04:9f:aa:99:c8:32:16:0b:6b:32:4a:26:ec:3e:09:46:
9d:78:97:1f:45:60:5f:70:4e:11:89:4a:9c:62:4e:a4:65:8f:
33:a3:57:be:3c:76:4f:44:c5:2c:3e:f5:7c:fc:b2:7a:ab:e1:
f7:8e:79:d5:c5:64:86:4e:a2:8c:b2:ad:13:46:d7:5f:37:ae:
ab:32:4d:4f:49:18:4a:e4:a8:ee:78:40:1c:69:36:25:b1:44:
31:f0:2a:6f:74:3d:73:9a:9f:59:53:75:9e:fb:23:73:bc:70:
84:df:d7:55:f1:cf:a7:24:7a:56:81:5f:d2:df:7c:c4:16:fd:
a6:3a:ad:da:7d:bd:a0:60:d9:91:4f:24:c6:e0:5c:62:d7:8c:
1c:d9:d1:cb:f2:84:15:6d:36:46:2f:9b:c7:9b:0e:e6:76:46:
a6:a7:e1:09:ea:f3:4f:8f:56:63:59:22:ef:bd:98:1e:f8:cd:
28:6e:ba:f0:1f:85:66:f0:75:ab:87:2f:cb:1d:5d:ac:c0:3f:
88:53:15:a2:f1:f9:e3:1f:06:22:f7:75:4b:35:f0:da:60:6c:
f3:06:0d:03:63:77:14:b0:4b:4a:0d:4d:31:5c:64:ed:ba:a1:
fd:09:31:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:16:03 2026 by rpki-client