Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File: GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier: A6d5iwRZ2Inaa1gBP5BblkvLvG6qxAGsmkeiNkBcwcg=
Subject key identifier: CA:7B:66:59:86:D9:C1:7E:FF:37:45:0F:1E:CB:C3:A0:63:AC:45:7A
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer: /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial: 019CAC4756F1351E88568DDF5CC7CA090016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number: 135D
Signing time: Mon 02 Mar 2026 02:01:22 +0000
Manifest this update: Mon 02 Mar 2026 02:01:22 +0000
Manifest next update: Tue 03 Mar 2026 02:01:22 +0000
Files and hashes: 1: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: dLkJhpaUYzcBLj+pIdL3A5nNxsbhaeKPGzrSgxYQ60Q=)
2: PvoOGCPl9_uRABB0axn6ZoPjSfw.roa (hash: R0bL5Wz36hlUi6u7PbZBlbeTSW6yCz9pE1JTno5Jnd4=)
3: f2RzKPqHeeSwshGgaI03kVuo9ZY.roa (hash: vcuUb/xuMjhKt4KDFSNHCcpL3GkZRwfPEaVwfoajM48=)
4: v6DHuOuOQo5ADYQoffR2c_O6QS8.roa (hash: i6eWCZPdAHUsEhQJa4fw9gAODBNNYJr2pgzQXjsynVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:56:f1:35:1e:88:56:8d:df:5c:c7:ca:09:00:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Validity
Not Before: Mar 2 02:01:22 2026 GMT
Not After : Mar 3 02:01:22 2026 GMT
Subject: CN=ca7b665986d9c17eff37450f1ecbc3a063ac457a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:47:7d:0b:b6:0e:88:f0:e1:3c:b3:4b:b4:
3a:f9:9b:40:19:59:9c:9f:ff:0e:15:c0:88:82:96:
71:3c:1d:98:d5:1e:de:57:69:d8:0a:7a:cc:8d:1e:
60:f4:f6:ca:ce:7d:e2:dc:e1:e7:e1:9c:fb:32:cc:
65:9e:3c:5f:d6:80:f3:6f:15:64:09:55:0d:53:1f:
38:9d:4c:53:87:45:67:e3:0e:bd:c9:81:76:fd:a3:
d7:eb:be:00:7d:e8:52:bb:4f:e3:a9:45:be:8f:bf:
08:b7:31:fc:ee:a2:08:14:dc:5e:ec:44:3d:4f:db:
e3:4e:3e:52:85:b2:81:9f:6b:b4:dc:fc:a9:ad:c0:
e5:dd:3a:9e:52:52:1a:ed:da:93:d4:3e:65:5a:4a:
e1:4a:5a:ed:50:d6:8b:b4:ab:16:52:92:fc:66:58:
a8:86:2e:9a:f0:55:ba:0f:ac:42:ca:6e:bc:68:fd:
73:b2:3e:1e:54:19:8d:29:3a:86:0a:3f:99:04:5b:
4c:2c:f7:0a:72:85:d2:84:6d:dd:18:60:af:95:b2:
b9:74:b9:6c:86:f7:21:0d:67:c8:27:df:ae:e7:39:
89:94:fe:df:f0:ac:bc:82:e1:4c:ea:9c:1c:86:0e:
55:28:04:3b:9f:01:2f:ad:43:e6:46:8f:04:aa:03:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7B:66:59:86:D9:C1:7E:FF:37:45:0F:1E:CB:C3:A0:63:AC:45:7A
X509v3 Authority Key Identifier:
keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f2:0e:f0:b0:c1:5b:e9:69:dd:a0:7d:66:61:8d:93:53:92:
3c:54:f6:b3:c3:61:4a:44:8a:dd:11:08:e9:de:fd:91:f8:bb:
05:fd:6c:34:6e:19:db:69:e6:8b:83:bd:ac:09:02:c1:24:bf:
38:ea:02:5c:c9:45:d6:5e:34:0d:00:c9:8e:33:58:0e:6e:b9:
a7:06:ab:e6:4c:2d:5a:9d:07:fa:a5:76:3f:99:26:af:c3:a8:
7c:2c:21:de:d7:08:a3:19:b0:39:39:29:8c:00:42:8b:ec:d4:
df:61:a9:09:a6:8c:da:38:af:90:3f:10:43:c1:61:a8:17:f6:
c4:52:f1:26:2e:cd:01:c2:d5:d2:67:a4:a4:a0:0c:bf:f4:0f:
ae:50:9b:92:16:09:23:20:8f:e0:3b:67:dc:e0:6f:4b:76:47:
9e:49:dd:23:a7:2b:9d:b4:52:5d:f8:4f:8e:3f:b8:8e:d4:10:
7b:2a:b0:0e:94:21:b5:87:a4:12:95:4b:16:49:01:51:e4:29:
05:3a:67:9f:50:56:2b:69:00:bb:65:b6:f1:8d:5c:35:08:57:
29:52:56:20:f3:0a:09:4b:8a:8b:8c:8c:60:15:67:f1:ef:97:
cc:66:79:e0:40:da:ea:2e:17:59:fc:67:65:4a:1e:27:07:fe:
45:68:a8:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR1bxNR6IVo3fXMfKCQAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZmI1NmFkYzkwNzFkNWU5ZmRhMmI2Njk0MzhiOTJiZjg2
M2U1OGYwHhcNMjYwMzAyMDIwMTIyWhcNMjYwMzAzMDIwMTIyWjAzMTEwLwYDVQQD
EyhjYTdiNjY1OTg2ZDljMTdlZmYzNzQ1MGYxZWNiYzNhMDYzYWM0NTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy5HfQu2Dojw4TyzS7Q6+ZtAGVmc
n/8OFcCIgpZxPB2Y1R7eV2nYCnrMjR5g9PbKzn3i3OHn4Zz7Msxlnjxf1oDzbxVk
CVUNUx84nUxTh0Vn4w69yYF2/aPX674AfehSu0/jqUW+j78ItzH87qIIFNxe7EQ9
T9vjTj5ShbKBn2u03PyprcDl3TqeUlIa7dqT1D5lWkrhSlrtUNaLtKsWUpL8Zlio
hi6a8FW6D6xCym68aP1zsj4eVBmNKTqGCj+ZBFtMLPcKcoXShG3dGGCvlbK5dLls
hvchDWfIJ9+u5zmJlP7f8Ky8guFM6pwchg5VKAQ7nwEvrUPmRo8EqgP2fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMp7ZlmG2cF+/zdFDx7Lw6BjrEV6MB8GA1UdIwQY
MBaAFBn7Vq3JBx1en9orZpQ4uSv4Y+WPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUt
NjNlZWJlMDMyNWVjLzEvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUtNjNlZWJlMDMyNWVj
LzEvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfIO8LDB
W+lp3aB9ZmGNk1OSPFT2s8NhSkSK3REI6d79kfi7Bf1sNG4Z22nmi4O9rAkCwSS/
OOoCXMlF1l40DQDJjjNYDm65pwar5kwtWp0H+qV2P5kmr8OofCwh3tcIoxmwOTkp
jABCi+zU32GpCaaM2jivkD8QQ8FhqBf2xFLxJi7NAcLV0mekpKAMv/QPrlCbkhYJ
IyCP4Dtn3OBvS3ZHnkndI6crnbRSXfhPjj+4jtQQeyqwDpQhtYekEpVLFkkBUeQp
BTpnn1BWK2kAu2W28Y1cNQhXKVJWIPMKCUuKi4yMYBVn8e+XzGZ54EDa6i4XWfxn
ZUoeJwf+RWiojw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:38 2026 by rpki-client