Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
File: gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json)
Hash identifier: iOwKDB9tCVwPdkc27WHTwmgEJeo6NdLmKMTYq/3VoM0=
Subject key identifier: A4:09:A3:31:ED:9A:F1:7E:27:5A:8C:3E:9E:1B:09:41:D6:9E:76:ED
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Certificate issuer: /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial: 019CAE35147D7D56CE202C586E9FC11375C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 11:00:40 +0000
Manifest this update: Mon 02 Mar 2026 11:00:40 +0000
Manifest next update: Tue 03 Mar 2026 11:00:40 +0000
Files and hashes: 1: HRhnJs0rqSh4-uSE3UR_PKkUZFI.roa (hash: LXksIEwMTfFfnm1hrgpaVNQMLwmyjyLCSI5cjH3cCWM=)
2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: q60UdU04KLbJMJ3r1vd2R8sbhZc1IGlHR0bAxx7Vpo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:14:7d:7d:56:ce:20:2c:58:6e:9f:c1:13:75:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Validity
Not Before: Mar 2 11:00:40 2026 GMT
Not After : Mar 3 11:00:40 2026 GMT
Subject: CN=a409a331ed9af17e275a8c3e9e1b0941d69e76ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:23:23:25:63:1d:26:10:7d:41:5d:6d:77:
3f:83:2f:74:9c:1e:0a:60:f0:68:d9:51:81:21:59:
e0:00:8a:24:4f:62:c0:43:7b:91:e9:04:77:39:9e:
d7:9e:7c:7e:ed:f4:73:06:9e:e5:d0:da:14:64:a3:
56:fd:06:48:5c:b0:bf:70:c7:94:87:7d:af:43:0d:
72:2d:d8:b8:00:3d:4c:eb:cf:7d:de:7e:94:52:21:
85:b6:c7:0b:77:32:63:0c:99:dc:e8:bc:f6:ad:85:
f0:be:2e:d4:34:e8:b8:bb:b4:ca:6b:26:85:b3:5c:
4c:01:42:ef:3a:b2:7f:56:20:45:dc:8e:1f:ce:a2:
40:7d:b7:f4:b5:8a:43:e5:4c:d2:7a:53:85:6d:8c:
5d:79:10:dc:32:29:b0:cc:7f:fe:23:58:46:e4:6d:
64:7b:a5:2b:86:43:77:bf:5e:3e:f6:ae:8c:9d:63:
ad:ed:7f:69:d1:bd:ad:7c:7a:ba:19:6a:4d:b3:00:
e3:24:46:ca:d6:e0:6c:a8:75:62:cb:f7:c9:9c:21:
5b:cd:a9:7b:41:73:84:47:66:c9:ec:4a:45:22:7e:
ae:ce:31:5a:b6:fa:59:08:6a:57:54:71:43:b6:ed:
88:91:5e:20:34:2b:59:68:92:25:ab:4b:ab:c9:f7:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:09:A3:31:ED:9A:F1:7E:27:5A:8C:3E:9E:1B:09:41:D6:9E:76:ED
X509v3 Authority Key Identifier:
keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:56:d0:b0:df:7a:48:fb:01:25:fc:ff:5f:fc:76:ae:4b:e4:
4e:28:e9:b5:16:85:f0:51:62:98:5b:ca:5c:20:5e:b8:14:41:
39:c0:00:65:cf:38:2f:fc:af:bd:1d:20:eb:52:61:a4:ba:41:
4f:90:25:5d:94:eb:41:6c:eb:64:35:89:ad:38:c5:87:3b:8e:
a0:90:f5:e5:6b:fd:f8:f2:21:92:ab:cf:4d:fa:b0:7e:db:ef:
7b:d5:e2:af:f7:88:6f:06:88:5b:b5:8b:a5:bf:ca:aa:55:47:
78:9c:30:80:c6:15:87:0c:b0:85:47:0a:73:05:56:56:db:75:
02:84:be:52:dc:ff:d1:4c:e5:a2:12:12:0d:9c:f2:df:27:be:
41:33:6a:79:51:ef:52:6f:62:c8:a5:4f:36:ae:b4:d9:0c:97:
7b:77:71:39:6c:d8:52:a6:89:b6:ec:c1:7e:8d:ca:df:de:6c:
5f:7f:bb:5a:63:b9:10:03:61:01:67:51:5e:30:70:12:00:87:
a4:2b:bb:1a:88:46:a9:11:16:50:c2:bd:d3:0a:1a:d4:69:bf:
bc:9f:ba:a9:c9:80:e5:f5:fd:ed:9d:cb:48:ac:aa:f0:e6:a3:
76:6d:4c:b0:6f:95:7c:44:50:eb:4a:84:a9:a0:fb:de:19:3d:
f6:34:c6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:46 2026 by rpki-client