
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
File: GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft (raw, json)
Hash identifier: mHY50JISeUMxuhby8DgtrbA4JOf+MzxvdZ683E2QgHc=
Subject key identifier: 07:99:83:C9:8A:D2:2A:55:0D:BB:9F:BE:30:5C:F9:6C:08:10:2A:EE
Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
Certificate issuer: /CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Certificate serial: 019CAD905D6B9F0B6C4FB60705EDAFC8A040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 08:00:45 +0000
Manifest this update: Mon 02 Mar 2026 08:00:45 +0000
Manifest next update: Tue 03 Mar 2026 08:00:45 +0000
Files and hashes: 1: 2gMkKbJA554Yq2voG-iU3zjpglc.roa (hash: wMFCnORiTnuilB2AGLAPYKYN/hd+vlQrA8D8lSugV4Y=)
2: GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl (hash: DBrk1NU95exLOtFYHcWmdsBxDoDO5ZoWVtKJgiNr+FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:5d:6b:9f:0b:6c:4f:b6:07:05:ed:af:c8:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Validity
Not Before: Mar 2 08:00:45 2026 GMT
Not After : Mar 3 08:00:45 2026 GMT
Subject: CN=079983c98ad22a550dbb9fbe305cf96c08102aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ab:25:9b:e4:25:31:0b:71:b8:f0:11:60:f1:
5b:42:69:b5:b6:d0:4a:e2:25:51:23:d2:a8:9b:44:
4b:f7:fd:03:20:f4:f8:51:25:df:fd:2f:7e:72:b4:
ea:be:0b:92:79:53:e3:06:2b:39:17:93:2d:99:a8:
34:2d:69:3d:79:72:73:50:97:2f:50:2a:4f:73:9e:
fd:72:d0:3f:2d:b2:59:60:21:38:d3:05:ed:3e:c4:
60:b0:f0:e0:65:38:bf:f0:a6:0e:bb:08:2f:5f:52:
fc:21:95:54:21:67:11:8c:26:0d:da:39:f0:f1:4a:
93:49:f4:d1:94:c7:6c:b1:c8:bf:3a:20:9a:f9:2f:
d0:a8:ae:ef:a4:e5:02:18:7c:b6:a2:81:b9:87:ba:
da:b3:1b:81:1b:f7:b4:4c:14:21:7e:ff:42:f6:a7:
18:57:53:b4:7a:2c:9c:c3:26:19:c0:75:d3:c0:c3:
b6:06:34:5c:a3:6f:e2:85:55:f0:5a:8a:b0:fa:ca:
80:5b:c3:fd:af:8f:e7:79:13:9e:18:e2:67:96:9f:
a4:60:6c:4b:89:90:3d:c2:b6:0e:7e:f5:a1:4e:1a:
58:2a:2c:13:92:0a:1c:fe:62:0e:12:ca:d9:4e:0f:
1e:9d:02:37:a1:5f:38:60:5e:05:08:ba:c4:11:52:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:99:83:C9:8A:D2:2A:55:0D:BB:9F:BE:30:5C:F9:6C:08:10:2A:EE
X509v3 Authority Key Identifier:
keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6b:8f:b5:f3:f5:36:4d:14:2a:ad:08:14:61:60:c0:c0:80:
39:ae:92:ad:8d:32:ac:eb:0d:3a:0a:95:5f:03:2a:42:a1:6c:
e0:1d:43:dc:f8:29:be:12:a4:a4:84:ea:b2:8e:7e:15:b9:da:
ea:5e:59:e2:56:ab:e9:4e:fb:87:f4:0e:e9:9e:3e:00:5c:c7:
10:4f:c1:98:b7:c9:08:33:7f:79:74:2a:26:c9:1f:2c:9c:0b:
7a:1b:ea:75:91:1d:52:fe:75:cb:4f:2d:3f:d0:a6:71:25:6a:
d6:41:81:ac:31:5a:a5:aa:be:79:5c:14:7d:d1:db:ef:e8:6c:
c9:7b:15:3a:3d:26:0b:9e:9f:98:99:8e:4e:cc:ef:bd:7f:06:
f7:29:dc:e7:fb:e8:6c:17:c3:e2:69:76:b2:00:ce:b8:a6:aa:
40:14:e1:65:13:47:8b:6b:a0:1c:fd:27:9b:89:63:82:e1:15:
74:b2:65:92:8b:fa:19:72:d3:a2:73:bb:49:6b:46:f4:54:8b:
02:06:1e:b0:58:f2:c2:3d:25:87:67:ee:2c:46:18:04:06:e8:
7a:22:e4:6d:d6:42:7a:a8:20:0b:63:b7:52:2c:d7:d8:6d:08:
4a:b7:c0:e4:aa:d5:31:72:c9:80:d0:55:78:0d:23:0d:25:ca:
0f:92:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:39 2026 by rpki-client