Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: tutYUPUIZscCqiKHGj6J1DbCjub6y7ZlYm5GF7YXQlw=
Subject key identifier: B1:89:FE:25:00:17:68:D3:AC:65:C7:C8:6D:69:2E:53:50:BA:72:4A
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 019CABA1E42B9A86AD6B15F28871D0627B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:00:39 +0000
Manifest this update: Sun 01 Mar 2026 23:00:39 +0000
Manifest next update: Mon 02 Mar 2026 23:00:39 +0000
Files and hashes: 1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: e1VB32Jnor9BzSx2Lc4uAfpNsKVqg1oEagtbPtKIY5U=)
3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e4:2b:9a:86:ad:6b:15:f2:88:71:d0:62:7b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Mar 1 23:00:39 2026 GMT
Not After : Mar 2 23:00:39 2026 GMT
Subject: CN=b189fe25001768d3ac65c7c86d692e5350ba724a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:6c:65:08:40:9f:64:3b:d0:fa:6a:bb:c5:
f4:0f:c8:b9:6b:a2:52:19:ad:3e:c4:bf:20:51:9d:
86:04:14:38:40:72:01:c6:93:7e:3a:34:d9:ef:fc:
ed:ab:69:00:f5:ab:6a:a1:c5:88:2e:9c:81:a4:16:
ec:ce:ca:81:e5:a9:9d:28:eb:7f:17:33:2f:c6:bd:
9d:f1:bc:20:ed:7d:64:a4:01:be:29:f0:2c:c8:5d:
08:c1:2d:af:de:e2:9a:16:77:13:2b:4c:e2:01:a9:
86:e8:bf:54:5a:bf:3d:23:52:3a:fd:3a:ab:2d:68:
70:62:bb:3d:26:58:c1:f7:3f:11:5c:60:4d:75:1e:
d2:de:31:86:b1:15:f4:cc:3d:c6:b1:35:83:05:88:
77:92:f3:c1:c5:75:b1:ab:be:e0:78:a8:db:c2:39:
5d:7b:84:48:d6:a4:ae:c9:30:ec:c8:0e:bc:d9:b9:
5c:fb:8d:db:b5:c7:eb:75:23:76:63:45:2d:03:6a:
a3:ec:e4:e3:d4:35:c1:af:f9:e4:f6:af:f7:4f:24:
f2:8f:3e:e5:de:10:64:c5:5f:9f:52:9a:f8:5a:d4:
9c:91:d5:52:1b:c9:e6:0a:d1:e2:bb:d9:b0:b4:70:
c6:e7:e4:f2:c5:ca:95:6b:91:95:6d:78:d9:cc:ca:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:89:FE:25:00:17:68:D3:AC:65:C7:C8:6D:69:2E:53:50:BA:72:4A
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dc:81:c3:2a:69:93:09:08:61:a2:ad:b8:e4:b1:41:12:38:
39:79:75:8e:b0:0f:24:92:57:1e:0c:c0:59:48:fe:d7:25:7a:
5a:14:d7:9a:6e:99:e4:27:4d:4a:5a:29:74:63:bb:ea:4f:ae:
8f:64:82:65:54:91:a5:e4:23:41:82:45:27:9e:c7:95:56:96:
6d:fd:03:c1:2d:5b:83:da:0f:21:a9:f6:44:b1:75:6b:b1:b9:
12:06:ea:9c:67:64:8a:ec:fb:2b:a4:c1:e1:8d:4f:ae:ab:05:
bc:39:bb:a4:c8:f5:dc:eb:25:ae:9d:46:85:68:7d:b0:1c:cd:
9b:27:ed:77:58:ce:05:43:3f:3a:89:22:c9:05:3b:dd:23:49:
1a:88:7a:17:47:f6:6b:4f:a7:3c:e5:f0:15:03:bb:21:1b:bb:
64:cf:90:bb:f8:bc:2c:ad:9a:23:4a:2c:7b:37:6d:57:45:0b:
4e:e4:d9:34:d4:76:1f:26:4c:9c:94:0a:5b:94:35:06:ae:35:
88:b8:02:ab:fe:35:72:ad:17:4f:92:a8:22:e6:a3:7f:e3:80:
e8:bc:98:fe:e8:27:53:fa:a7:a8:95:3a:c9:dd:d2:d1:31:21:
95:3e:1d:1f:52:b7:3e:55:35:af:68:53:ef:66:3a:9c:0c:06:
f7:cd:86:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:21 2026 by rpki-client