Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
File: GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json)
Hash identifier: sj+VmsLPGvH8NXlLHgNCuCZAAsz7hMBf/M7IUtq5KEg=
Subject key identifier: B0:7D:DE:EC:75:6C:F0:C1:7F:97:E6:DA:D0:A9:A4:43:3C:F7:AA:9D
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial: 019CAAFD142FC4250037BB85D4395CAA715D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
Manifest number: 14C8
Signing time: Sun 01 Mar 2026 20:00:38 +0000
Manifest this update: Sun 01 Mar 2026 20:00:38 +0000
Manifest next update: Mon 02 Mar 2026 20:00:38 +0000
Files and hashes: 1: ESOn4YVwMvjEwp43_BIg6dF4bME.roa (hash: R9TTpag0gjQGiKGRJHhKu7HUgpmc2rwTNbk37Twi9mw=)
2: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: OTQFInZYYcXHYFcqFEmDRGN858gLbbev1Pw54An9eHI=)
3: a1Wzzm6d-RLRzAcChfLkzjD6yj4.roa (hash: u2suJZ9dSTEdpIWAwFWYGCWey0B3AvIkAHlBujdVtCc=)
4: bonvg5XaBQcMsNMwCdMc5lDAhv0.roa (hash: ZSoRPjPH88M9xek3/eVzci4XvPHF1Itjvf+UZyNuK0s=)
5: iwH4jBGE2r4FPhWJLTbjjI0f7js.roa (hash: p3xuYKI74MTFoejHqzogibcQQ/wIKgo2kr2v6fu/s2U=)
6: tgxCEeVuZ-EDQmEz7GRXe-l5ETE.roa (hash: LUh2uL8YOcgSTcCxK3/07PSsvLuQW83QgTZqddE2hIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:14:2f:c4:25:00:37:bb:85:d4:39:5c:aa:71:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193743467b4da41c6295e9351153309586ba2399
Validity
Not Before: Mar 1 20:00:38 2026 GMT
Not After : Mar 2 20:00:38 2026 GMT
Subject: CN=b07ddeec756cf0c17f97e6dad0a9a4433cf7aa9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:91:74:c8:fd:99:a2:4b:c8:81:b3:ee:b6:
e5:33:c6:02:bf:b3:75:bf:79:3b:c5:c8:ef:0d:5d:
2f:f2:01:7a:30:24:b2:c1:c0:f4:a2:34:65:92:b0:
8d:bc:06:55:b9:4a:40:6d:91:f5:34:42:53:da:ef:
39:42:e6:31:63:53:84:fb:d2:88:a6:7f:81:d0:e9:
8f:82:77:7b:8a:aa:4d:a0:d8:8b:ee:a8:69:18:09:
d1:0e:4e:f4:51:50:cb:22:2e:ff:a8:65:44:bd:4f:
a0:fb:11:e5:80:3e:eb:e7:21:a5:0d:2a:73:8c:eb:
50:44:84:17:21:6c:91:0b:ca:6e:37:70:1d:48:d6:
da:ce:52:ab:ca:72:b7:fe:d0:1b:c1:ac:00:61:ae:
92:40:00:39:b0:aa:bb:09:37:78:cb:00:b1:59:75:
00:18:d1:95:f7:46:12:8c:d0:64:b0:68:47:5a:7e:
3b:54:d7:2f:4c:b7:24:99:e4:e8:55:66:d4:1e:a3:
46:36:d4:3b:52:1d:68:4f:c9:8f:fe:90:3a:23:0d:
52:67:ea:ae:53:0b:f2:50:5f:68:80:43:27:db:26:
4d:7a:94:0f:b3:d6:90:19:a9:b5:a4:16:d6:64:9b:
9d:5d:df:96:a3:8c:cc:e6:15:6a:98:9b:17:ba:31:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7D:DE:EC:75:6C:F0:C1:7F:97:E6:DA:D0:A9:A4:43:3C:F7:AA:9D
X509v3 Authority Key Identifier:
keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0e:63:fb:49:f8:23:74:62:fe:f1:06:70:ab:bf:61:14:89:
97:be:b2:1f:f7:7e:fe:a3:71:56:59:26:3b:0c:2c:fe:b1:5f:
0a:2b:73:24:35:4f:c0:bf:e6:98:77:13:d4:ab:12:6f:f3:54:
69:64:ae:22:34:e9:03:07:00:7b:87:df:99:fa:c0:f8:7f:eb:
72:74:19:de:4d:15:17:b6:cc:a9:01:96:d6:77:77:33:b5:61:
13:ef:5c:46:8e:77:8d:ae:70:37:6e:46:63:df:bc:32:dd:77:
cf:65:bd:fe:b7:5e:2a:c5:a2:eb:ac:c8:d7:e0:a5:f9:04:75:
e5:45:46:68:bd:89:a3:9e:a7:16:04:2d:eb:4b:0f:53:29:ba:
5a:64:55:a3:5e:1b:2f:a4:ad:35:a1:5f:8e:31:72:b5:f1:66:
95:3e:3f:68:e9:55:03:0c:97:24:dc:d3:ef:ab:dd:47:5e:1f:
1b:21:91:a0:e3:ad:8e:28:e6:5c:b3:86:04:b8:69:4c:a8:90:
f3:a8:05:18:53:0c:c0:3f:92:d8:ef:af:f9:c2:10:79:6f:12:
e5:a4:8d:60:05:9b:b8:e8:03:58:66:e1:2b:84:c9:1f:4c:e0:
e7:1e:93:65:5e:ce:fa:05:b7:cb:cf:92:14:7d:13:da:90:e6:
cf:70:8e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:30 2026 by rpki-client