Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier: 3z0fWeAN9iyHtZBkF6pp7c+tjQ+3wiWhhmek2dSRBC8=
Subject key identifier: 6C:BE:54:20:A1:39:CD:60:A4:DE:4B:DC:76:1E:79:60:B3:CF:79:B0
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial: 019CABD9DBFC2D0D23107439DE05BFDB5A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number: 0E9D
Signing time: Mon 02 Mar 2026 00:01:47 +0000
Manifest this update: Mon 02 Mar 2026 00:01:47 +0000
Manifest next update: Tue 03 Mar 2026 00:01:47 +0000
Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: XXc5pnV1jsmIhArQGo6uxZWqtS0FvlCQcDhhiQ8mnxs=)
2: qGxTxAsu5FkWitZ0KPLQqCXDGFM.roa (hash: zXhXvgnmYSnohs5FpeFJ6bYBqVk7H7oowzouCmYZY/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:db:fc:2d:0d:23:10:74:39:de:05:bf:db:5a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
Validity
Not Before: Mar 2 00:01:47 2026 GMT
Not After : Mar 3 00:01:47 2026 GMT
Subject: CN=6cbe5420a139cd60a4de4bdc761e7960b3cf79b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bb:d3:dd:46:f1:b3:a8:0c:7b:85:19:a9:67:
e5:29:6e:57:66:00:41:ba:9d:9f:fb:6e:03:56:17:
6d:0c:1f:a2:d8:0a:ba:54:80:91:07:0a:64:0b:7c:
cc:90:56:73:42:e3:7e:00:e9:e9:73:c4:99:aa:b2:
75:07:6e:a2:a1:bc:4b:bd:79:6e:6a:09:ac:e0:77:
8a:b4:2c:0f:71:31:37:e8:c7:c5:02:24:b0:12:75:
09:46:22:f8:07:03:59:8b:b9:6c:3c:c1:49:76:6c:
28:c2:7c:ff:b2:5f:b2:88:5b:1a:bf:39:8a:ad:f4:
54:1d:bb:f6:f5:70:7f:8c:5c:1b:82:06:b7:c2:ce:
97:57:17:88:ec:ac:a7:44:96:da:9f:e6:0a:7a:70:
4d:8b:92:0d:10:9f:d9:e2:2d:7d:a6:34:f6:06:11:
e9:76:05:dc:18:ed:3b:ff:16:37:f5:d9:76:a2:d3:
74:45:58:65:ca:4e:83:a3:b9:6f:a5:a5:5c:a4:ba:
e9:b5:03:0b:13:e0:5d:0b:02:8e:ff:39:7d:a8:01:
92:d8:84:c3:fc:05:02:78:5e:58:dc:55:d7:bf:c1:
89:05:83:f9:89:3a:e5:55:51:39:19:57:eb:42:be:
3d:f8:ac:a1:b3:9b:88:a4:e2:71:79:a5:32:f6:6e:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BE:54:20:A1:39:CD:60:A4:DE:4B:DC:76:1E:79:60:B3:CF:79:B0
X509v3 Authority Key Identifier:
keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ad:22:c8:8a:74:86:a2:46:61:a2:cd:12:cf:b7:0f:55:0d:
df:a9:12:49:fe:69:e2:25:dc:bf:c9:a8:73:3e:7d:84:da:a8:
16:fd:93:96:de:0f:3e:9a:0d:0f:1a:0f:0f:c6:a5:d5:a3:a9:
ba:d9:ab:38:7c:51:2c:20:7b:b9:b9:74:f3:f8:85:3f:0b:e7:
5a:c0:52:4b:92:0d:49:bb:86:8c:76:20:da:d1:01:40:55:0c:
14:12:5a:cd:9b:0e:70:37:3a:42:47:6a:a1:82:a9:5e:a4:ec:
77:99:ec:e2:4c:0b:29:b2:0b:43:f0:21:2d:04:62:43:80:57:
da:0c:63:49:35:7f:a0:8a:d3:98:d1:57:11:59:5b:eb:87:86:
1f:55:d6:7e:20:5e:ea:d3:0c:cb:13:1e:a5:58:c4:b6:89:62:
96:a8:be:0c:f5:c8:96:26:dd:e8:95:68:cf:99:6d:fd:29:48:
f6:58:b2:0f:c3:67:9c:7b:57:a1:54:27:97:18:f6:7b:a6:75:
df:68:74:b4:c8:f2:fc:6b:95:2c:a0:6e:33:a6:60:52:d4:99:
ba:61:23:b9:7f:4e:5f:74:aa:fd:de:16:aa:10:b1:e4:58:1f:
62:87:5c:b9:1e:cc:8e:68:a9:08:93:b4:17:b3:ba:9b:0a:35:
b9:de:05:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:10 2026 by rpki-client