Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier: tlkX51vpZbpoM+UnyagZVveDvK1ndKubUBJXEBySIec=
Subject key identifier: 20:DB:9F:C4:86:61:3A:B1:31:82:97:D4:E0:0F:F2:90:AA:9D:7C:8E
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 019CABD9301A5C4F49601629BB465BE74E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:03 +0000
Manifest this update: Mon 02 Mar 2026 00:01:03 +0000
Manifest next update: Tue 03 Mar 2026 00:01:03 +0000
Files and hashes: 1: 75SRw9aNyewbtPYAMH8et8hfSr4.roa (hash: Ef79opNAcjrl49Rm2x5OxhpX27NyaA68e2jdXKrtpHA=)
2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: TSHppTjC/MKJQQXbRsZzMDVPkPEfCx1OnwyJMvhL/IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:30:1a:5c:4f:49:60:16:29:bb:46:5b:e7:4e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: Mar 2 00:01:03 2026 GMT
Not After : Mar 3 00:01:03 2026 GMT
Subject: CN=20db9fc486613ab1318297d4e00ff290aa9d7c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:e2:74:fa:e7:6c:c2:ce:74:d9:ec:a6:aa:
6e:db:05:16:06:33:a3:68:56:a7:66:54:c9:e7:9d:
d3:28:39:5d:c4:f0:90:3f:25:b3:9d:65:c9:a7:2a:
89:9f:6a:95:7b:f1:4a:91:77:a4:fe:68:d9:f9:74:
36:fb:ae:34:98:42:77:32:17:28:dd:3a:1b:ca:3e:
1c:a6:2d:25:22:49:e9:ee:21:b2:73:1c:59:8e:ad:
26:cd:08:ac:11:f2:a6:4a:d3:b9:1b:86:22:d6:22:
f6:6c:ca:74:da:31:87:6e:43:1c:b4:e3:21:24:31:
7b:00:29:02:33:6b:ea:08:99:a0:52:89:9a:3d:60:
0b:dc:0f:3c:6a:d3:5d:51:50:03:84:6e:6e:31:9b:
40:51:4e:57:69:2a:14:b0:af:fe:90:46:02:2b:ab:
ed:47:21:60:89:cc:aa:b8:5f:93:a7:ec:b7:97:7d:
b0:73:b5:1a:a6:1a:f9:99:b7:1e:78:e7:29:0f:cc:
86:ca:8e:04:6b:30:c6:c5:93:cb:6e:f3:59:95:9a:
f6:a3:9d:64:84:15:15:6b:ae:7d:e2:a6:21:3a:d7:
e6:0b:46:0b:23:be:76:cd:c0:f9:46:13:9c:a9:07:
ba:03:6d:f7:b2:78:6d:f2:de:ba:08:1e:fc:54:b8:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DB:9F:C4:86:61:3A:B1:31:82:97:D4:E0:0F:F2:90:AA:9D:7C:8E
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:94:be:90:3b:28:d3:bc:0d:e5:16:71:47:f1:a8:47:ee:30:
a8:89:9f:16:ee:02:aa:d4:85:d3:87:27:b9:1a:7b:35:aa:43:
47:20:17:03:95:03:c5:4d:c8:95:33:8b:cf:67:b5:6b:71:b9:
69:ce:c3:64:f8:95:94:ed:fc:4a:3c:02:ef:e8:0c:37:81:db:
23:2c:31:17:62:81:e6:b6:0f:ca:df:fa:6a:cd:c2:61:13:91:
12:30:cf:fa:94:47:c1:dc:49:59:b3:13:d0:05:4e:99:70:a9:
6e:b5:87:1c:ad:71:d1:bd:8e:97:5a:ba:83:d5:ac:5f:8c:c7:
60:e6:eb:fa:de:15:d8:7d:16:70:0b:05:6a:ea:19:5c:dc:b4:
1f:ac:82:16:17:14:90:13:64:c5:38:07:be:3b:85:9b:05:04:
d3:29:f1:03:e8:6a:7a:63:6b:8c:14:d3:67:41:b5:28:2e:c7:
3e:ec:d1:ae:93:9c:d4:68:72:4f:1a:43:68:1d:2a:79:2b:db:
dc:be:58:61:c4:98:56:0a:cc:4c:0a:7c:77:3f:4e:87:1a:0d:
bb:26:42:ed:bf:1f:70:a2:89:45:82:bf:4a:04:6d:47:29:6a:
00:e8:2a:da:25:34:71:32:23:47:e7:7e:32:43:eb:13:74:c2:
4a:a5:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:04 2026 by rpki-client