Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier: +KkisDjbVZ2Sh3/OG9TkDOW9Xrg6mR/9JuaoiwiDr0M=
Subject key identifier: 89:2C:C0:BC:92:04:F5:33:7F:EB:1D:1C:40:78:D7:A2:A9:0B:BE:0E
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 019CACB4C70A6EF0C05B37C620FE34260F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:00:54 +0000
Manifest this update: Mon 02 Mar 2026 04:00:54 +0000
Manifest next update: Tue 03 Mar 2026 04:00:54 +0000
Files and hashes: 1: Qy5yKoxjLWJA1uRpC0vjfkx5IHQ.roa (hash: y7SNkohtjGeeXJKm5Co5EsY36dtQ+/7kfkwvtYcQU4g=)
2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: w1iYJ0YLOlW9MILhMv32dTdgYYn+IObZ+m7OglwTMgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c7:0a:6e:f0:c0:5b:37:c6:20:fe:34:26:0f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Mar 2 04:00:54 2026 GMT
Not After : Mar 3 04:00:54 2026 GMT
Subject: CN=892cc0bc9204f5337feb1d1c4078d7a2a90bbe0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:19:88:60:f3:d2:6b:af:54:e8:4e:73:c4:
51:a1:07:d8:f9:4c:76:f7:b3:40:47:69:29:30:3c:
8b:93:4c:df:04:7d:4f:97:5b:53:16:4a:ed:a4:b7:
6e:b0:6c:2d:29:cd:e7:b8:ab:bf:53:db:29:f5:ba:
1d:3d:17:17:41:a5:f5:6d:d9:e1:f2:74:6b:f2:0b:
29:7c:9a:1e:64:c7:b7:a1:54:0a:84:28:f3:74:85:
eb:2f:68:f7:e9:74:b6:08:f3:93:f7:8b:63:2b:91:
d1:3e:89:18:4f:92:8e:d0:b8:74:c4:0c:7c:bd:b1:
6a:3c:49:c1:44:20:fe:6a:26:8a:41:6c:10:87:d4:
93:9a:56:1a:ee:5c:f5:7a:28:45:47:1c:a0:a2:fb:
dc:c7:a5:25:b3:7d:fd:b6:f5:5f:b2:59:64:40:d0:
af:a7:15:f1:9a:3b:f4:7e:20:d5:f1:84:1e:30:b8:
5a:ed:5d:b4:ed:47:d5:b5:0d:fa:3a:91:c7:ce:fc:
9e:f1:f0:d9:90:b2:0b:d7:5b:db:d8:6c:5b:d6:4d:
1b:20:e7:0d:7e:ff:2b:ee:cf:73:7d:fb:5f:d9:2f:
f3:39:e3:d7:4c:d4:88:49:ad:61:ee:9c:e1:f0:da:
06:22:ad:93:8c:ec:8f:95:27:60:79:a6:dd:c0:b8:
c1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2C:C0:BC:92:04:F5:33:7F:EB:1D:1C:40:78:D7:A2:A9:0B:BE:0E
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:52:50:bc:ab:54:d2:b3:14:5d:a7:d7:48:3c:84:cd:71:f7:
64:38:21:ee:75:62:30:e0:c2:5a:03:39:75:4f:b7:a2:7b:50:
68:9d:27:fd:df:f1:49:fb:ea:a1:42:b2:92:1a:2a:f9:51:f5:
8a:68:ef:8b:b0:63:ca:25:43:9f:f4:db:e0:bb:ee:6f:7e:5a:
a8:76:f8:97:d9:29:b1:24:b5:48:8b:5b:5e:c2:0f:c7:c9:9c:
92:e9:16:7d:b7:76:b0:af:ab:6e:48:ea:bd:5c:5b:5e:d9:37:
15:fc:f7:7b:e4:b2:96:4a:27:69:4b:8e:94:ee:66:c7:ff:86:
b7:af:74:44:51:84:9c:d8:0b:8e:8f:fc:5e:d4:96:df:fc:a5:
45:07:5a:88:da:a7:45:4c:d8:54:4b:f8:a6:49:3f:39:a4:fe:
86:2c:f0:10:a1:d2:29:96:84:db:a4:23:b5:3a:ee:5b:40:7c:
da:77:3a:e4:2c:62:f5:48:1e:e0:f6:de:7b:9b:8f:f9:cc:ce:
6d:96:e5:ca:99:0e:88:14:06:9e:19:a4:af:db:39:ce:b1:23:
1a:26:d0:31:e7:d4:b0:35:4a:c1:15:e0:82:4c:2b:b8:dc:4c:
b8:c3:c9:93:5a:cc:f1:0e:d7:11:2a:30:86:e7:2f:21:51:0b:
89:f7:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:04 2026 by rpki-client