Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
File: gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json)
Hash identifier: h+DdSj6ZNLw7Gon+lz9Io3BPIRdpJBPefD7NyBue9mk=
Subject key identifier: AB:A0:CE:ED:CA:75:BF:BC:3C:3E:FD:84:98:A4:2B:66:1A:AC:67:1F
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Certificate issuer: /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial: 019CAD90850C4D0AB2FDF4DE9F9E41776207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 08:00:55 +0000
Manifest this update: Mon 02 Mar 2026 08:00:55 +0000
Manifest next update: Tue 03 Mar 2026 08:00:55 +0000
Files and hashes: 1: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: q50ORYdgfTu29t9rIIaChkrmRFG2UrrIRS2IJCv8oak=)
2: lYK_65AKlFPw1-t6tjg4pQYtXHY.roa (hash: VCWprxMwmjsHW4IsRUv/igV1kqqp3MMJUQXFePAz+0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:85:0c:4d:0a:b2:fd:f4:de:9f:9e:41:77:62:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Validity
Not Before: Mar 2 08:00:55 2026 GMT
Not After : Mar 3 08:00:55 2026 GMT
Subject: CN=aba0ceedca75bfbc3c3efd8498a42b661aac671f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:0e:81:77:8b:b3:75:62:ff:ff:41:4c:b7:
3e:2e:a8:40:14:34:23:51:63:71:86:cd:4e:1a:8a:
2f:7c:46:b1:c1:cb:73:0b:f2:f9:05:b0:98:05:5c:
ce:4a:bb:13:5b:a7:6e:5e:90:81:35:e3:92:86:06:
5c:67:06:12:6e:25:fb:61:78:32:50:5b:9c:97:0d:
13:f3:bd:33:09:72:b1:ac:39:d4:7c:61:4d:53:ce:
62:bd:7d:24:08:8e:cd:0b:78:27:75:d1:b4:3a:71:
2c:27:90:4c:98:f3:8d:76:5f:4a:98:27:7b:d6:af:
36:63:1d:85:69:b1:8a:ab:7b:2d:b2:e5:2a:4e:89:
eb:34:b2:e3:02:b1:b4:0d:a7:6a:c1:66:9e:c0:71:
96:43:ae:03:7a:72:4d:77:34:ef:b9:28:58:5b:7a:
90:42:f6:7e:1d:f5:90:d6:58:89:68:32:0c:6a:e5:
30:49:6e:68:58:29:9e:47:f7:54:dd:13:e8:b7:de:
88:77:85:a3:ea:66:97:c8:3a:9e:af:cc:76:6b:95:
d8:4e:ff:0a:35:3b:96:59:08:7d:7f:b6:ab:27:f4:
fd:a2:ba:1e:3d:36:39:31:0b:20:e4:7c:9f:98:5f:
5b:3e:48:e1:7f:2d:6b:cd:b4:8e:6f:e2:f8:e3:50:
0b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A0:CE:ED:CA:75:BF:BC:3C:3E:FD:84:98:A4:2B:66:1A:AC:67:1F
X509v3 Authority Key Identifier:
keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cb:1e:98:78:ed:4e:8c:41:9d:5e:d7:fe:3e:51:6e:5b:88:
e9:ec:46:03:d7:dc:2b:2d:15:58:80:2c:bf:56:8b:11:f7:af:
b7:db:83:32:b1:a3:e7:0e:c5:db:a8:52:d2:f9:23:5c:21:e9:
96:05:71:21:6f:f7:21:bd:bd:a5:4d:3b:66:83:cd:99:be:b0:
8c:b0:cb:9d:90:1f:65:36:2d:b1:ec:29:44:3c:51:f5:28:1c:
5c:d8:59:c4:c1:58:fb:a7:12:a1:72:5e:a5:8a:e8:0b:b7:f2:
04:aa:c5:e7:df:bf:39:5b:b4:9f:28:7e:21:34:f3:e0:d0:f2:
91:d5:2e:02:1e:67:b2:23:ca:a4:2a:b0:3c:86:b2:bc:be:97:
9d:8a:b8:ae:b8:4d:ef:a0:c6:86:f3:77:3a:ae:9c:24:13:aa:
aa:3b:0e:45:93:bc:58:2c:26:ca:e2:5f:5a:64:fa:c7:d2:63:
a0:58:7a:8f:f2:db:95:a3:87:3f:49:1b:c8:97:2f:17:35:53:
d3:c8:c5:2a:cd:9b:10:7a:e1:af:18:67:7b:90:19:a1:5c:94:
a6:94:2c:58:bd:bb:9d:1d:d5:e2:de:13:fd:de:86:aa:44:8a:
e0:64:d1:79:89:c1:62:f5:32:aa:03:a1:f8:9c:d9:d0:63:b3:
0b:27:27:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:01 2026 by rpki-client