Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: 74KneeYvEq5ECRa6sK+RWwbVJxsAQ9z6X8u3We8aDyM=
Subject key identifier: 1D:22:DE:8E:AE:90:99:EB:E4:58:49:D9:01:48:D8:2B:73:E8:6A:95
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 019CAA590F3A752E3230500F06B422D39710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:29 +0000
Manifest this update: Sun 01 Mar 2026 17:01:29 +0000
Manifest next update: Mon 02 Mar 2026 17:01:29 +0000
Files and hashes: 1: 1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa (hash: riRb4iPkDBtyw2U0WQzBeSsFtt3y8g90iqUigaVwK4I=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: Xx2CsGq0tLSgqHgrxqf2B4NX3T6hq8iHesPp8xab7qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:0f:3a:75:2e:32:30:50:0f:06:b4:22:d3:97:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Mar 1 17:01:29 2026 GMT
Not After : Mar 2 17:01:29 2026 GMT
Subject: CN=1d22de8eae9099ebe45849d90148d82b73e86a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:0f:f5:3d:33:29:14:53:b2:ff:30:36:ee:
51:b7:73:c1:8d:25:4e:4e:cd:f8:fd:64:d3:1c:a8:
24:5b:67:dc:79:af:b6:15:9c:18:d2:15:ad:e7:37:
86:96:ad:b4:69:c2:55:42:05:51:da:82:50:e8:0f:
f4:cc:93:d6:a4:26:6f:ea:68:67:6f:9a:7e:16:34:
97:52:7f:70:71:1b:8d:70:5f:bb:ee:c7:1a:53:70:
07:ad:c5:57:4a:6b:7a:b5:17:33:42:e7:95:f5:cd:
dc:c9:4a:18:41:0a:2d:af:7a:e9:30:f6:3f:c7:ed:
d7:1f:5b:4a:0e:66:f0:b3:f5:86:7b:7f:b9:c9:39:
1f:a0:18:e4:fe:ee:dd:cd:78:36:24:38:b4:b5:36:
34:7c:31:39:c3:40:20:e2:84:60:0c:bf:ed:1b:de:
9d:ff:4e:88:53:80:cb:d8:65:69:d9:db:6e:74:d6:
25:b7:76:b3:ce:f9:d2:ca:d9:02:42:25:05:13:67:
90:71:fa:81:bf:58:6d:61:f7:df:1f:ca:ee:1c:b0:
a9:7e:61:d7:0c:7d:1a:ce:7d:64:fc:5a:d3:1c:6a:
4c:17:78:61:93:fa:2b:b1:9d:d6:51:f9:75:5a:ce:
e6:21:7c:3d:22:72:12:35:85:c4:fc:47:6a:1b:fa:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:22:DE:8E:AE:90:99:EB:E4:58:49:D9:01:48:D8:2B:73:E8:6A:95
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:be:e3:ee:77:0b:0a:af:11:48:08:f9:d9:29:d5:73:40:48:
9c:32:2a:27:a4:18:d6:75:66:de:43:dc:b4:0b:e7:60:3e:80:
c2:c9:10:11:a1:6f:57:4c:80:52:68:a4:56:4d:58:bf:70:01:
01:81:f2:f5:83:88:81:db:49:f5:8d:d7:e5:d3:a5:26:f5:f5:
94:ce:5a:72:b0:7d:2b:ee:fa:d5:7d:1c:75:20:e4:c3:1f:07:
7c:7c:3d:d6:2d:4b:16:ac:18:b4:dc:9c:cb:dc:2c:20:13:4b:
9e:78:17:4a:7a:92:69:80:f3:2d:b6:84:c1:28:6d:64:cb:4c:
a1:6c:37:e4:7f:95:b6:6e:d2:2d:20:6e:c6:16:59:49:fb:85:
e0:93:6a:12:a3:1d:84:7a:91:df:9d:45:5f:c0:b8:95:c0:a8:
70:93:5b:b7:78:20:af:ab:7c:01:af:5e:f7:90:42:b8:f5:50:
60:04:01:e5:5b:fa:3c:c4:73:cd:ac:aa:a0:78:aa:8c:b2:da:
87:23:7d:71:77:ca:26:86:9d:21:b2:8b:79:f5:11:5c:8f:74:
1d:f1:6e:18:bb:07:4f:92:7a:ae:8d:6e:c7:b7:ce:aa:8c:e3:
c8:5f:52:45:ee:04:6f:6c:4e:95:38:5b:2c:63:e0:29:31:fb:
6e:0d:0d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:20 2026 by rpki-client