Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: oNp93CWw8jPsxkKr3qAJa1jYd9MbTn1qCuwn9a02Ak0=
Subject key identifier: 94:5C:1A:E3:77:EB:A7:BC:38:78:AC:BF:EF:79:92:53:D3:34:BA:FF
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 019CABD966EC28C243A4667E8A8951BEA7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0A6A
Signing time: Mon 02 Mar 2026 00:01:17 +0000
Manifest this update: Mon 02 Mar 2026 00:01:17 +0000
Manifest next update: Tue 03 Mar 2026 00:01:17 +0000
Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=)
2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: jjdv3UA2j3dTPnK5e++ZPP0gq3bcHeonSTAikkpNnYo=)
3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:66:ec:28:c2:43:a4:66:7e:8a:89:51:be:a7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Mar 2 00:01:17 2026 GMT
Not After : Mar 3 00:01:17 2026 GMT
Subject: CN=945c1ae377eba7bc3878acbfef799253d334baff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:b6:0a:87:8c:d8:20:e2:89:e1:c7:4f:a6:
dd:76:99:3a:58:f3:f6:97:2a:77:d9:92:f7:d1:8f:
f8:92:0f:90:e2:c9:63:af:3e:9b:bd:25:dd:25:53:
05:6d:aa:9e:6b:63:85:f9:dd:22:85:1e:4a:4b:42:
73:12:2b:4d:8b:18:06:27:d1:dc:4b:a1:25:50:2e:
61:ec:9f:67:73:20:02:96:60:39:fb:d3:1b:5d:ad:
bc:3a:db:33:bd:89:6e:5e:6a:24:fd:40:58:e8:fd:
58:cf:12:93:b4:08:02:6d:3e:bf:05:f8:56:27:d0:
60:f7:d7:b5:43:68:63:27:fb:43:80:d7:71:9b:29:
4d:22:4f:7d:2a:43:25:97:66:a6:51:06:72:6c:bc:
3e:ab:ff:2f:79:1d:89:cb:f9:69:97:ed:f3:98:e7:
39:c1:7b:aa:01:cf:e6:3c:40:d9:71:54:c0:a8:fe:
06:29:ac:66:2c:0e:ab:27:45:3c:62:79:d9:40:cd:
a1:43:1e:81:e4:2a:c6:b7:ab:f3:e9:80:38:4f:7b:
62:cc:06:1d:2b:7d:81:1a:cb:39:5c:48:ec:c9:ee:
f2:2d:73:b2:b5:b1:97:a5:46:c6:73:0f:dd:2e:d0:
4f:db:35:71:ef:c0:75:dd:02:04:4e:b1:9c:0b:50:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5C:1A:E3:77:EB:A7:BC:38:78:AC:BF:EF:79:92:53:D3:34:BA:FF
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:35:ba:08:1c:79:09:fa:94:3d:77:03:50:73:b9:ad:66:25:
5a:65:ce:d1:a3:ee:75:47:9e:b7:f6:4f:9a:39:6c:d8:56:ce:
95:be:81:cf:f5:5d:77:0f:d1:76:a0:a9:32:97:02:5c:63:24:
a1:be:c9:14:22:2b:9f:82:32:6e:f9:e5:9d:67:0c:fa:28:8e:
fb:1d:49:7d:51:3e:b2:a3:8f:43:cd:94:3a:49:d9:65:00:77:
df:72:5d:ea:33:7f:98:1f:95:6a:cd:e3:02:8f:55:82:27:12:
90:b4:86:83:84:45:e9:60:08:14:c9:97:97:e4:29:47:13:90:
05:3f:45:ac:a8:47:51:68:01:79:38:46:be:ba:fa:e7:23:79:
8b:06:ba:a5:1c:ee:63:a9:b0:a4:2b:74:e9:d8:d6:cd:16:1c:
1a:ee:1f:7a:9a:5b:e3:9a:3e:78:1b:62:a6:c9:92:a8:63:3f:
0a:3e:c7:86:d6:31:a1:46:00:8c:be:4a:03:59:61:c3:e4:c3:
ad:03:7f:bb:ca:55:1a:0f:0a:a4:0f:6d:b6:7d:ab:e2:5f:3a:
46:5a:cb:18:65:0c:e5:48:a3:13:2b:a6:40:e0:87:8e:e7:2f:
95:a8:06:ef:ea:de:05:aa:e6:9c:e0:65:d8:ec:d1:2c:e7:17:
7c:01:b2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:22 2026 by rpki-client