Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier: bH6su7BbNjKUC9edsALcI5aQ4Fiii04Xh09K22x2FRY=
Subject key identifier: 7F:76:0C:50:47:C3:74:A3:41:EF:F6:C3:47:87:B8:A5:9A:05:D4:0F
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 019CAC0FFFDA33CD393243F8AF4641DF9F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 01:00:55 +0000
Manifest this update: Mon 02 Mar 2026 01:00:55 +0000
Manifest next update: Tue 03 Mar 2026 01:00:55 +0000
Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: iewKctDCMot+ruQXbh2sjff0fF7c5a9juBrv3RIwcGk=)
2: i220VObPvHT4HgCF-uOpmI807FY.roa (hash: s9QayADVhAmQKcOJ9dlrMCwrdZV1G0CVNvgi0G197E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ff:da:33:cd:39:32:43:f8:af:46:41:df:9f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Mar 2 01:00:55 2026 GMT
Not After : Mar 3 01:00:55 2026 GMT
Subject: CN=7f760c5047c374a341eff6c34787b8a59a05d40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:9b:31:d1:c5:10:34:59:71:90:e1:4b:83:
64:c3:e1:2e:22:75:cd:1e:0b:ab:68:ab:2a:f1:87:
9a:84:8b:7f:fd:5c:a0:45:1f:b2:1e:7d:0c:b8:9a:
2f:8f:00:23:de:ac:16:4a:6d:2f:87:46:ff:c5:90:
ce:b3:32:6b:c4:e9:b9:01:95:88:1f:5c:fb:98:47:
c5:f7:b8:f2:1a:c2:51:2d:07:da:fa:ce:ee:c6:36:
c1:f1:9d:27:07:07:6c:53:79:a6:a8:67:ce:f1:7e:
5f:b2:31:6f:cd:a2:59:ec:5f:0d:4d:ed:64:8e:61:
d8:cf:40:a1:ec:30:1b:fb:e5:b9:a2:41:f6:b0:7e:
05:bc:78:f4:60:18:cb:6e:4c:d2:f7:a6:e2:1d:f1:
b5:b2:59:d9:df:d5:50:5e:b3:a5:63:1d:e3:65:3a:
b5:db:1b:f9:27:c8:14:fa:e6:18:e3:a3:c5:99:6d:
5d:4d:ae:0f:fa:c0:8b:90:5b:18:f3:d5:62:68:d5:
79:1b:98:41:bb:13:b4:4f:e2:f1:c0:bc:cd:4e:fd:
85:29:ac:c1:39:13:db:8e:9e:8d:87:f3:49:4b:6b:
ff:1d:22:eb:69:3b:b2:b3:a4:29:8d:9d:cf:4b:5b:
4f:f3:03:f3:43:fb:08:f2:e2:d7:e7:0c:ab:6c:df:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:76:0C:50:47:C3:74:A3:41:EF:F6:C3:47:87:B8:A5:9A:05:D4:0F
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9d:a3:e6:b8:55:49:dd:c7:91:97:9c:7f:1a:0f:b5:b5:02:
83:8a:94:fe:9d:55:ed:65:b6:ae:94:80:be:de:76:58:65:65:
32:b5:79:3b:a3:1b:65:4a:d9:9e:af:d3:11:41:b3:52:76:57:
29:8a:c5:e4:b0:37:da:d2:5e:59:e8:f2:e8:02:b0:8f:2f:57:
fa:69:9b:21:65:fc:54:b4:2f:60:6f:61:0d:99:23:cd:99:a4:
d4:51:b8:ce:4e:c6:3d:d9:04:87:6b:d9:ab:18:b5:17:01:8c:
7b:da:b4:f6:6b:f7:b6:53:b4:6c:45:07:d7:a3:5e:f1:24:8c:
09:49:8f:f3:db:88:f2:9d:33:ba:c3:68:d7:83:65:c0:f3:d4:
bf:99:26:e1:fb:9c:59:32:e5:b9:52:93:c0:68:f8:e7:5f:bc:
ef:d4:52:fe:25:d8:bf:3b:62:57:4e:9f:7d:a5:e1:3f:b2:9f:
16:dd:4a:08:b8:ea:98:ac:d6:a0:4f:c1:b1:51:ce:44:cb:42:
93:92:8a:2f:1d:d6:34:c8:ed:5f:12:2f:39:75:df:1b:84:57:
12:72:ea:c3:09:28:31:5b:52:84:34:f3:4a:63:b4:34:6a:21:
09:83:cc:eb:ec:da:9a:8f:09:16:fa:bd:9c:45:63:58:c6:a5:
85:38:48:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD//aM805MkP4r0ZB358zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YWNmMDdmMTM1MjIyMjY1OGI3ODllNGZlNDBlYTM4YThh
YTcxZGYwHhcNMjYwMzAyMDEwMDU1WhcNMjYwMzAzMDEwMDU1WjAzMTEwLwYDVQQD
Eyg3Zjc2MGM1MDQ3YzM3NGEzNDFlZmY2YzM0Nzg3YjhhNTlhMDVkNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqombMdHFEDRZcZDhS4Nkw+EuInXN
HguraKsq8YeahIt//VygRR+yHn0MuJovjwAj3qwWSm0vh0b/xZDOszJrxOm5AZWI
H1z7mEfF97jyGsJRLQfa+s7uxjbB8Z0nBwdsU3mmqGfO8X5fsjFvzaJZ7F8NTe1k
jmHYz0Ch7DAb++W5okH2sH4FvHj0YBjLbkzS96biHfG1slnZ39VQXrOlYx3jZTq1
2xv5J8gU+uYY46PFmW1dTa4P+sCLkFsY89ViaNV5G5hBuxO0T+LxwLzNTv2FKazB
ORPbjp6Nh/NJS2v/HSLraTuys6QpjZ3PS1tP8wPzQ/sI8uLX5wyrbN+EewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH92DFBHw3SjQe/2w0eHuKWaBdQPMB8GA1UdIwQY
MBaAFBms8H8TUiImWLeJ5P5A6jioqnHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMt
NzE2YzAzNDdhYTc2LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMtNzE2YzAzNDdhYTc2
LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAep2j5rhV
Sd3HkZecfxoPtbUCg4qU/p1V7WW2rpSAvt52WGVlMrV5O6MbZUrZnq/TEUGzUnZX
KYrF5LA32tJeWejy6AKwjy9X+mmbIWX8VLQvYG9hDZkjzZmk1FG4zk7GPdkEh2vZ
qxi1FwGMe9q09mv3tlO0bEUH16Ne8SSMCUmP89uI8p0zusNo14NlwPPUv5km4fuc
WTLluVKTwGj451+879RS/iXYvztiV06ffaXhP7KfFt1KCLjqmKzWoE/BsVHORMtC
k5KKLx3WNMjtXxIvOXXfG4RXEnLqwwkoMVtShDTzSmO0NGohCYPM6+zamo8JFvq9
nEVjWMalhThIyA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:08 2026 by rpki-client