Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: yTrdaoR5U1BIWWzpLKWjcYNmgiWHZFL2bkY0zwEhcNM=
Subject key identifier: 79:AC:A6:0C:F1:93:F7:CD:49:A4:E8:1A:43:D6:EA:98:0B:F5:19:01
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 019CAB3408A47AFCD256999E156991E9ACEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:39 +0000
Manifest this update: Sun 01 Mar 2026 21:00:39 +0000
Manifest next update: Mon 02 Mar 2026 21:00:39 +0000
Files and hashes: 1: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: BMDfiMVfFXgfmNgjKuQe9+b8CtlDvOCERpzJf69o488=)
2: NYfYWYZMa_439o1QRYF0WdRM5MM.roa (hash: 8UO+Z6kVQhD/teXdacx0W8x4zMZ5SdEkPaLtrfrmHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:08:a4:7a:fc:d2:56:99:9e:15:69:91:e9:ac:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Mar 1 21:00:39 2026 GMT
Not After : Mar 2 21:00:39 2026 GMT
Subject: CN=79aca60cf193f7cd49a4e81a43d6ea980bf51901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:e9:02:c9:70:de:31:be:3e:ec:d1:04:e9:
8b:43:c9:56:f8:98:84:1c:f7:5a:ae:70:aa:a3:de:
b4:e1:0e:f0:a2:67:b7:b0:36:d5:63:fe:34:dc:25:
f2:bd:e6:2f:d6:bc:2d:53:b6:06:1c:e1:54:a5:ce:
00:2c:6f:b8:2e:92:d3:bc:17:87:d1:28:f0:5b:1c:
08:79:4a:92:8c:f7:30:aa:e9:84:a2:86:8d:e4:af:
82:52:16:22:c5:72:87:33:5c:96:ca:eb:02:a4:db:
d2:bb:97:22:97:0e:fa:d7:14:18:b5:7d:74:d3:de:
b8:2a:f6:27:eb:c1:fd:02:66:a4:6e:b8:4c:9d:14:
61:a5:81:7a:0b:5b:ae:9b:bb:bb:e1:9c:5c:50:7a:
df:48:ae:c0:36:b6:4d:1a:ea:39:23:ab:95:66:c9:
d9:5a:7d:06:6a:4c:28:e7:3a:f1:2a:33:64:22:61:
b7:bb:21:28:65:89:75:8d:67:da:c1:00:db:ab:b0:
b0:4c:d9:fa:4f:6d:8c:13:be:6f:1a:05:53:c0:66:
26:5e:cb:a4:a9:65:ac:7d:ec:91:da:23:4b:65:2c:
07:aa:5f:27:ee:37:59:7e:69:f5:45:9f:eb:23:2a:
a5:4f:2d:65:2b:21:4a:ff:2c:ab:14:8e:fd:a4:44:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AC:A6:0C:F1:93:F7:CD:49:A4:E8:1A:43:D6:EA:98:0B:F5:19:01
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a4:49:b5:0e:30:28:41:99:b2:13:40:0f:ee:d5:62:e7:60:
f9:4c:29:db:f7:6a:42:e4:72:87:4c:64:22:1b:ef:c7:56:74:
8c:ea:9a:66:98:b5:a2:64:ba:f6:73:1b:0a:a5:14:38:5f:5e:
57:3f:47:b8:a6:7d:48:70:d3:0c:31:82:4e:b2:8a:bd:94:f3:
01:2c:6a:4e:21:33:ac:0e:e0:70:9f:05:2c:13:2d:4c:9b:ca:
2d:04:ac:0d:ef:b0:dd:04:e5:69:78:9b:8b:f2:40:5a:14:5d:
a9:b0:ea:35:4c:5a:d3:24:4d:7c:0f:f7:a9:ce:01:89:11:22:
bb:63:ed:36:7c:1e:7a:e1:f3:07:b6:c5:d3:d6:7a:1f:12:4c:
35:b0:e9:36:ea:df:9c:8c:40:3a:dc:b1:7e:7b:f4:c8:6d:89:
95:dd:7b:9c:2e:f8:20:1e:11:67:63:8a:44:4b:de:9f:0a:19:
4f:4f:7b:11:6a:2e:44:62:dd:ee:22:d9:1f:de:5a:b2:9c:ff:
93:ee:52:87:98:52:8e:59:95:59:01:15:60:36:54:60:d1:9b:
bf:c4:7b:21:0a:49:6b:37:9b:5b:0e:c3:ad:0b:24:92:aa:f3:
be:f0:c5:75:01:31:d8:99:3e:3b:a8:8b:c1:8c:e9:1e:b2:43:
23:af:cd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:27 2026 by rpki-client