
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json)
Hash identifier: 8P0XAAsxj8JqZTZCtIl+wpJTeqr9j0wCKtcWtO3s37I=
Subject key identifier: 82:19:38:23:81:DC:C5:02:71:62:9D:74:1B:E1:A4:0D:5F:42:9F:34
Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
Certificate issuer: /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Certificate serial: 019CAEA357D0B1A7AEEB2EC63F544E8759CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
Manifest number: 0800
Signing time: Mon 02 Mar 2026 13:01:06 +0000
Manifest this update: Mon 02 Mar 2026 13:01:06 +0000
Manifest next update: Tue 03 Mar 2026 13:01:06 +0000
Files and hashes: 1: BrA8u2faJKSWsAITat9kgoQt3WE.roa (hash: gxZOLWmQMlnhj/neNAY1nmBM8bF2InZz8Umo3wa3Z6A=)
2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: iVn/tEZ+EVZdCpwO3V2Qg5lJ/ekDZl8f7FMRmd5yrpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:57:d0:b1:a7:ae:eb:2e:c6:3f:54:4e:87:59:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Validity
Not Before: Mar 2 13:01:06 2026 GMT
Not After : Mar 3 13:01:06 2026 GMT
Subject: CN=8219382381dcc50271629d741be1a40d5f429f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:ad:80:f8:7c:09:83:e3:e7:08:33:8e:d8:
7d:03:7e:97:31:4d:41:55:f0:9b:f2:29:db:78:6d:
57:0b:ee:c9:7c:66:fb:38:87:9b:ec:b0:bd:4c:ac:
65:7d:e1:b7:71:4d:4b:85:b2:c2:ad:f4:43:5f:7c:
14:d9:d9:14:e1:80:39:b9:1d:ab:1e:28:1b:62:96:
77:57:f1:44:bc:5e:46:d2:1c:25:aa:2a:23:21:97:
cd:da:7e:e9:72:b3:e8:6b:03:38:26:7c:c7:49:91:
f6:1b:5f:8c:41:8e:35:1b:6d:72:1d:b5:4b:54:74:
66:5f:07:8e:74:77:fe:83:08:e5:fa:53:b0:4f:30:
9c:70:47:b7:cb:fe:73:16:2e:48:6f:c0:34:08:35:
c1:d4:4f:f6:30:7b:e3:d7:a3:a8:d1:c1:50:b2:1a:
a7:f4:9a:fd:f6:b2:d0:01:96:04:75:42:ff:4b:b9:
d5:57:af:ed:63:69:9e:0b:b8:64:45:62:c4:d5:01:
d8:18:5c:b3:14:31:13:eb:4b:85:8e:dc:7a:41:3c:
1d:c3:bb:39:23:0b:b7:77:60:30:67:30:4f:e1:a2:
ab:ca:2b:a8:77:c7:4d:1c:f1:aa:dc:2f:1b:f2:82:
ef:ba:e6:86:51:48:05:8a:a9:a7:c2:27:11:c5:64:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:38:23:81:DC:C5:02:71:62:9D:74:1B:E1:A4:0D:5F:42:9F:34
X509v3 Authority Key Identifier:
keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d4:cd:fa:62:b9:49:b1:06:26:2f:ed:7e:5e:94:48:77:bb:
4e:6e:63:a5:d9:74:ad:73:95:3e:91:74:4b:7d:57:bd:39:5c:
a2:f3:d8:45:c2:12:79:0d:bf:bb:0a:ff:a7:70:e7:4f:2c:97:
08:2e:9e:58:8d:a0:61:91:c2:cf:5c:47:59:5b:e1:f5:19:d3:
08:48:5f:46:12:bc:97:4d:c8:68:84:5a:4a:c3:d2:13:7c:37:
48:1f:89:97:7a:39:23:65:09:67:f8:82:18:b3:0c:80:93:74:
b2:12:7a:75:f3:a7:56:92:50:7f:d4:e6:9d:17:6f:ce:0f:b2:
e7:11:e6:e1:5f:5c:43:61:ac:45:7d:ad:2d:17:ab:db:e5:92:
77:0c:e7:18:05:b6:84:ba:99:a9:ca:23:51:40:3e:0c:06:d4:
8f:d7:e4:6f:a3:37:5b:48:c2:9b:c8:1a:d8:f5:cb:db:4d:cd:
14:06:42:60:d7:fe:dd:1c:52:1a:fd:f2:59:38:c7:08:a6:c7:
4c:a3:7c:ae:58:97:7f:cc:02:30:a5:a3:ac:5a:77:8e:7a:62:
c1:63:a8:c8:97:49:b4:37:87:17:98:e2:e9:15:73:99:6f:4b:
e1:1a:d3:71:ba:76:7a:72:18:33:0a:52:0a:22:a1:6b:18:79:
f7:d5:69:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:25:44 2026 by rpki-client