Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: ZrMGGwejo3Gauzp0zWgogLHo1uBzHLxYE0Ikjr0s228=
Subject key identifier: 8A:E7:F6:9F:4B:92:F5:C2:E6:AA:7F:0A:24:14:61:21:38:90:AE:3E
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 019CAAFD19DB1DA5DBCFD773C742EB7835B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:00:39 +0000
Manifest this update: Sun 01 Mar 2026 20:00:39 +0000
Manifest next update: Mon 02 Mar 2026 20:00:39 +0000
Files and hashes: 1: 9U9GJ2gIPT5fQlwrS_PORXQ8IEw.roa (hash: Ew3sgvXIFSVbIaXejNH5mh4KuqPNbuNRT+236zCj8P8=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: dNL9sCPH3evIMZAjm98bESszueDFX74UP09EVwIGWwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:19:db:1d:a5:db:cf:d7:73:c7:42:eb:78:35:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Mar 1 20:00:39 2026 GMT
Not After : Mar 2 20:00:39 2026 GMT
Subject: CN=8ae7f69f4b92f5c2e6aa7f0a241461213890ae3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:50:2a:79:27:9c:71:d8:9c:b8:63:44:f6:a3:
0b:fd:11:fd:f8:db:b8:3f:28:9d:ca:55:6b:d3:cc:
2e:05:7e:0d:6b:44:9b:c9:ae:8c:09:ce:b9:02:fb:
ed:9b:17:3f:02:02:87:e9:d3:3e:e3:51:2a:e0:ee:
64:44:f3:3f:e7:7f:4b:52:9e:63:b0:f1:c4:1a:83:
2c:ff:be:47:bf:b8:2d:06:2f:a7:a4:c7:bc:c0:e1:
78:af:7b:22:6d:8a:e7:aa:4b:09:2a:36:a8:43:d7:
d3:06:db:c4:e8:0d:d1:b5:d6:3f:59:39:f7:80:0b:
e8:27:90:3f:ee:07:f9:db:26:8e:5f:36:09:41:e1:
cb:08:9a:74:b9:06:c8:22:3e:22:c7:a2:d1:a7:a1:
77:b0:28:6d:3f:b4:83:e0:33:98:8c:96:d9:c2:3f:
8f:cb:85:4b:31:92:d5:04:ed:cd:56:5a:ef:f5:a1:
e6:e1:52:38:a6:99:2f:25:9e:e3:9e:9e:10:37:0e:
8e:97:5b:9e:55:c9:0f:f6:b8:44:89:cc:0b:5b:b2:
c8:21:cd:21:bc:d2:f1:d6:7f:32:8c:fa:3e:1f:54:
6b:d0:23:6f:04:d8:91:01:d1:c3:bd:96:39:ab:e8:
85:9c:15:e1:76:74:6b:6e:fb:a3:eb:31:3b:b4:21:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E7:F6:9F:4B:92:F5:C2:E6:AA:7F:0A:24:14:61:21:38:90:AE:3E
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:43:51:10:52:18:b8:74:39:4d:e6:ae:58:a2:0a:74:75:a5:
fb:7e:8f:43:82:d6:49:d6:34:87:d6:3b:ad:d8:2f:dc:e7:83:
a3:2c:06:e4:4e:24:18:3d:b3:7d:d8:a0:b1:aa:25:04:6c:bb:
70:89:d1:a5:10:f7:9a:ae:30:6c:38:c3:58:3e:4f:ca:5f:f8:
45:57:f0:0a:b7:5f:36:49:66:14:65:5a:33:3a:32:6e:1c:f1:
8b:29:03:f1:51:cf:3d:c0:16:cb:5d:ea:0b:0d:a6:cf:dc:42:
65:fc:90:cd:b9:cf:a5:11:ec:0a:66:4a:ef:98:81:b7:0d:0a:
21:fe:d5:54:8e:a5:7c:68:af:f4:22:8a:7f:26:2a:8d:c7:4d:
49:7a:96:12:a9:b2:d8:44:bd:3a:3c:9b:95:63:78:2e:0d:29:
b7:62:d6:05:d7:c3:1d:16:cd:a7:81:b0:23:50:6f:9f:02:d9:
8e:ac:78:0c:8f:92:ee:c7:23:81:33:8f:a5:18:cf:ae:69:ee:
cd:45:06:99:b8:04:e9:92:e1:6b:c9:ad:f9:f7:a3:5a:5d:27:
53:63:63:11:cc:0a:96:e3:25:88:d7:45:a3:90:f0:7f:3c:60:
a5:05:42:20:2f:4e:12:a7:ab:f8:a9:0b:19:14:32:33:2f:e6:
1f:3d:46:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:47 2026 by rpki-client