Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
File: gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json)
Hash identifier: 4EISxtrxcNcGL2cd0cbGn2KFVXoUi8rVDn29KXRdiWY=
Subject key identifier: 80:B2:41:96:76:F1:95:70:B2:CB:42:22:A2:D7:57:D5:87:31:5D:66
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial: 019CAAC667A4A4D8DD132F0F01F9A27E1C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
Manifest number: 0F2C
Signing time: Sun 01 Mar 2026 19:00:55 +0000
Manifest this update: Sun 01 Mar 2026 19:00:55 +0000
Manifest next update: Mon 02 Mar 2026 19:00:55 +0000
Files and hashes: 1: 5GkzwsX2SAkCt9B6c4atkjd4rkM.roa (hash: 8XwwTszWSwQ0ODWiARrL0mvIBAeBsaR0WFrNoJhXWyY=)
2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: TEMZzbdt0ZVHslrSpSbGComn78gvoqabK4mTke9GWDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:67:a4:a4:d8:dd:13:2f:0f:01:f9:a2:7e:1c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
Validity
Not Before: Mar 1 19:00:55 2026 GMT
Not After : Mar 2 19:00:55 2026 GMT
Subject: CN=80b2419676f19570b2cb4222a2d757d587315d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9c:b9:ac:6d:d6:3f:e8:83:a8:1e:fc:65:b6:
58:cd:95:a5:e6:a2:a2:d7:b8:c8:0d:9e:51:81:da:
c0:05:ef:58:6b:53:b1:05:07:36:3b:4e:64:43:40:
4f:47:3a:e6:f8:38:d9:9f:62:f5:1c:88:dd:bf:b4:
6a:fe:36:91:3a:7d:68:a4:90:ae:6a:7c:89:26:1f:
ff:06:ce:cd:21:96:0f:1f:6d:3a:1e:a9:83:64:01:
47:33:e2:5d:56:80:e0:89:b0:80:67:34:24:d6:41:
a7:8e:3f:d4:02:c2:32:6e:c0:27:d1:a5:43:ae:f1:
c2:5f:89:8b:e9:47:e8:a1:e8:48:22:ba:d3:1b:8f:
64:fe:4d:72:7e:75:2c:4c:00:1e:71:93:a5:08:e7:
ed:d0:e4:34:96:e2:4f:c7:3c:c6:91:92:e8:03:22:
69:a1:e7:cb:77:4c:09:98:d1:12:59:a6:e5:1a:bb:
7a:1a:fc:0c:94:e3:f2:60:b9:a6:1b:54:c1:ff:09:
b6:74:fc:b5:09:d1:1b:fb:b8:47:f3:e7:b3:99:03:
46:4d:06:46:f7:56:14:24:ea:5d:53:1e:60:03:75:
ef:9e:41:a6:a1:93:fc:44:93:f7:cd:45:46:c2:f6:
bf:5c:83:36:75:2a:b8:9a:88:9a:74:e3:b1:e0:3a:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B2:41:96:76:F1:95:70:B2:CB:42:22:A2:D7:57:D5:87:31:5D:66
X509v3 Authority Key Identifier:
keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fb:2c:28:c3:0e:84:23:18:32:5f:cb:87:bb:e6:fc:5d:ce:
89:c5:46:12:e3:fa:9f:97:7a:c7:8c:67:d8:94:ad:51:a3:d2:
4e:7a:27:aa:58:41:56:2f:a7:ee:58:1f:2d:f3:ec:f3:00:a6:
38:51:63:a6:c7:3e:d9:a8:f4:27:86:51:ec:fc:29:c5:57:1d:
1b:c2:2c:a3:c3:62:80:ee:fe:e6:3f:99:ef:cb:1d:2d:22:69:
cc:d0:bf:68:b2:9b:ff:81:45:fd:88:41:5e:60:e1:20:9a:af:
e4:19:f0:76:83:dc:0a:2c:39:58:f8:a7:43:6d:f9:34:d8:b3:
16:8b:07:bf:b6:db:df:06:bd:b0:d3:ef:8e:07:fa:88:05:c0:
7c:ad:1a:51:ce:ea:50:58:62:a3:a8:b6:7c:a9:84:1d:3b:a7:
6e:90:e1:6d:37:aa:2b:96:36:ca:eb:9e:82:2e:85:63:57:34:
5f:73:af:b3:dc:0a:bc:11:98:23:64:c8:3e:ca:87:0e:d4:87:
76:46:25:03:29:42:39:03:aa:bf:da:be:c6:47:cf:27:cc:1b:
23:3f:b6:95:fb:2f:9c:43:9d:fa:d2:85:2c:6c:db:a5:29:36:
38:88:58:d4:c9:ec:fb:6f:a4:b7:3e:05:1c:37:e4:7d:48:5a:
da:1d:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:10 2026 by rpki-client