Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
File: ggBZa784LUmLxewrP9ZTOehbmPI.mft (raw, json)
Hash identifier: y9qOhsTOtq9YzPFGUcy72YhyXyyP/6eNPekFXhgFBYA=
Subject key identifier: 12:9B:13:5C:AA:21:0B:F5:19:69:59:C7:D6:E9:E1:99:CD:79:3D:C8
Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
Certificate issuer: /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Certificate serial: 019D99622EC535A55E435EC397F4F3FDE412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
Manifest number: 105A
Signing time: Fri 17 Apr 2026 03:00:41 +0000
Manifest this update: Fri 17 Apr 2026 03:00:41 +0000
Manifest next update: Sat 18 Apr 2026 03:00:41 +0000
Files and hashes: 1: C3dW_FiIoEs6GrFhvU5lar2mS5g.roa (hash: fqgtLb5/szWJ2+3XnL0HEWrQ0seXWzzVVKN65vv4UQo=)
2: ggBZa784LUmLxewrP9ZTOehbmPI.crl (hash: SfxYJ8Wu1Znl1tRZUJT7wBFs8Cjj0iyaib3F+2syUo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:2e:c5:35:a5:5e:43:5e:c3:97:f4:f3:fd:e4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Validity
Not Before: Apr 17 03:00:41 2026 GMT
Not After : Apr 18 03:00:41 2026 GMT
Subject: CN=129b135caa210bf5196959c7d6e9e199cd793dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:db:f6:bf:7b:a2:b6:77:67:20:66:db:97:
8b:9f:75:03:cd:1e:de:b2:a4:35:ca:c6:ce:ff:0c:
88:44:d4:51:c7:5f:61:a0:74:21:e4:61:ba:f4:d4:
ba:f2:02:c0:ef:1b:53:5d:f2:ef:31:a5:de:a1:7d:
d1:14:ea:e3:26:05:c1:b1:fc:75:f0:03:4c:44:26:
92:78:f9:6e:f1:12:28:f7:73:19:aa:8b:f0:f3:90:
8e:b8:d4:c9:24:10:f4:5e:52:e1:60:8b:4e:18:61:
2a:18:9c:2d:2d:1a:87:48:cc:20:21:bc:6c:af:79:
ce:b7:f7:9d:df:a0:9e:59:71:ab:43:97:dd:41:aa:
4b:ec:96:d4:16:e0:d5:9c:53:5b:93:cd:ac:d8:a9:
ca:7d:2d:d7:da:f0:2f:ad:78:66:53:ad:53:f1:f6:
dc:bd:f4:b3:16:49:46:0b:e1:f3:65:b0:0e:ce:ef:
13:bf:b0:80:61:5c:3b:90:e0:ba:d1:93:14:62:9e:
bf:82:dc:c0:df:d7:bf:e1:dd:64:43:68:f4:b5:12:
6c:5f:59:0f:c4:49:b7:a7:73:4b:8d:9c:67:b6:b2:
f1:05:c4:6f:c6:bf:94:77:7f:e9:df:f4:17:97:36:
82:e9:94:22:39:e5:d9:f3:76:b8:00:7c:d1:74:b7:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9B:13:5C:AA:21:0B:F5:19:69:59:C7:D6:E9:E1:99:CD:79:3D:C8
X509v3 Authority Key Identifier:
keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ab:4b:11:57:32:24:b2:46:28:1d:b8:d9:c6:7b:ab:f8:fb:
58:de:bd:cb:b4:d5:d1:8e:b9:90:63:86:6f:a6:8a:e8:24:a8:
92:dd:99:e0:87:8e:42:3b:27:7a:bc:ab:72:63:95:c8:7b:72:
07:14:a3:8c:a4:34:47:bf:ba:21:b9:a6:b9:91:33:47:9c:ac:
9c:39:06:5b:b4:95:4d:b6:0a:79:6d:33:d6:b7:c6:69:91:6a:
03:03:05:4b:d1:4a:d7:bd:4d:60:43:b0:2b:22:7a:5a:b5:00:
65:20:f7:53:0c:5b:44:63:a6:b2:88:5c:e3:5b:31:38:1a:eb:
76:5d:7c:00:c8:c9:dc:cf:50:81:8c:d6:17:c7:89:ab:41:3b:
ef:90:b2:b9:78:6a:42:8e:0a:ae:4f:76:a6:4c:32:4a:ce:b4:
b1:a7:36:49:27:90:15:53:4b:d9:93:e7:33:a9:d5:5e:97:b3:
4a:f7:c2:7f:bc:5f:59:e8:14:e9:66:4f:b0:d5:13:ce:f2:32:
7a:27:21:66:ed:e5:31:25:c4:8c:4e:69:49:2b:5b:8d:ab:0c:
c2:85:17:83:7b:3f:b3:7f:f2:1c:0f:b3:53:5e:8a:50:e6:f1:
a0:72:d2:08:92:3b:fc:e3:48:0e:6c:b2:c0:a7:f5:e5:4b:13:
ad:39:48:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:59 2026 by rpki-client