Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
File: ggBZa784LUmLxewrP9ZTOehbmPI.mft (raw, json)
Hash identifier: nXx3jaOy4/NcD3hFL8K/BKT4ti0eSsGBOVqwJvWUKHM=
Subject key identifier: DF:C9:32:57:2E:6C:E8:92:9A:CC:52:1F:03:8B:73:7E:28:24:D4:7E
Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
Certificate issuer: /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Certificate serial: 019CABD9D4AAB84616A0D739C9405D2F0596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
Manifest number: 0FDF
Signing time: Mon 02 Mar 2026 00:01:45 +0000
Manifest this update: Mon 02 Mar 2026 00:01:45 +0000
Manifest next update: Tue 03 Mar 2026 00:01:45 +0000
Files and hashes: 1: C3dW_FiIoEs6GrFhvU5lar2mS5g.roa (hash: fqgtLb5/szWJ2+3XnL0HEWrQ0seXWzzVVKN65vv4UQo=)
2: ggBZa784LUmLxewrP9ZTOehbmPI.crl (hash: Oib5d4uvaCAQ1OseqDrN5tsOkGU+KtD7izaJKLshPl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d4:aa:b8:46:16:a0:d7:39:c9:40:5d:2f:05:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Validity
Not Before: Mar 2 00:01:45 2026 GMT
Not After : Mar 3 00:01:45 2026 GMT
Subject: CN=dfc932572e6ce8929acc521f038b737e2824d47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:af:a9:be:9d:6c:b0:38:70:b7:30:ea:e9:
de:60:e7:87:75:d4:4d:54:6a:91:12:80:32:a7:13:
7f:ad:7e:b1:68:2b:68:bb:b0:c0:a8:2f:76:00:6e:
3a:48:6b:70:a9:8c:27:0b:1e:80:15:53:6f:c5:8b:
6d:66:97:87:10:a6:94:66:c0:d8:69:22:ed:7e:4e:
f8:14:fd:99:96:ab:63:50:95:c1:b8:6d:57:06:50:
03:c8:58:d0:27:ed:8e:2a:ea:ee:1a:de:21:36:9d:
54:57:75:13:a3:97:4e:ef:bd:c5:c0:cc:7f:55:c6:
18:28:3a:d6:1f:d0:48:c2:74:19:c2:18:83:bb:3b:
c7:18:3e:45:bc:7e:12:62:28:c3:91:94:56:04:3b:
16:19:4e:e6:55:ad:51:4f:bf:10:a0:16:bd:a6:33:
bb:f2:c7:19:97:bd:53:b9:c1:a1:6f:e0:b2:be:98:
c6:4b:60:ce:e2:c1:9e:83:b7:ed:9d:14:4c:71:19:
35:4d:69:70:51:27:5a:64:d0:9a:7e:7d:d8:a8:9e:
a5:82:76:79:1a:56:e2:8a:7d:91:3e:d1:e2:3e:bc:
71:b4:8a:75:e4:1b:cb:1f:94:12:84:bd:3e:e1:b1:
70:a9:d3:94:cc:e7:c2:0f:d8:80:3b:b4:68:8c:0a:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C9:32:57:2E:6C:E8:92:9A:CC:52:1F:03:8B:73:7E:28:24:D4:7E
X509v3 Authority Key Identifier:
keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:43:e5:a1:a2:7d:c4:41:da:67:64:da:70:23:f5:35:0c:d5:
3c:74:f4:c8:54:d0:76:5f:fd:aa:86:fb:0c:44:0a:ed:f5:0f:
ec:13:ac:26:e0:95:a7:06:84:6e:05:f2:99:d7:17:63:ab:69:
7b:d1:e8:29:dd:1a:9d:8a:8b:29:01:16:ff:e9:96:df:c9:97:
c0:59:27:07:8b:cf:63:82:5b:07:7b:ae:f4:89:0a:b6:be:e1:
4e:45:3d:55:eb:9e:46:eb:25:41:eb:8e:8b:09:ad:ef:6c:3b:
a6:a1:30:88:1f:45:16:05:de:5a:c0:42:45:d9:a4:16:f4:a4:
55:38:86:0a:c8:ae:56:2f:05:8e:1d:ff:24:ff:aa:bf:3d:dc:
0d:6f:97:76:08:18:e0:3c:9e:74:a0:cb:70:2e:2b:f9:29:95:
b3:14:5c:70:94:87:66:f0:5f:9d:3b:54:d5:bf:5b:ce:a0:86:
af:8b:c7:b0:03:9a:32:44:4a:86:44:03:b6:09:67:39:23:18:
f0:39:5a:5c:d8:57:fe:90:97:43:a9:f1:29:d8:b3:14:3f:93:
26:e6:45:af:7e:b3:96:cc:43:1a:27:ef:79:c9:a3:1c:76:94:
ba:2a:ac:9a:d0:94:f6:ee:d8:55:08:d8:99:0a:67:a4:a8:89:
29:4e:b8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:57:52 2026 by rpki-client