
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File: GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier: CjI8zMpPJh3XfX0siwHwcJY+2avFiYf+XZTvTrd2fIk=
Subject key identifier: 4F:C5:81:59:3F:56:F2:00:F0:66:93:30:79:76:AA:CA:65:88:B1:9F
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer: /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial: 019CAD908FD12D1BF3FF700ACAACECC3161C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 08:00:58 +0000
Manifest this update: Mon 02 Mar 2026 08:00:58 +0000
Manifest next update: Tue 03 Mar 2026 08:00:58 +0000
Files and hashes: 1: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: ltU8TUdp92iVjz3FQkdRmzukrnPZor+k2h7uiouz+bc=)
2: i2X0mHk6bAtPNecvn2NA6zmZj9U.roa (hash: mQLU4VLoVcMKqVZZfsB2FdV3V92h7zVuv01+LCyktYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:8f:d1:2d:1b:f3:ff:70:0a:ca:ac:ec:c3:16:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Validity
Not Before: Mar 2 08:00:58 2026 GMT
Not After : Mar 3 08:00:58 2026 GMT
Subject: CN=4fc581593f56f200f06693307976aaca6588b19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:14:1f:17:af:19:cb:10:a6:b4:eb:6e:d9:
2f:37:eb:08:e0:e1:35:17:58:7c:31:17:5a:97:12:
d9:07:b5:9d:31:be:44:3e:fb:06:76:a9:67:f5:92:
e9:3f:ec:b7:03:e3:b2:0a:89:7e:f7:6e:64:be:58:
c4:bc:87:fe:57:56:54:9d:0b:82:07:d3:36:78:db:
b5:67:aa:35:97:00:ad:c5:57:35:99:5a:e6:df:dd:
8b:a3:c8:cb:23:08:11:64:df:54:7e:c6:da:97:fd:
9e:98:82:05:54:47:d3:3f:0f:ae:e6:1f:08:f6:8c:
ec:30:0f:34:5e:2b:e9:f4:dc:b6:22:e1:11:d7:89:
5c:7d:8f:d9:ab:97:51:c7:75:e3:41:1a:d0:fc:7d:
fa:5a:2c:1b:f6:20:72:f2:4c:cc:e0:64:da:46:50:
f6:37:ce:40:b5:1b:fa:fd:3e:b4:b8:1c:12:8b:2f:
00:9e:9c:ec:8f:a8:1a:f3:ea:f7:e9:ef:68:53:2c:
f5:5d:13:3b:95:06:29:ee:1c:d4:ac:ba:88:aa:10:
8f:3b:45:03:4e:86:11:59:b4:53:49:6a:ea:8d:38:
93:4b:ff:30:b7:b3:4d:6f:6b:02:48:77:7d:77:ed:
4c:2b:94:81:ee:b1:ec:4b:7a:66:7e:31:24:9d:18:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C5:81:59:3F:56:F2:00:F0:66:93:30:79:76:AA:CA:65:88:B1:9F
X509v3 Authority Key Identifier:
keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:60:48:37:95:2c:ed:23:37:29:87:66:7e:09:0f:88:ac:66:
38:6e:11:4c:e5:c3:14:f5:eb:61:76:e1:76:ea:c9:74:ba:dd:
26:52:6e:16:9b:96:e6:34:6d:f3:53:a6:0d:12:f1:1f:1d:c2:
0a:26:0a:c8:61:7d:d0:c9:f9:de:de:81:83:c3:8a:33:5b:e7:
09:ed:14:3f:21:4d:da:7e:81:c1:37:4b:8b:0b:d2:c9:f9:e4:
b4:b5:be:ed:eb:db:3a:9b:94:5e:54:06:59:61:dd:43:52:e8:
bb:a5:8d:4f:8c:cf:8e:26:cd:bc:68:d4:43:f7:91:35:99:ac:
10:61:a7:8f:5c:cc:3e:76:ac:e1:4f:24:8f:38:c0:7d:4a:8a:
18:25:7a:87:84:b7:e8:e5:f3:63:1d:1a:de:23:45:3a:77:a0:
2d:91:5b:2c:e3:2b:a1:97:04:bc:d9:a8:d5:4f:17:07:2c:be:
d7:a1:b5:82:21:6d:15:8c:73:94:a2:38:55:2b:d7:ff:bf:47:
4c:02:1c:e3:4f:bb:f0:d8:43:a6:a3:e2:6f:60:b6:1c:70:da:
31:28:9d:a7:4c:8c:ae:cc:93:91:b5:bf:af:e6:6f:13:5a:4c:
db:38:a7:35:e7:37:26:0f:75:fc:08:55:5a:0e:24:91:34:86:
9d:be:2d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:25 2026 by rpki-client