Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File: GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier: BOPtrUDd8y1e5ICx0fk6m4qIP7LkYfGrMmfjoEXbZVw=
Subject key identifier: CE:3B:A9:D1:E1:C7:98:48:A9:AC:AD:1D:08:30:FD:54:01:40:FC:49
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer: /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial: 019CAD905D25EFF6600FEFC315348C1C61F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number: 0B6C
Signing time: Mon 02 Mar 2026 08:00:45 +0000
Manifest this update: Mon 02 Mar 2026 08:00:45 +0000
Manifest next update: Tue 03 Mar 2026 08:00:45 +0000
Files and hashes: 1: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: E1hVgwBsIFxUS/5pt2DPc21fevE7l0zn4N1gFiX8+WE=)
2: HMpfD8yWZ0j1ouvG1EDM2ZSSE8c.roa (hash: SGGQvvIcUh55SsmT9zcE0INbCSKqRJfWxR5dRHBgMA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:5d:25:ef:f6:60:0f:ef:c3:15:34:8c:1c:61:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
Validity
Not Before: Mar 2 08:00:45 2026 GMT
Not After : Mar 3 08:00:45 2026 GMT
Subject: CN=ce3ba9d1e1c79848a9acad1d0830fd540140fc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:97:de:e1:a7:ab:58:af:c0:30:1f:85:b9:
ea:60:16:7e:5e:98:24:fe:4c:bf:96:eb:6c:2a:1c:
0a:90:1a:68:d4:61:73:d3:f9:89:99:e0:bf:12:77:
09:f0:f3:6a:8a:f5:58:95:37:fe:1e:d3:43:d7:c5:
a7:f1:8d:66:b8:2c:04:27:69:10:47:88:25:21:29:
fa:01:b2:1b:27:99:b6:fc:be:32:18:fa:3f:c8:e6:
1c:ca:e5:a5:43:18:79:b9:a3:ba:77:e7:50:72:75:
42:64:15:8e:87:54:61:2c:38:65:34:be:b2:69:02:
a1:52:7e:2f:47:c6:0e:eb:df:f6:cc:0b:aa:59:60:
50:2f:83:0c:90:c7:b1:49:d1:c2:2c:e4:08:4b:80:
02:53:82:f9:8a:1d:92:b0:75:1f:99:90:06:a0:c5:
56:f6:b4:f3:fc:32:f8:a6:e5:7a:68:dd:2e:c2:e7:
0c:32:f4:e8:64:90:45:1e:a9:2e:16:63:81:d7:f8:
1e:56:2b:30:44:ab:1f:da:67:de:65:62:26:a4:32:
2e:33:3b:8b:03:90:d6:5c:49:79:51:0a:bc:71:c7:
43:de:af:56:45:2f:b4:e4:9c:95:80:14:16:b5:d4:
da:19:a3:60:61:31:5c:c9:cd:48:b5:4a:50:f9:9d:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3B:A9:D1:E1:C7:98:48:A9:AC:AD:1D:08:30:FD:54:01:40:FC:49
X509v3 Authority Key Identifier:
keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b7:6e:75:cd:3c:58:ab:65:b1:9f:3b:6a:70:a2:23:6a:86:
e1:c7:f3:d4:74:dc:fa:dc:bc:db:29:03:8a:74:a2:e3:8f:5e:
45:6f:18:5e:c4:7f:26:e0:94:e3:9e:4a:ad:a4:06:fe:24:b8:
27:1f:f9:77:40:8d:ab:ee:f8:5e:aa:f2:b4:13:e0:bb:33:4f:
b3:f3:b7:6a:7a:77:30:01:0f:e6:81:ef:40:9a:14:59:a7:22:
db:0b:dc:e3:4d:85:da:12:4f:0d:00:1d:a6:23:36:a2:b4:e5:
67:39:ed:87:27:c0:d2:55:bb:42:22:f6:cd:76:0d:d5:f8:1e:
39:ab:78:65:04:c7:7e:da:95:72:ac:15:39:c9:16:9c:79:fd:
8a:23:03:22:00:52:52:8e:87:f4:1c:a7:92:7c:98:2c:d3:0f:
a6:05:54:2c:54:54:1c:72:52:13:40:05:1c:df:68:2f:61:82:
a2:b0:f5:91:7d:07:f6:79:b3:da:b3:bb:b8:03:6f:ed:15:b9:
95:78:03:01:a2:aa:a9:a8:78:99:4d:bb:b7:8e:05:b7:50:9e:
e8:78:7c:f3:98:36:37:ef:64:d8:71:53:80:9f:3c:19:d9:95:
a6:3c:0a:e0:03:91:86:60:a4:b2:c4:13:43:64:06:e2:00:8c:
8a:7c:ac:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:33 2026 by rpki-client