Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
File: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft (raw, json)
Hash identifier: hE8RuMUw28FOby+p0hfZ2Mq3L6wa0b/TFetxba2cmtc=
Subject key identifier: 79:A8:A9:5C:54:6B:5D:B6:94:8B:4F:8A:46:62:0F:9F:AB:16:41:8B
Authority key identifier: 19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4
Certificate issuer: /CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
Certificate serial: 019CACB47A1A22BFB9C43ED038A7228A93E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
Manifest number: 0C90
Signing time: Mon 02 Mar 2026 04:00:34 +0000
Manifest this update: Mon 02 Mar 2026 04:00:34 +0000
Manifest next update: Tue 03 Mar 2026 04:00:34 +0000
Files and hashes: 1: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl (hash: GNYmPXdzB5JlBdcvrBIiVuUuron2UD4x4GhUhjdyFPQ=)
2: SnBUF-l7sU2GN1xYWmkSVmuspLE.roa (hash: NWqfON704hEJ6MRTsiaDYlhowGx3tqMVvkRiS8+G1qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:7a:1a:22:bf:b9:c4:3e:d0:38:a7:22:8a:93:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
Validity
Not Before: Mar 2 04:00:34 2026 GMT
Not After : Mar 3 04:00:34 2026 GMT
Subject: CN=79a8a95c546b5db6948b4f8a46620f9fab16418b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:41:a0:72:40:53:95:f0:4b:fd:5c:73:a1:
63:1d:4d:f6:70:4a:7c:27:6c:2e:ea:b3:a0:20:7b:
db:97:e1:19:0d:a8:36:30:c5:56:da:ae:d7:4c:9f:
00:17:6f:91:c2:b8:dd:e4:7b:8a:89:28:4a:66:f7:
d6:3b:06:5f:3b:eb:f0:cd:0f:55:f2:16:13:60:88:
05:41:44:61:e9:1f:e5:ae:59:11:89:ce:66:d5:ef:
20:c1:84:37:45:68:fb:6d:52:ba:e4:46:0a:0c:67:
66:5e:05:61:53:5c:a5:ef:77:c3:e9:f5:71:30:bb:
df:8a:b2:2a:69:7e:86:99:95:0f:ca:73:03:32:82:
4e:06:db:c4:10:f0:90:df:d0:6e:1a:ce:81:41:76:
aa:bb:e3:17:a2:63:03:bd:ae:03:95:4a:52:df:c9:
76:be:4b:3f:41:9f:f6:a3:e4:db:dd:4f:fa:21:67:
75:45:3a:21:7f:1e:96:66:ea:93:68:18:bf:a5:79:
37:57:a8:16:7f:62:e7:33:96:4a:b4:f5:0d:2f:d3:
93:fa:5d:b0:db:c6:95:74:64:16:3d:c3:f7:2b:86:
51:ef:d9:76:5c:d9:c8:e9:5a:e2:f2:10:f6:81:b9:
cb:71:ad:d7:89:ed:02:fe:3c:40:60:c4:fe:98:7d:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A8:A9:5C:54:6B:5D:B6:94:8B:4F:8A:46:62:0F:9F:AB:16:41:8B
X509v3 Authority Key Identifier:
keyid:19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:27:d4:c4:39:b1:57:5c:ed:e2:b1:95:67:f7:9c:9e:93:15:
72:29:32:9d:ce:76:f7:5a:b1:50:17:7f:30:ae:36:0c:ba:d9:
fe:c0:4a:f0:3f:72:f3:98:cd:c3:4b:bf:31:fb:bd:96:15:1f:
73:28:4e:94:da:5c:ab:1c:f3:9b:af:e0:fd:d0:2b:38:a3:4e:
a0:c7:70:64:fc:29:f2:f9:5f:4d:3d:91:bb:da:23:a8:01:0b:
81:ec:57:99:10:e0:86:24:7f:7e:c4:32:55:0d:5d:9b:e5:75:
2d:06:27:06:c2:23:a2:b3:98:4a:ec:9b:9c:9f:70:20:71:fd:
f4:77:48:6f:0e:4f:22:3d:64:36:63:6a:b9:f0:f3:e3:e6:93:
c9:08:fd:f7:e6:09:12:71:e9:82:c8:be:09:20:ca:84:4c:f1:
4b:30:18:5b:a8:ff:d1:f0:9e:92:56:1f:b9:f2:08:bf:8c:1e:
8b:21:b5:f5:05:b7:53:18:f7:c2:5e:78:f9:e0:8f:b6:b1:2d:
79:fc:f7:2d:6c:a5:87:c2:e2:a8:d2:0e:1b:58:e2:03:f9:53:
02:70:12:64:3d:2d:be:13:44:2a:d9:de:9e:0e:4a:cc:95:ba:
66:6b:dc:a8:7e:ab:fc:c2:80:33:9d:d1:ce:6a:5c:af:9a:51:
8c:f8:d6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:45 2026 by rpki-client