Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
File: gcAMyMc9EUHIklTtVWqNASypAiY.mft (raw, json)
Hash identifier: zEH4P+rZ4QtptkddYpF3ZPWTXKsZCYyz0c0hw8o45X4=
Subject key identifier: 7D:97:DB:BD:05:D4:59:02:4B:21:B1:0B:6B:97:34:31:F1:8C:60:03
Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
Certificate issuer: /CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Certificate serial: 019CAD9027C79C880A853AC91D2BF31A2189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
Manifest number: 0A95
Signing time: Mon 02 Mar 2026 08:00:31 +0000
Manifest this update: Mon 02 Mar 2026 08:00:31 +0000
Manifest next update: Tue 03 Mar 2026 08:00:31 +0000
Files and hashes: 1: HughWH6Do-c-ENW-fx99oMeCUqI.roa (hash: 14sSq9ial8O4LgAIGDTRQt5ot4BvdM54tuDwJgopA0M=)
2: gcAMyMc9EUHIklTtVWqNASypAiY.crl (hash: iml27xSL3Bga8GHVL9mvhF6AaI3uxrtSvKM/UVOpKdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:27:c7:9c:88:0a:85:3a:c9:1d:2b:f3:1a:21:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Validity
Not Before: Mar 2 08:00:31 2026 GMT
Not After : Mar 3 08:00:31 2026 GMT
Subject: CN=7d97dbbd05d459024b21b10b6b973431f18c6003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:3b:79:5e:31:ba:a6:24:4a:a5:f5:b2:66:
bc:94:c0:49:e3:2f:d7:54:13:cc:7e:90:c1:60:c3:
aa:67:ca:4e:6e:e6:4e:3c:09:ba:64:81:22:5d:4e:
0a:31:28:e5:70:92:f6:19:50:1e:a5:51:45:83:f9:
56:ac:22:a1:48:39:de:05:f9:8a:65:9b:83:0d:9c:
4d:8f:97:e9:34:27:6f:f8:c7:86:f1:85:55:5b:99:
b4:98:a5:62:48:ff:5a:2d:40:20:2f:79:05:1c:51:
9c:24:e0:17:9b:db:df:18:c7:07:07:61:24:c5:94:
d1:5b:9d:05:67:91:2d:e4:d0:1d:f0:51:50:81:10:
11:d0:8a:15:c6:f3:2a:01:76:a7:a5:e7:d9:2b:8b:
33:20:7c:ff:cb:47:b4:c6:f8:91:1e:f8:69:c9:5d:
72:b0:a2:61:30:55:7d:0c:52:78:0a:9c:75:21:d9:
55:f7:ab:3e:ea:02:ae:6c:39:af:14:3b:bd:e8:3f:
97:59:eb:4e:80:4c:87:48:9c:88:ea:90:14:67:06:
4d:a8:07:36:04:38:77:fa:45:d1:58:40:2c:76:ec:
61:aa:30:28:09:1b:f0:7f:ae:57:2f:c8:42:3a:66:
5c:06:4e:f5:dc:70:27:b6:4c:04:12:cc:9d:d3:e3:
40:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:97:DB:BD:05:D4:59:02:4B:21:B1:0B:6B:97:34:31:F1:8C:60:03
X509v3 Authority Key Identifier:
keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:52:b6:f0:75:bd:72:5b:ef:eb:76:20:af:82:2b:62:0d:bb:
51:70:5c:dc:83:79:4c:2f:76:4f:b6:dd:dc:c0:0b:28:8f:66:
7a:ae:33:8d:5f:34:6e:03:55:70:9b:57:6e:22:11:98:76:cc:
7d:51:fa:4f:17:56:ba:95:09:c2:5d:27:a6:a6:f4:05:a0:31:
5b:a4:48:5e:c2:1d:50:b0:1b:fd:85:ff:fd:40:bf:08:9d:10:
8b:e6:4a:0d:e9:75:04:b2:11:8a:5a:84:96:3d:d8:bc:8e:5b:
5a:03:6a:fa:4f:23:c2:2c:60:c2:a8:58:e0:df:48:49:2a:76:
f2:30:54:81:13:90:40:0d:49:1a:f2:f2:fb:58:8f:ee:4a:33:
18:e3:6b:c4:dd:be:65:76:8a:a5:8e:4e:7b:39:4f:c5:9b:1d:
bb:dc:61:63:b7:a0:0a:e0:f3:02:5a:c6:fa:76:be:4e:33:ec:
5e:f5:77:ba:9f:db:fa:69:c1:21:c1:bc:45:cc:96:14:15:1e:
82:75:06:8b:05:65:2e:7a:c1:90:7a:bf:b1:bd:22:20:68:13:
51:e6:e4:04:1e:c5:32:f0:5e:da:7f:35:68:b0:7b:f4:8f:99:
ce:67:ec:b4:f0:7c:f2:a0:d4:cd:e6:d7:f3:c7:f5:fa:85:3e:
13:42:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:04 2026 by rpki-client