Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
File: gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft (raw, json)
Hash identifier: u0foY2ZgWo8uY9XysfbY6BkRneI391rHoF9/x8Z+qhU=
Subject key identifier: AF:3F:42:70:6F:A3:A8:BC:B0:DB:8D:A3:B2:C8:B5:82:12:74:DD:50
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 019CAAFD49EEB036E28C8FBB66B53FAAE788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
Manifest number: 1002
Signing time: Sun 01 Mar 2026 20:00:52 +0000
Manifest this update: Sun 01 Mar 2026 20:00:52 +0000
Manifest next update: Mon 02 Mar 2026 20:00:52 +0000
Files and hashes: 1: AOFzHIFEP91V8Omac3aKie9xki8.roa (hash: HMkFQ86ieg8/vv84gq6sItk0FTIJYyGV0fWrEdqsQ4o=)
2: COXiBfifc_qmKtRo5iliPytbk6Y.roa (hash: Yk5Ow5nOsEoU8dsAMXQclepMDy3OLtvSY8ZeR+T0oyI=)
3: CzK0ougq6DriQml9weFMesSYYgM.roa (hash: tRLuwh0Bv5JNCdg32ICwjGupdf04tX4gLT0oELFtUjQ=)
4: gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl (hash: b9riG+2UoWyeibvTrx4PM9wTuuI8u5NnRi/dvtBs9x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:49:ee:b0:36:e2:8c:8f:bb:66:b5:3f:aa:e7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Mar 1 20:00:52 2026 GMT
Not After : Mar 2 20:00:52 2026 GMT
Subject: CN=af3f42706fa3a8bcb0db8da3b2c8b5821274dd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:d3:37:c0:9e:d4:95:72:48:54:c4:64:94:
15:b8:2a:ae:fa:2b:26:90:bd:e6:89:26:2e:a6:39:
f5:70:f4:cf:29:e3:82:da:66:d2:b2:10:7b:b6:f2:
0f:c4:84:3b:16:e4:7d:ed:0f:84:d9:31:f1:2d:cd:
d8:93:6c:2c:c8:54:06:98:7a:9f:cd:8c:37:a9:b0:
28:ac:1f:72:00:37:4a:5a:42:9a:44:c1:8f:24:64:
26:01:be:0a:42:f1:f8:c1:18:10:34:72:1e:67:35:
88:5d:8e:8d:c9:68:d0:a2:8a:b7:f1:33:9e:7a:c6:
49:d6:2c:3a:fb:41:ca:dc:3e:98:3b:8b:1d:8c:ee:
2e:13:90:36:13:c2:6d:ea:91:9c:53:36:4c:46:4c:
65:d0:04:66:fa:55:4a:dd:71:f6:aa:98:18:8b:9d:
2e:11:5c:49:f4:e7:f7:15:ed:24:27:7a:49:24:1f:
0b:09:af:f4:d3:87:d2:a5:8f:f4:6e:28:31:0b:2f:
2e:4c:d7:23:34:f0:a6:e9:3f:73:1a:71:e7:d1:58:
64:39:f8:7a:b7:3b:5d:05:93:c0:42:4c:86:77:f5:
cb:f0:a8:a8:f8:74:d2:64:d7:8c:e4:02:c7:b5:d4:
73:1b:7c:e4:7c:c1:92:b4:cb:17:3a:04:64:98:85:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3F:42:70:6F:A3:A8:BC:B0:DB:8D:A3:B2:C8:B5:82:12:74:DD:50
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4b:2f:b7:2c:de:dc:e4:6e:3e:06:a8:5b:42:da:f8:f9:e0:
37:a9:de:1a:87:73:af:5f:c2:4e:a2:3d:90:92:94:48:0c:e0:
12:53:db:42:e1:b1:91:ed:3a:44:a9:9b:06:7e:6b:f5:bc:91:
c5:81:ec:e2:fd:dd:49:21:04:1c:5c:4c:d4:c9:50:d7:e7:1f:
2b:0b:c8:61:ef:c7:10:b3:ca:56:cf:35:8b:ff:53:36:1c:02:
d6:d3:a6:3b:6a:35:fd:24:f9:d6:b3:3a:c7:e7:95:9f:bf:a6:
3e:4d:5c:41:47:15:5a:84:9c:c9:96:ca:0c:20:24:c2:c2:b3:
a3:5a:17:cd:d8:18:48:55:d9:b7:20:fb:93:4e:5c:99:b4:ef:
9e:d7:98:ca:19:39:77:8a:61:ec:b4:9e:1a:fa:87:7c:66:9a:
16:f2:49:85:1a:a5:9b:3f:5e:a7:f0:21:45:3d:fb:5f:c5:a7:
e2:c1:90:a9:b6:8c:b6:1a:7a:25:7f:05:92:99:3f:f1:d8:94:
cc:f9:e4:0c:7c:4d:c8:6b:8c:42:66:c9:d1:17:c2:64:10:d1:
7b:39:07:16:e2:ee:50:c6:2e:a3:7e:9d:63:7b:d7:a0:38:9a:
2e:c8:e0:ac:e9:36:99:a3:f5:73:f9:c3:e4:34:eb:5a:99:ea:
33:66:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:52 2026 by rpki-client