Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
File: GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json)
Hash identifier: OVEkX04XrSh2AkLiv+EsoyZC+o8Eolwjfe1ak72UtXo=
Subject key identifier: CE:74:F7:80:6C:28:03:19:E5:88:4B:44:43:B6:A7:75:68:1C:D6:C8
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Certificate issuer: /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial: 019CACB4A1B53F62DE1E7F49092FE72999C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:00:44 +0000
Manifest this update: Mon 02 Mar 2026 04:00:44 +0000
Manifest next update: Tue 03 Mar 2026 04:00:44 +0000
Files and hashes: 1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: kCj3eeF33oe0uxEb1vydNTzgAlEV/H6uIJxaSlPT4BM=)
2: H00Omd7RPitereQtVkcKdJ7rvQE.roa (hash: P3INZZ+wxZ5iAVG5bG8aZrx0nXJci1wMPc5cl04gndw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a1:b5:3f:62:de:1e:7f:49:09:2f:e7:29:99:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Validity
Not Before: Mar 2 04:00:44 2026 GMT
Not After : Mar 3 04:00:44 2026 GMT
Subject: CN=ce74f7806c280319e5884b4443b6a775681cd6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:9e:02:bd:c2:22:71:e4:ea:ee:7d:35:8a:
1c:7a:e0:dc:8a:3a:46:bf:4d:fd:c3:7c:03:a0:e3:
bd:ba:c8:c6:42:2e:63:47:cc:7e:f0:a6:63:6f:4e:
47:ee:63:34:95:35:36:4c:5b:f3:07:46:34:12:e2:
74:c7:48:c5:9a:a3:42:ee:da:3f:09:83:ef:5c:4a:
b7:49:56:86:ac:e9:95:ea:c8:17:49:23:c5:f6:85:
c5:84:63:1a:81:2f:4d:5f:a8:32:cd:5d:14:c5:7e:
c0:57:7d:71:93:97:0f:e4:90:25:bf:df:22:bc:b5:
81:56:91:dc:81:6e:cf:bc:62:69:80:0b:e7:26:15:
64:59:6b:9d:49:54:56:65:a1:cd:e7:38:9b:05:fe:
0c:a9:ff:c1:2e:de:0b:76:ba:23:9e:e7:f4:c0:34:
50:e8:48:91:56:6c:d7:35:69:7b:ab:57:e8:86:93:
5b:b8:2a:20:69:3f:ee:2a:8f:49:b5:b4:36:c4:1b:
0f:1c:0b:c7:96:ed:2f:6a:38:66:4e:64:eb:03:0d:
3e:fd:b6:39:e7:3d:b1:8e:ad:7a:6f:6e:45:0c:48:
c3:92:17:75:06:88:ab:7c:25:10:47:b0:b4:11:65:
76:01:95:f6:9e:43:e8:e2:2b:6a:82:39:f3:c0:af:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:F7:80:6C:28:03:19:E5:88:4B:44:43:B6:A7:75:68:1C:D6:C8
X509v3 Authority Key Identifier:
keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:99:42:4e:f9:24:62:d4:be:b4:6a:49:79:63:f0:8d:f6:33:
32:7d:38:bd:fd:44:74:31:03:a4:8f:f6:6b:87:ba:73:73:be:
70:0f:83:a5:50:4c:66:9b:d4:15:34:2d:f0:8c:a0:f8:e7:14:
74:81:bb:1d:58:fb:b7:08:a1:37:7e:b3:22:47:ba:7a:2b:4d:
39:ab:e6:99:6f:20:d0:54:42:98:49:ee:d3:62:1a:0c:da:c1:
54:ec:28:79:55:ca:d2:71:92:b8:a2:83:27:b8:5a:87:f5:47:
0f:bc:d4:aa:74:2c:08:b4:67:34:f7:a3:3f:b2:74:34:a1:3d:
05:f8:7c:c0:c9:1f:30:9c:50:52:82:4b:0f:70:10:24:b4:80:
a1:23:d4:f4:e9:b5:6e:1c:aa:1f:34:50:6b:6d:a5:b1:31:27:
82:79:d4:e9:fe:6c:6a:57:86:26:92:a0:52:00:a2:a4:55:e3:
99:ff:ba:a6:94:52:9a:f9:f4:a9:e7:6a:13:90:6e:03:f4:c9:
15:9f:02:a0:cc:fe:83:f7:2a:72:af:e1:ce:d8:56:22:28:9f:
36:48:33:ea:15:1c:c4:3f:bc:52:4b:aa:3d:2a:f8:5f:e5:59:
b5:25:13:81:01:31:d0:f4:4d:5f:86:0f:a6:8f:c5:97:d4:f7:
c0:f1:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:03 2026 by rpki-client