Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: AtCeEnujKGPFnqGl54Vfe8lRh8BqyXKViv+6AqrfGi0=
Subject key identifier: D3:27:55:44:D2:AE:A7:9D:49:3C:E6:B8:BC:2C:24:18:64:15:F3:91
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 019CAAFD5BDAE00C85520116831156523EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0A2B
Signing time: Sun 01 Mar 2026 20:00:56 +0000
Manifest this update: Sun 01 Mar 2026 20:00:56 +0000
Manifest next update: Mon 02 Mar 2026 20:00:56 +0000
Files and hashes: 1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: +8SbPeyjJUrjxdsQQUhhrPgndvukxZlSGrsfTSbZ7ZY=)
3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5b:da:e0:0c:85:52:01:16:83:11:56:52:3e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Mar 1 20:00:56 2026 GMT
Not After : Mar 2 20:00:56 2026 GMT
Subject: CN=d3275544d2aea79d493ce6b8bc2c24186415f391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:61:72:ca:cd:20:bb:80:4b:fb:e8:da:a2:
2b:94:86:81:5b:c6:84:18:10:2b:8f:69:fc:c5:1e:
33:14:0c:52:21:03:c5:ac:cb:f2:e5:cb:8d:43:43:
43:8a:94:db:da:59:77:da:ed:10:d2:c8:99:c2:f3:
de:21:0e:fe:bc:82:e5:2b:30:4e:59:a4:18:ec:5c:
8e:e3:19:00:e1:22:09:32:a0:6b:07:4e:ff:ff:0a:
10:44:e5:ca:9e:52:95:36:c4:85:48:6d:9e:eb:b8:
a5:a7:77:55:b6:c4:c6:30:f1:dd:30:74:03:57:e5:
c0:d2:62:79:81:66:30:33:fd:10:61:bb:5b:7a:fa:
d3:85:a5:f7:6f:b0:5f:e3:fd:51:28:e5:89:ca:09:
7b:a2:62:5f:4a:2f:c0:fb:04:44:10:c5:15:46:c6:
cd:45:d8:24:87:06:56:94:ed:8b:b7:41:32:ca:7c:
e6:70:12:ed:26:35:aa:54:b0:e6:a6:02:0f:4e:18:
fd:19:49:31:75:df:c9:15:63:7f:72:b2:1f:37:fe:
5f:fa:93:0a:81:09:c5:64:bc:4e:d9:1b:ff:5c:c4:
d5:e1:86:48:51:4e:bc:d2:87:16:c5:41:fa:1b:16:
87:fb:d9:7a:ee:06:e3:26:51:21:a0:45:ca:dc:45:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:27:55:44:D2:AE:A7:9D:49:3C:E6:B8:BC:2C:24:18:64:15:F3:91
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b0:6a:fb:7c:be:b0:e6:68:7f:a4:08:8c:f8:f6:e1:23:e7:
44:ee:91:49:ee:99:93:2f:3b:f4:0d:9d:64:f2:71:e6:29:90:
4e:42:90:87:05:7e:4c:02:d4:dd:c5:63:64:06:dd:5c:4f:22:
db:77:35:04:a8:77:bd:2d:38:05:32:be:b9:f7:44:0e:28:31:
4f:65:d4:60:20:8a:e4:05:02:0a:10:15:c3:fd:78:86:9f:55:
23:10:af:e8:f5:43:f5:5f:82:7e:58:4f:5c:c4:c4:99:db:a2:
91:92:fa:96:26:4e:0f:1c:75:a2:79:ba:4c:cc:ce:80:b0:a0:
2c:a1:e7:d8:2c:24:f0:c9:73:4f:38:62:61:17:13:b7:3a:0f:
c2:63:1d:35:9c:99:e6:d1:f8:24:e0:68:aa:33:e8:90:31:dc:
23:93:7b:d8:73:7d:d2:6d:1c:7d:9c:2b:46:5a:de:1d:8a:48:
9b:ce:55:d9:c8:e0:88:dd:81:2c:88:55:70:bf:78:0e:ec:62:
85:a4:d6:9d:51:e2:24:84:31:cc:6d:d1:8c:20:86:1e:69:2d:
be:7b:26:73:fb:b0:93:cb:53:39:7a:e5:8f:4e:47:b7:69:50:
87:2e:35:d9:b0:b1:d4:d6:70:dc:bd:c3:ee:8b:3f:10:e6:29:
80:0f:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:57 2026 by rpki-client