Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
File: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json)
Hash identifier: jrKv7HdNTbcvdRv1BpcSY0m+EkQz9wDyaieW7gAyj/E=
Subject key identifier: 5F:84:3F:F1:D9:52:99:F4:B9:99:27:F0:A5:38:03:AE:D1:45:F5:51
Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
Certificate issuer: /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Certificate serial: 019CAB6B686E277A31D9B0B996D7C9E88700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
Manifest number: 1103
Signing time: Sun 01 Mar 2026 22:01:08 +0000
Manifest this update: Sun 01 Mar 2026 22:01:08 +0000
Manifest next update: Mon 02 Mar 2026 22:01:08 +0000
Files and hashes: 1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: OtWl3vdph4obNyVx/czp3nDJ5nuQrcArRUoeiSRy9Yo=)
2: sy-wPXvfKLWfZlxG6JFjMdz2jc4.roa (hash: hlaNZxdKE60uOdHncJsjvUxLctHZFlI5jG9Xoxf9FL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:68:6e:27:7a:31:d9:b0:b9:96:d7:c9:e8:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Validity
Not Before: Mar 1 22:01:08 2026 GMT
Not After : Mar 2 22:01:08 2026 GMT
Subject: CN=5f843ff1d95299f4b99927f0a53803aed145f551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:50:a2:43:38:0c:ae:3f:8f:98:ad:a0:77:1b:
ec:5b:2f:09:62:23:42:95:7f:a2:0e:c5:51:e5:6f:
e3:26:33:0a:5d:26:c5:e1:8a:9c:94:00:80:64:98:
59:0d:41:83:16:76:5c:b2:c6:23:45:7b:da:0a:7d:
8d:e4:ce:09:3f:af:d6:d3:05:36:a8:e5:18:e5:f7:
81:72:75:f3:e3:81:dc:8a:d1:e5:87:f7:c1:fa:a5:
e3:b9:66:12:08:73:9f:20:8b:2f:1e:62:02:a0:37:
6e:9b:7b:41:61:cf:8d:1d:38:91:65:bc:53:8d:51:
3d:53:19:24:c5:cf:80:fd:17:22:35:4a:ac:c6:45:
b8:57:19:cf:8c:d6:90:d2:62:1b:ca:9f:aa:07:b8:
e8:3f:9c:8f:c0:d1:76:ba:b9:d7:14:54:8f:7c:89:
cf:6d:30:8b:ab:6a:0a:1e:31:46:fd:43:3a:ff:c3:
8e:bf:c4:2c:46:3a:6b:77:95:4d:e0:7d:59:85:31:
b0:3b:cf:94:c5:1d:d8:bc:98:43:2f:9d:03:da:64:
dd:8a:9b:37:41:f1:29:cf:5e:15:87:0f:28:29:17:
7f:b3:a7:58:b8:9b:7b:96:be:20:5f:ba:74:7e:3c:
5c:5f:75:48:30:ee:47:1b:26:54:68:86:2b:b8:90:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:84:3F:F1:D9:52:99:F4:B9:99:27:F0:A5:38:03:AE:D1:45:F5:51
X509v3 Authority Key Identifier:
keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:16:e2:c6:95:69:3a:81:bd:53:61:27:97:bf:8c:6a:f1:16:
6b:85:f2:7c:7a:33:d3:74:15:fb:8f:39:84:23:03:ef:70:5d:
5e:b3:be:2c:33:47:ec:2a:11:1b:0b:47:17:00:5e:ac:7d:c2:
81:8d:4f:8a:7e:da:d4:3e:d0:45:17:af:31:1d:c6:54:7f:d5:
d7:7e:4b:90:d0:e8:af:eb:0d:a4:e4:78:01:ad:00:6e:74:6c:
22:f3:d8:1a:2c:6c:60:97:15:8e:3c:bb:da:60:30:c7:42:18:
86:cf:5b:f4:8d:ab:f5:39:9a:24:d0:4c:ee:11:ac:1f:2b:99:
73:30:94:6c:53:4c:4c:9b:f2:1f:ff:28:78:62:be:49:73:f0:
55:ef:39:cb:22:e1:79:c2:2d:02:59:46:82:74:be:95:f6:79:
74:70:95:74:e0:e2:01:cb:7d:d4:25:09:3c:46:41:a6:6a:13:
2a:95:49:51:cd:bd:25:b7:06:a0:79:d9:b3:b8:91:40:1d:2e:
4a:58:cc:cd:ab:49:70:3b:50:34:35:7b:b4:ec:56:08:ea:d5:
a9:ab:8e:90:79:de:4e:a7:2b:b8:89:88:cc:31:2b:38:a9:c3:
6d:fa:2b:a2:f1:37:b6:b5:38:e4:5b:da:6f:7d:5c:7f:43:64:
85:41:da:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:14 2026 by rpki-client