Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier: 22TuAghKbeNsURMdvmV9A1JsbIccMflp/sIme36e9Rk=
Subject key identifier: 9B:11:F6:E1:E8:42:85:6E:8B:45:9A:BE:09:A9:27:92:2C:D2:43:9A
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 019D37F7451A48773CECD17657813040B6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:45 +0000
Manifest this update: Sun 29 Mar 2026 05:00:45 +0000
Manifest next update: Mon 30 Mar 2026 05:00:45 +0000
Files and hashes: 1: 9iYRo82i9hRkUCgmREahdJYxLLE.roa (hash: Iaajzt1IR/GS2dadWD8d0yfp4+37Bgf5XHM3q2W76dA=)
2: Jm12F1fJac9AdzTGN7xQVn8K_U4.roa (hash: P/nVz8qxvVHC3IkIASDUTBADr0JHFnsbfxbsnkdVypc=)
3: U17Ig7TH3Hf9u0Hjug4B8FqbaeM.roa (hash: h4vlRYblnFE5NeXhaGifoUzHbL8gvX60WPtBD/isPek=)
4: Z81lv8qaADBtEGYsx0-brJvvQeg.roa (hash: r6SobeHV+YoGbEJkji/z1sNc1KoSoCEgvZU8Lt5eYac=)
5: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: ZY0bqSW5/NULH0HN7aVZxUCy4xZEWT13q6aoXEHnXAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:45:1a:48:77:3c:ec:d1:76:57:81:30:40:b6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Mar 29 05:00:45 2026 GMT
Not After : Mar 30 05:00:45 2026 GMT
Subject: CN=9b11f6e1e842856e8b459abe09a927922cd2439a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8f:6a:59:06:a5:36:87:0e:18:3a:fc:a5:36:
55:42:61:0c:33:cd:d0:de:21:f2:c7:d1:d3:fd:cd:
fe:98:1b:d7:36:fe:eb:18:07:26:e1:f9:5b:08:7f:
53:01:81:0e:34:08:36:78:ff:ba:db:91:60:26:bf:
48:a2:38:62:51:76:26:24:3d:00:c2:a6:ca:46:07:
05:0b:5f:84:aa:9b:04:5b:e8:80:8a:33:92:dc:ab:
69:e6:74:d8:9a:1c:9b:fc:ff:50:dd:99:51:9c:4c:
d6:92:da:7f:e0:b8:91:c2:4c:16:6d:ec:36:e4:b8:
7f:92:ee:6c:a0:fd:15:d9:91:83:55:46:e1:d8:8f:
0f:f6:03:84:9d:b2:22:3e:d4:cc:4f:94:3d:12:19:
fa:1a:13:ec:55:c9:b3:b3:21:19:4e:bb:2a:bf:0e:
2a:aa:fe:55:2d:5e:78:ee:7f:ee:72:ec:a5:bd:dc:
f7:de:18:a3:b0:32:d6:7c:f9:fa:7d:b9:41:77:25:
02:88:58:26:8d:0c:87:db:0a:c6:e4:60:f9:0d:34:
a5:29:fe:ff:ba:81:07:06:4a:bb:02:74:74:07:15:
24:e9:71:83:5b:52:c6:5f:c0:67:51:f6:48:06:43:
60:96:9f:0e:a1:15:e8:61:ec:9a:4a:1e:77:4a:e0:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:11:F6:E1:E8:42:85:6E:8B:45:9A:BE:09:A9:27:92:2C:D2:43:9A
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:72:6f:11:b8:f9:4a:47:d4:e0:62:36:f1:4f:ce:81:41:2e:
8b:69:c3:ad:a8:b0:e7:42:5b:9e:ba:4d:8c:50:e9:b5:45:ee:
6a:88:2c:83:13:77:4b:e1:7f:38:11:96:3a:10:8c:58:bd:60:
34:cb:65:f4:a6:97:62:e3:5c:49:6d:3b:3b:f6:4d:ab:13:9a:
71:2d:9d:5a:f2:26:31:7c:1c:31:77:f9:05:56:43:c9:ab:a2:
45:ec:68:27:0a:24:c1:1d:a4:dc:34:c1:a8:90:11:e6:93:d2:
cb:53:80:fe:cc:cb:9d:b1:e4:d1:39:32:7a:e5:fe:b8:c8:1f:
a4:93:89:32:ea:45:e2:54:bc:2b:ac:49:cb:9a:88:71:ef:75:
29:4d:17:61:9b:63:49:5f:0e:c7:8c:d5:f0:7f:31:27:29:e7:
6a:1d:3d:e8:c8:43:eb:5f:4b:8c:ec:7a:e1:2e:10:25:30:4e:
13:d4:d3:aa:ed:cd:30:8e:55:8a:6f:7b:de:e0:e2:83:05:f2:
63:02:5d:76:dc:0d:4d:93:3a:a1:3a:31:e0:23:1e:7f:ee:f7:
7f:f6:e0:d8:68:2d:44:8c:fe:63:ff:91:f5:e9:7b:99:f1:2b:
de:a7:45:d3:1a:5b:a4:3f:2a:b5:5d:17:e1:df:a7:cf:33:a5:
79:6f:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:14 2026 by rpki-client