Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: XsEsmaHwgjOIS+7xFtH5DtoJ1bGOay7TeGTMwuQI8s4=
Subject key identifier: 6F:52:26:F6:1B:46:8E:EB:8A:68:CA:A9:1C:AF:63:EC:36:B6:52:7D
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 019D375217442AC9833A73622B47447C370A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 0A23
Signing time: Sun 29 Mar 2026 02:00:19 +0000
Manifest this update: Sun 29 Mar 2026 02:00:19 +0000
Manifest next update: Mon 30 Mar 2026 02:00:19 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: GgbgL6oxbzCqjzzyefcqBj/FJLvMVLgpwTGaFuwh4ME=)
2: oeqcCmqzmosVxM-WY8lmXD_44Ic.roa (hash: QSB9wBcelhQw6T6s+EAUaG07z6Fs95UlwbhmHAqSneQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:17:44:2a:c9:83:3a:73:62:2b:47:44:7c:37:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Mar 29 02:00:19 2026 GMT
Not After : Mar 30 02:00:19 2026 GMT
Subject: CN=6f5226f61b468eeb8a68caa91caf63ec36b6527d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:d4:43:5d:e8:1b:1b:29:96:ca:f0:a8:b4:
ac:d7:69:b6:9b:28:3d:f0:98:98:98:ed:67:90:4c:
2a:de:a2:90:74:e7:ca:37:79:8d:88:2b:ae:37:2e:
55:0e:d7:29:10:73:9d:16:12:80:5f:0b:37:39:1a:
48:9a:da:a7:f5:1d:c7:23:27:da:e2:dc:c0:30:c8:
84:0f:8f:13:e8:56:5d:cd:76:94:4f:a6:bf:fa:cb:
c7:0c:85:4e:18:12:d9:26:ca:27:35:81:c0:87:36:
3d:1b:fd:98:70:a6:74:48:e9:41:24:64:0c:6c:7a:
60:d2:57:71:13:41:40:38:7d:98:d1:21:34:3a:2b:
ce:95:1d:70:72:6a:cc:a2:70:f8:39:e8:84:f0:90:
5a:95:83:53:d4:6b:e7:0c:03:6d:7a:5e:e8:c7:74:
2e:03:db:fe:52:87:16:dc:8b:c9:ba:b8:5d:be:fd:
33:f9:ad:ac:0f:2c:a7:ee:a9:63:d9:df:aa:ac:07:
ae:6a:84:0e:31:84:e9:d4:da:73:38:f9:71:62:72:
ad:51:e8:66:0c:2b:0a:92:08:16:15:2d:f7:c2:52:
fa:95:ed:d0:01:79:53:da:c0:88:4b:26:47:e8:2e:
46:f9:cd:44:a5:20:fd:ca:b4:e2:68:0a:7a:2e:bf:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:52:26:F6:1B:46:8E:EB:8A:68:CA:A9:1C:AF:63:EC:36:B6:52:7D
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ea:8a:3b:c2:57:0e:bd:cc:06:53:09:ba:62:0c:2b:aa:1b:
80:fb:b2:22:17:27:c2:4e:63:5d:63:c0:66:2a:e0:db:d0:3d:
8c:77:ed:b3:a5:96:0c:6b:54:cf:4d:a3:18:09:53:e4:08:00:
35:ab:48:70:3d:89:d9:1d:71:15:77:9f:a2:7b:d6:d7:24:2b:
18:17:25:37:ae:21:ce:c8:fe:91:9c:77:8b:27:3f:19:76:24:
6e:c2:24:8f:9c:a0:99:db:64:3b:01:9c:a8:f2:7d:a8:30:ae:
40:a6:53:2b:b5:64:4d:81:30:d7:2c:84:b1:f3:23:18:85:9f:
ca:db:d6:f9:4e:43:60:c5:08:7d:f0:91:02:eb:3e:33:a4:4b:
e2:f4:1e:53:b2:5f:89:a7:40:cc:4b:ae:cd:c5:46:50:d7:da:
a2:4a:a2:2b:10:c0:2c:a7:a9:db:87:bb:59:90:3f:b5:90:8b:
5f:82:d9:3a:d3:94:3a:2a:82:70:33:ad:d9:68:f3:6b:05:64:
83:77:f0:0d:69:83:f7:f0:a0:7f:9a:62:1a:3c:a8:bf:d3:35:
1b:49:99:74:75:05:d2:01:7f:69:70:cb:ce:31:d0:24:0b:41:
4a:b3:8a:8b:34:06:38:2b:8c:e6:bf:c9:f7:35:e6:3e:41:08:
7e:b0:39:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:19 2026 by rpki-client