Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File: _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier: ARIFxtdMPwnZd0WOGfYPkk+j010OnoRdg7HpKhv5Kys=
Subject key identifier: 40:E3:BC:7D:ED:07:E7:08:00:D6:DF:84:BF:C1:C3:B2:7F:3A:9F:36
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 019D3752488091C18956FACA13FA638C628F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number: 15DC
Signing time: Sun 29 Mar 2026 02:00:32 +0000
Manifest this update: Sun 29 Mar 2026 02:00:32 +0000
Manifest next update: Mon 30 Mar 2026 02:00:32 +0000
Files and hashes: 1: _b-rE_2TVoYhUbNxE3eqPIAbO4s.roa (hash: /pEVtx61pqjHCNe27pdlrCZMoRpMRCiAqlKVxrQNLe0=)
2: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: k6d42fkvNPi+ZewAuxw28kZIQAlVIq7nPcJJeLfkVE4=)
3: bbj-gHI_NSxgfeUm9R2oZee2H7A.roa (hash: hYp+ief1ADpooPFUk5v8X2N0IMdf0TC4s8sF6EqLPy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:48:80:91:c1:89:56:fa:ca:13:fa:63:8c:62:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Mar 29 02:00:32 2026 GMT
Not After : Mar 30 02:00:32 2026 GMT
Subject: CN=40e3bc7ded07e70800d6df84bfc1c3b27f3a9f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f5:b5:d6:89:b1:4f:23:75:1f:8e:13:4a:cd:
07:d3:27:48:31:dd:78:73:d2:08:20:c2:b1:b9:1f:
60:ba:8b:7d:63:fe:29:42:66:fd:2b:50:dc:31:2b:
8c:fa:fc:52:dc:d5:22:05:5b:c6:56:2f:f1:0a:5c:
ce:25:7f:ad:b2:0c:54:60:87:df:91:f1:cd:0f:25:
a5:b3:0a:c1:c2:40:99:0c:2b:dd:b8:ab:bd:21:c7:
ea:9e:08:80:8c:37:82:d5:22:9f:4b:97:74:ac:e0:
cd:e9:b5:ea:ae:a9:18:d0:d6:cc:38:fc:fe:9e:d4:
54:77:10:24:b1:a4:3d:65:6c:58:17:f0:f4:3c:17:
22:ad:a2:ff:6c:a5:17:8b:71:4f:d4:ee:d7:b7:74:
46:33:1b:f2:3c:96:94:0b:12:5d:0c:da:ae:dc:a6:
7a:4b:2f:25:1f:1e:03:33:3e:c9:f0:6c:ff:ad:3f:
77:e1:49:51:ec:9e:df:16:56:ca:95:52:23:57:87:
b1:31:98:77:c7:0d:57:0a:e4:7f:66:58:51:b8:56:
d1:ac:9d:6a:3b:23:97:e8:a3:36:e4:76:75:0e:3a:
6e:ee:79:74:6d:e6:d2:7f:27:f0:73:77:e5:4e:4e:
95:30:c2:b4:90:3c:03:1b:7d:12:2b:e0:e9:06:1d:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E3:BC:7D:ED:07:E7:08:00:D6:DF:84:BF:C1:C3:B2:7F:3A:9F:36
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:83:9b:fc:ce:8f:89:48:65:dd:b7:a2:82:d0:0a:fe:4f:b9:
ba:99:5b:a8:98:28:7d:b2:00:00:5d:bc:31:11:6b:a6:8d:27:
83:29:b2:39:8d:a7:ac:da:da:f7:7e:ce:88:63:8c:9f:a3:97:
3f:5b:94:99:50:a4:3e:88:97:81:60:5f:11:c8:46:d9:b8:c3:
6d:68:13:30:5e:ae:b5:7e:3c:05:9c:64:84:f1:0f:bd:d5:74:
ea:27:bb:cd:7a:49:e6:0d:7f:6b:da:a1:a6:b9:e5:30:3e:3b:
3a:41:72:3b:91:bd:e4:66:53:35:db:e1:21:ec:10:84:2e:68:
96:23:3a:d6:65:8b:a6:9c:2d:f0:15:06:95:ed:d9:e8:66:9e:
5d:83:a4:dd:f7:25:1e:4b:b2:42:3b:b4:06:c0:8a:53:2e:b4:
ce:25:ea:07:f5:e9:d9:5e:70:9a:2d:e6:44:96:aa:79:49:86:
2a:2c:45:63:f7:a9:f2:63:d7:86:8b:32:0d:a5:96:8e:46:8f:
14:87:f6:f9:56:0a:5f:c0:dd:9f:fb:0b:3e:da:39:74:b1:7a:
6a:c5:22:56:a3:47:0c:1a:d6:91:a6:e6:3e:d6:47:e8:d1:71:
3d:1a:1b:3a:05:94:2f:74:24:8b:45:be:54:1d:64:4b:7f:20:
a9:85:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:20 2026 by rpki-client