Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier: j2Yc5MxPhR1sK4SqlTP3mHqUe3i0R8qPkxQhvYMkhPQ=
Subject key identifier: 54:5C:2D:70:23:F3:21:80:5A:CE:F0:0F:E1:7B:EB:FD:C4:E6:AB:86
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial: 019D382E7AE73196B1C3804A02791021E0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number: 03B8
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: Ras0zf5l/b0DaPNwfDAvhGB/BjnNGFheKTC4SmxBDl8=)
2: tW75xisNBw44jYns_Y3WtNvzf4M.roa (hash: 1hevvajdIYdR4n3mWoJRqh1PcCq2VWdl5U2HS1l2lMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7a:e7:31:96:b1:c3:80:4a:02:79:10:21:e0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=545c2d7023f321805acef00fe17bebfdc4e6ab86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:e9:c0:af:fd:9b:0b:ab:4e:87:9f:cd:38:
9e:6a:a8:04:a6:16:2b:00:f5:31:7f:54:d5:a6:7a:
47:77:2a:06:e9:22:11:4d:f5:8c:3a:bc:85:8c:15:
a0:f5:88:42:07:12:73:37:67:c4:68:fb:30:51:06:
61:7a:1c:cd:34:10:f0:3e:c8:c4:0b:0e:d3:ac:5d:
73:f5:46:fa:16:e6:f4:54:53:5e:41:39:8c:55:0b:
4b:6c:15:c3:d3:c1:8f:48:69:e7:b6:42:c7:20:b2:
83:a9:5f:f2:1e:d3:a2:ae:5a:ba:c6:13:90:60:57:
bd:ee:bd:dc:0b:c2:f7:11:c7:3d:b5:c4:63:03:d8:
eb:3b:c5:70:d1:1d:96:a1:e2:eb:15:ef:23:16:b5:
8a:44:98:4e:90:4c:a0:85:ad:fe:e3:74:e7:35:5f:
ff:fe:67:10:95:2b:35:44:88:26:74:3c:89:b6:d6:
9d:a0:35:ec:a5:07:1d:eb:6a:fa:67:15:a2:52:b3:
f2:39:0d:4c:e1:c3:cf:fa:ff:66:8a:35:81:45:b8:
ab:5f:32:b4:b5:9d:6f:0c:68:00:6b:9c:48:4b:50:
fb:e6:53:dd:11:26:71:d7:2f:64:7b:e1:69:41:3c:
55:66:08:23:d8:ef:29:ac:1a:5c:0e:66:16:73:f6:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5C:2D:70:23:F3:21:80:5A:CE:F0:0F:E1:7B:EB:FD:C4:E6:AB:86
X509v3 Authority Key Identifier:
keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:51:0a:64:ea:74:77:60:a2:0f:a4:38:2d:32:01:49:da:21:
ac:b6:d0:fd:ef:a0:f6:34:51:3a:c8:65:26:db:a8:56:e2:76:
0b:c8:b2:47:7b:90:ec:f2:b7:bd:3c:da:3d:31:c1:d1:d5:b7:
ee:b2:e8:4f:67:1d:a8:8f:91:8e:d8:f0:03:06:87:c8:66:7c:
ae:64:34:82:b2:1a:ca:d0:01:16:05:c2:ea:cb:d1:8b:00:35:
de:67:bc:ba:13:5b:2c:a3:9f:68:0b:97:4b:45:5f:67:68:73:
a1:8e:e4:e7:8f:e3:c0:8b:44:7d:70:9e:4c:97:0b:2f:9d:8a:
47:70:b0:b7:58:6d:33:18:04:1b:a6:2e:b9:d4:b2:e4:b7:40:
25:85:23:7d:e9:3e:c1:da:fd:a1:a3:d2:64:32:b6:67:0c:c3:
7b:16:50:31:34:b4:fe:bf:39:b3:7d:40:21:41:c8:bb:44:6f:
8c:17:61:66:87:bd:df:22:5a:26:94:76:04:16:4e:53:62:37:
54:54:f6:5c:7a:0d:b8:61:04:34:ee:d4:f3:a4:a2:d9:78:47:
12:b1:a5:1b:0a:ee:a7:3f:a8:3e:91:11:70:62:2f:82:cb:4a:
ad:d0:57:1b:c4:4a:cf:4e:6e:11:a3:d8:72:71:90:20:60:05:
e7:b4:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:44 2026 by rpki-client