Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
File: GmoUE8yJZe6SQWtgWfkLGHeMizg.mft (raw, json)
Hash identifier: bhPSPyYlOdvu7wHvpXKOeGb8d2K3QhZMjoTc1qiTw54=
Subject key identifier: 0F:DC:8C:D3:32:5B:25:E1:F5:16:46:0D:AA:19:99:4F:B3:10:72:B5
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 019D37C0B37AAC884D5C09028A2E222AD394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
Manifest number: 11ED
Signing time: Sun 29 Mar 2026 04:01:08 +0000
Manifest this update: Sun 29 Mar 2026 04:01:08 +0000
Manifest next update: Mon 30 Mar 2026 04:01:08 +0000
Files and hashes: 1: 6-OKgajr9v823pHOsspSDLg9nr0.roa (hash: NwM+C7ZC5FzvcWLiIPRWkD1+69dXcTrTBwmQOx+Eypo=)
2: GmoUE8yJZe6SQWtgWfkLGHeMizg.crl (hash: wQVLZDVHEGQGiMsA8HtKKZCRNApeAZdTxblTdTIm2EA=)
3: Rir5qUdiM3zzTUT-Xkj3rqlToCI.roa (hash: AEK9ReBz0aDKpQLz2sCl8uFxNfkDOQwbvwIUAoemDV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b3:7a:ac:88:4d:5c:09:02:8a:2e:22:2a:d3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Mar 29 04:01:08 2026 GMT
Not After : Mar 30 04:01:08 2026 GMT
Subject: CN=0fdc8cd3325b25e1f516460daa19994fb31072b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:17:a5:11:4f:76:3f:4b:35:be:f0:86:37:c4:
02:4f:33:32:a5:17:2c:eb:61:43:dd:2a:27:6f:20:
2b:b8:cd:f5:fc:c2:2f:7b:e2:da:52:de:60:c0:3b:
12:73:e8:5c:66:39:fb:5b:01:ed:46:15:01:8a:6d:
32:4c:7c:5a:e1:11:84:35:88:32:6f:ae:af:ad:22:
13:27:ed:4d:2e:88:4f:37:11:d7:7f:24:1d:a6:61:
52:bf:c8:f2:0a:85:44:01:cb:03:5b:0c:91:13:63:
e6:9d:df:78:cd:dc:05:6f:6f:b6:97:84:d4:59:79:
a8:0f:47:3f:8d:24:a9:a2:93:ef:4c:ff:0c:3a:1f:
ee:fe:ee:58:f0:78:14:5f:40:c4:f4:be:96:e0:47:
c9:4a:d1:82:e1:86:34:f4:77:bb:d3:65:41:9c:ed:
d6:a6:4f:85:d5:89:bf:1e:63:27:9b:62:0b:9b:8f:
ab:d8:29:cd:0f:34:19:e2:3f:0b:b1:8a:e9:6a:6b:
7e:90:0d:ef:2b:be:85:0c:dc:33:eb:08:bc:3a:93:
fb:de:08:7c:8d:14:e5:f7:b4:aa:46:aa:02:27:50:
05:52:87:20:9c:53:60:2a:a3:55:84:e5:04:4e:08:
23:d6:3d:7c:4e:26:9a:41:91:cb:82:52:b9:99:5a:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DC:8C:D3:32:5B:25:E1:F5:16:46:0D:AA:19:99:4F:B3:10:72:B5
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2e:bd:9a:83:74:48:43:1d:7d:d2:06:3c:92:e1:d3:e1:44:
c6:2e:f9:fd:d5:46:b6:ee:61:ba:39:a1:41:6d:56:58:7a:6a:
3d:ad:9d:7e:00:82:a6:91:0b:b3:85:d0:fc:1a:e8:0d:d2:6d:
5f:39:d6:dc:13:16:fd:bb:28:34:96:41:91:8e:cc:fe:f4:21:
51:08:46:47:66:5b:5b:60:9c:79:4c:73:7c:2d:c0:6b:ca:df:
56:8a:94:29:50:53:7b:73:0e:f2:fc:5b:c4:74:6b:57:cd:7f:
09:83:51:dc:16:48:70:fd:f8:7a:8b:41:41:c5:11:fa:93:a6:
e6:eb:bd:73:92:74:aa:a2:47:8b:bc:af:34:e2:b3:5f:8a:79:
87:f4:40:bd:a7:4a:b0:67:4d:a3:57:a5:d1:2b:a4:19:b6:6d:
55:31:66:97:6e:10:ae:d2:bb:38:90:21:bf:a3:9b:aa:dc:61:
5d:8d:5e:d8:ff:c2:39:5f:71:89:07:12:42:89:9c:e8:71:b4:
e2:b3:2b:b3:17:4b:26:a4:26:38:0a:19:58:98:de:d7:f5:24:
47:dc:b6:cd:ab:49:1a:3a:85:06:32:5c:e1:6d:88:29:36:32:
8c:2b:0a:1b:4f:29:4f:fe:c0:07:0a:ff:a9:fa:02:8a:6b:6b:
29:f2:e6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:33 2026 by rpki-client