Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
File: gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft (raw, json)
Hash identifier: /kRw9fvkswL0SXlmjdSbCY90AOqRpAhYgJKLAOQ4dUY=
Subject key identifier: 9B:92:A9:9B:C8:D8:47:B6:2A:A2:FB:99:0E:23:3E:1E:99:4E:AA:76
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Certificate issuer: /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial: 019D2139909A5AA274B8DDA8EAB9FCE73A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
Manifest number: 1888
Signing time: Tue 24 Mar 2026 19:01:53 +0000
Manifest this update: Tue 24 Mar 2026 19:01:53 +0000
Manifest next update: Wed 25 Mar 2026 19:01:53 +0000
Files and hashes: 1: 8R-xDyOZCqzkZOmjhye0P0XKn1Y.roa (hash: F1vlUDsZyHn4eYl8OdR67IG0vKLcKMBkSRba2+ifgaA=)
2: B4QA_S9k7SlVpR7MdWiiWUcIC-I.roa (hash: OOJx9FQsYUEok6ZK1kN2i3wjiOZNjN0fy2SYUeHp9n4=)
3: OdpcRvq6Ntt7BatU6hcDO7lKhJU.roa (hash: 2TK7J7AsVuo5uY1fW4gJFOzrWvfYvp6BV3XxeqBPocQ=)
4: gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl (hash: pGwbIM96ETKLrvxaNDVaug74Bs1SVjSh7uRMisyLO7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 19:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:39:90:9a:5a:a2:74:b8:dd:a8:ea:b9:fc:e7:3a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Validity
Not Before: Mar 24 19:01:53 2026 GMT
Not After : Mar 25 19:01:53 2026 GMT
Subject: CN=9b92a99bc8d847b62aa2fb990e233e1e994eaa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:d8:59:a9:2c:18:33:3b:fb:e9:13:7d:91:
85:bc:56:5d:93:ef:e4:fe:fe:02:6d:e7:19:70:6d:
52:87:29:8c:a6:ec:c4:b9:f4:a1:45:b6:c1:61:a2:
c2:f7:dc:cb:ba:62:c6:98:93:b3:8d:35:c5:92:7b:
6c:48:5a:6d:eb:32:61:37:7a:12:c8:b7:4d:10:e5:
36:67:e2:e0:a2:f7:f7:f0:24:c1:2a:13:15:8e:bc:
d4:b6:23:cd:2d:ab:04:38:d6:0d:73:53:c9:7a:13:
f2:dd:49:c3:90:2c:6d:3d:0f:01:60:bd:3e:da:34:
18:49:dd:c1:3c:5f:bb:83:7c:be:54:bc:80:61:bf:
1a:aa:f0:fe:66:23:a3:dd:fe:15:b0:c1:0f:0d:eb:
cc:23:5e:8b:6c:4c:67:bc:97:9b:c3:12:7b:a4:22:
54:b9:2c:51:e5:08:50:7e:94:d3:39:d0:9f:77:17:
06:93:f4:27:0b:01:3e:7e:5d:b4:9f:b9:4e:5f:ed:
bf:9f:0e:81:2a:66:15:00:11:d7:3f:8a:23:09:fd:
f8:aa:17:18:3c:72:9f:3f:6c:d8:95:ac:73:ca:68:
33:10:8e:9c:7f:4f:e2:ed:00:46:5e:29:fd:d0:07:
2b:2d:f3:a9:d0:39:8b:9d:1c:20:84:33:bc:54:59:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:92:A9:9B:C8:D8:47:B6:2A:A2:FB:99:0E:23:3E:1E:99:4E:AA:76
X509v3 Authority Key Identifier:
keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:1b:d4:73:bb:73:cc:97:da:18:9b:2e:d2:aa:46:57:e2:c7:
df:07:bb:7c:33:5a:12:3e:34:41:74:4c:63:bd:75:21:f7:81:
82:a5:82:28:2f:31:17:d7:58:20:f7:e5:d8:77:d8:a1:1b:06:
ea:bf:6b:8d:e2:2b:b7:3b:1a:f2:7f:a7:b0:48:27:9b:65:15:
51:10:35:a8:83:02:e2:34:c8:24:81:58:a1:a9:24:26:d9:2a:
00:ea:27:4f:90:23:61:a9:11:d0:95:ea:4d:3c:de:6f:1c:83:
91:18:74:50:d7:f5:49:36:af:fb:04:86:2a:91:cb:f6:74:f8:
68:33:04:3d:ac:29:2c:d0:5a:24:09:3c:a6:15:37:4b:8b:68:
66:81:c3:55:b4:c9:4c:96:03:1c:df:e4:79:54:b0:de:99:5f:
be:73:1c:21:bf:77:e4:82:5b:cd:5c:bd:d0:58:23:91:b9:1b:
f3:1a:62:37:61:27:6e:bd:d0:d0:89:11:cf:ab:b2:26:b0:52:
8f:ed:a4:2d:75:ec:77:71:29:dc:ad:c8:f8:8f:e7:3f:2b:a7:
df:29:ea:4c:eb:f2:00:9d:91:15:3c:4b:54:af:ce:3d:41:47:
50:d5:e0:e0:de:17:d4:d9:66:a8:32:39:e0:04:87:bd:50:77:
09:ba:eb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 04:10:59 2026 by rpki-client