Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
File: GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json)
Hash identifier: U8QWssMCKAWl+LQPVFuN4Kfsk0Ya7zWjVZWkDFoS1KE=
Subject key identifier: DD:10:DA:6A:11:53:A3:70:8D:33:85:DA:FB:18:E3:38:D8:C3:7F:B0
Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
Certificate issuer: /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Certificate serial: 019D37C0F0152A9962849532CF13EE359223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
Manifest number: 172F
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: +E6tPVyC1b9qvZL2QIw8MjZc2lERJtQz/eLcycHElb8=)
2: ddzzutA4t5_bTS59x-ViP0VnX0A.roa (hash: LM9NwYw2Z3ZadyCbFgStTauj7LtTwJI2w9ItE8haIGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f0:15:2a:99:62:84:95:32:cf:13:ee:35:92:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=dd10da6a1153a3708d3385dafb18e338d8c37fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:f8:53:37:20:89:4c:3d:30:a2:34:1b:07:
ca:6e:f2:40:7d:bf:c9:de:20:da:2e:64:6c:23:9b:
50:e0:ae:a5:3e:dd:aa:5f:4e:f8:21:f6:33:92:3a:
fe:31:c4:81:88:34:3a:48:63:5e:d5:dd:cf:a8:80:
e4:ba:de:4d:fc:96:f4:7f:34:b9:61:55:10:4d:eb:
3d:af:b0:80:d2:d4:b8:09:96:cd:6a:99:07:16:5a:
97:6e:87:d0:90:39:f4:83:84:6c:d7:dd:57:ee:f1:
a2:98:3b:69:60:e8:5f:d8:f4:86:26:e1:88:8f:84:
2d:e0:06:29:27:21:39:e0:1d:bf:cf:b2:75:27:88:
b1:31:e4:4f:ab:9e:9c:d7:65:48:83:59:9b:dc:1a:
b3:54:f7:63:e6:ca:e4:39:d1:3a:28:2a:c1:49:79:
13:80:cc:11:0e:74:83:a1:e5:19:3f:41:fd:eb:3c:
d6:f4:13:2a:4c:7b:2b:b3:b6:7b:6b:a9:72:a1:f5:
71:60:ab:2e:61:99:4a:2a:f2:ff:e3:22:48:23:25:
51:05:57:8e:8b:d2:cb:4b:55:67:c8:d8:63:e2:05:
22:38:08:21:46:d6:cf:54:4f:70:ee:e0:0f:2f:d9:
28:21:4f:e9:49:e0:8f:fb:94:32:6f:38:36:47:94:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:10:DA:6A:11:53:A3:70:8D:33:85:DA:FB:18:E3:38:D8:C3:7F:B0
X509v3 Authority Key Identifier:
keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d2:d5:29:6d:2b:00:66:da:67:37:7e:1c:ca:24:c2:61:fd:
7a:f3:fc:33:48:02:14:ca:36:c3:35:11:48:0b:c3:ba:ce:5b:
ce:51:27:cb:74:6f:50:75:9f:ac:5b:41:be:0e:20:3a:a3:8c:
6d:b7:34:08:5b:36:5c:b4:c9:a3:6b:7c:e0:cd:02:2a:41:46:
e1:1b:72:dc:4f:34:02:38:df:a9:00:45:46:d0:7d:ca:ea:b0:
18:81:b9:44:98:37:90:4a:13:8f:94:60:d6:5c:72:a6:23:31:
9d:50:72:62:56:3c:92:da:f8:4e:0d:05:b7:04:66:ab:d5:dc:
10:a3:86:23:4d:3d:c6:db:04:8d:99:76:9d:90:06:7b:dc:19:
fe:c3:94:a0:a9:9f:31:96:31:10:2c:cd:3a:5b:1f:af:53:1f:
69:9e:90:a5:96:a9:42:4c:b7:96:70:d6:47:b6:41:2c:6b:04:
9c:d5:25:91:f5:ac:36:aa:4b:47:46:09:4e:e6:ec:b6:75:96:
07:7e:b0:c2:b9:80:75:89:aa:7a:45:95:b7:94:81:91:62:8c:
48:7b:b0:dd:c5:ce:9f:91:52:0c:85:8f:02:d3:15:53:e2:7a:
5e:44:51:1b:0a:a5:24:ea:0c:b1:e8:5a:6c:99:92:70:ea:1b:
93:53:bc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:32 2026 by rpki-client