Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier: Yco8MRbaOqcDP/DB9xQw6h7i5chNkozPM5nNOk2mYDc=
Subject key identifier: 9A:95:F9:D1:C2:F4:47:26:C6:D4:A4:F0:1E:A0:49:8A:D9:78:D5:5F
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 019D37C0E636985DE31E509781E787F7AF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number: 096A
Signing time: Sun 29 Mar 2026 04:01:21 +0000
Manifest this update: Sun 29 Mar 2026 04:01:21 +0000
Manifest next update: Mon 30 Mar 2026 04:01:21 +0000
Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: +ehJs6uIBibD2LFEijWWcRl8jOd6M7Cue+Q/cmCOuOU=)
2: Op0Xld0AvV9D-Gn5dQ7yl5fha9k.roa (hash: w+2GDqO3QQPP7xUHnZq2EDl7NnG4Qd4Bmp0KetYUXf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e6:36:98:5d:e3:1e:50:97:81:e7:87:f7:af:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Mar 29 04:01:21 2026 GMT
Not After : Mar 30 04:01:21 2026 GMT
Subject: CN=9a95f9d1c2f44726c6d4a4f01ea0498ad978d55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:11:99:6f:14:af:29:24:3f:1b:b9:a4:4e:
6a:e9:26:cd:c0:ac:07:f8:0f:8a:a3:67:b6:ac:95:
0b:41:55:79:a7:c6:3d:4f:34:c1:e9:41:3b:fc:7b:
74:0e:ac:87:58:f8:93:6a:c9:2c:ea:54:69:30:64:
92:5a:2e:5b:c3:dc:c2:aa:61:c5:db:36:9e:db:91:
2f:27:15:d1:de:d2:21:61:e0:5f:c9:42:3b:fe:d9:
40:e6:1f:6c:f6:b9:f5:17:8e:4b:52:d7:13:57:06:
fd:b4:99:9a:9e:75:13:a8:39:1d:c5:e8:c0:24:aa:
0f:0e:cc:86:98:d7:da:6e:29:c9:ff:c3:3f:39:ef:
a3:17:03:65:82:a9:7e:4b:8d:31:bd:3e:d0:64:dd:
d4:f1:45:9e:86:4a:81:e6:a4:22:e6:ca:d3:ba:d0:
11:37:ef:71:f2:ca:4c:77:71:70:96:36:48:c1:ee:
e1:da:d1:47:8e:45:c5:b1:db:35:bb:6e:e9:44:40:
01:e9:7a:38:29:31:aa:9d:81:94:9c:82:61:f4:20:
d5:9a:c2:43:67:e3:dd:72:63:5c:ed:0a:55:01:dc:
58:e3:eb:54:f2:af:a1:2b:77:d0:86:5c:5c:df:e8:
79:bf:c6:a4:03:95:d5:78:a3:b3:9d:15:4d:61:c6:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:95:F9:D1:C2:F4:47:26:C6:D4:A4:F0:1E:A0:49:8A:D9:78:D5:5F
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6c:97:24:72:97:05:e1:9b:a6:d7:9c:7f:07:d9:f6:8e:88:
16:c4:39:38:2c:9d:f8:9d:42:ea:ea:7d:48:67:08:a2:cf:42:
17:82:fc:c3:bb:42:6d:54:07:8a:cd:1f:76:60:4f:f6:e5:fb:
c1:ac:a8:61:d1:da:22:5e:09:8c:c7:23:e6:16:f0:ca:3d:18:
5a:c8:05:9d:8d:27:6b:a5:02:1d:e5:10:c3:fa:8e:66:0e:22:
3b:2e:a7:11:30:40:80:07:06:ef:2c:dd:01:17:67:79:87:1a:
19:e8:ac:59:7c:bb:ca:07:40:01:24:cd:61:af:85:f7:41:3c:
03:3a:6e:34:f8:c9:82:00:93:03:29:75:9b:40:58:94:8a:f2:
5e:a0:75:6d:6d:8d:15:b0:34:a9:63:7b:97:70:a4:9c:a6:61:
3c:68:f7:51:1b:4f:1e:c4:6c:cd:6d:ba:be:6d:d0:ac:78:3c:
ca:6c:87:98:c1:3d:6a:fe:61:a9:56:90:00:48:b7:83:fa:cc:
bc:24:bf:35:7c:89:b0:12:e4:a0:f9:6c:e9:8a:7e:d2:10:11:
1d:c4:a6:d1:58:42:23:1e:1c:44:34:09:b8:91:88:f3:d1:98:
5a:d7:f2:8d:d6:3a:72:8f:5c:e2:91:51:2d:c1:99:f5:fd:ac:
5a:47:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:27 2026 by rpki-client