Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
File: g_gpRGn7euwmAbsDdy0BVvRwt00.mft (raw, json)
Hash identifier: 8w+cMJa8lGZ2lUJbNVwAVL1j9a0pdv3AmU7POupfJ8M=
Subject key identifier: 61:B2:10:DE:3D:C4:88:12:58:D1:A4:70:EB:AA:BE:9C:4E:91:A0:E4
Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
Certificate issuer: /CN=83f8294469fb7aec2601bb03772d0156f470b74d
Certificate serial: 019D3789B991ECCAB503529FDFF2B528959C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:01:05 +0000
Manifest this update: Sun 29 Mar 2026 03:01:05 +0000
Manifest next update: Mon 30 Mar 2026 03:01:05 +0000
Files and hashes: 1: gEd6QeiAQ932jPLYrtnGG0ZTT6w.roa (hash: RPvaNvrZcdDQu4AbrRZ97MsyJRS0F3BlThyjoqYHdHI=)
2: g_gpRGn7euwmAbsDdy0BVvRwt00.crl (hash: P+EsXI++aJSnNQAbMI569rHPrnTng3qgKhkWOi5ts1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b9:91:ec:ca:b5:03:52:9f:df:f2:b5:28:95:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d
Validity
Not Before: Mar 29 03:01:05 2026 GMT
Not After : Mar 30 03:01:05 2026 GMT
Subject: CN=61b210de3dc4881258d1a470ebaabe9c4e91a0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:cc:86:07:3c:f0:68:a0:e1:d0:bd:70:c2:
ce:6f:74:fa:75:68:25:38:28:f9:f0:10:2e:9f:05:
4e:ad:2c:fd:63:8b:ba:fb:87:9f:2c:47:24:ad:f3:
8b:32:ae:2e:79:e7:b0:26:7f:d2:3e:fe:d6:f7:d6:
1c:f6:64:31:57:54:ba:2f:2a:a0:32:65:ef:d1:4f:
73:c9:78:f6:0f:6d:e3:f4:b0:82:3e:29:92:57:72:
ad:5b:fc:53:b8:fb:9c:06:90:80:65:02:9f:ff:a1:
57:fa:64:62:75:98:98:e2:fc:69:bd:73:31:1a:2a:
06:c1:84:64:a5:e7:82:fe:34:58:a2:bc:a9:b9:ab:
b1:76:02:d5:3d:65:ac:01:12:59:1d:3c:5d:be:6e:
e2:a9:4d:32:d3:39:01:86:ba:e4:e3:84:89:51:00:
89:de:0c:e0:2d:df:d7:2a:96:b3:9e:da:c5:7c:cd:
1b:63:ac:6c:72:2d:06:ee:50:74:dd:5b:f5:10:79:
3b:1e:ca:ea:27:94:38:8c:66:99:fa:e5:cf:ea:09:
9b:a4:c6:e7:13:d7:72:6f:16:6b:08:ea:7e:43:b8:
54:85:90:ea:b1:5e:97:42:25:dc:0d:58:da:4e:8f:
06:8d:04:a6:4b:ef:68:31:58:3f:01:bf:1a:33:c1:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B2:10:DE:3D:C4:88:12:58:D1:A4:70:EB:AA:BE:9C:4E:91:A0:E4
X509v3 Authority Key Identifier:
keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:77:62:a5:3e:ad:bd:cb:ac:a2:17:97:2f:07:3f:82:bf:98:
78:f8:df:9d:cc:a1:50:7d:29:ae:fb:cb:66:70:16:f6:28:45:
4d:32:1d:06:de:a6:d2:f4:e2:af:2f:d4:82:56:8a:44:30:f3:
c2:a6:4b:7f:f2:f1:7e:51:66:1e:46:27:d5:8e:77:f3:63:26:
c2:3a:71:23:4c:50:fc:e6:7e:5f:0d:d0:32:34:5e:3d:e3:7c:
d8:45:8c:4e:bc:f2:66:e1:26:4b:93:eb:af:66:35:a6:0a:ca:
76:a1:5b:b5:22:62:58:5a:40:13:f4:50:1b:8d:3c:ca:42:79:
c5:fd:fc:db:bc:fc:b4:10:8d:d1:f9:4a:26:61:77:30:ad:0c:
37:70:11:84:6a:3f:f0:c5:bb:8c:7f:04:fe:e7:8b:92:37:e6:
99:f5:c4:15:a5:46:57:94:b4:c3:5a:e9:e0:61:91:e6:10:1a:
80:59:67:88:3f:53:72:18:d8:54:24:51:c9:e2:f2:0c:ff:48:
a6:df:62:c5:c4:89:15:23:1e:9e:8d:c8:69:b2:a4:88:4d:31:
eb:a3:19:f7:44:66:f9:51:ef:0c:1c:cb:4e:d2:b5:12:bc:54:
56:d2:51:5c:ff:dc:88:55:2a:2f:2e:86:cd:f6:f1:9d:2b:36:
26:c2:bb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:16 2026 by rpki-client