Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: VLwHK3Dq67i9Wday+fQ8gBH7C8K116gissZE8SgIYEA=
Subject key identifier: D1:01:7B:10:0D:EA:3B:68:DD:B3:A1:A2:B8:2A:F3:57:24:30:C1:1B
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 019D3AC10DCFE7F08C1BF298DCF24FF16648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0AB4
Signing time: Sun 29 Mar 2026 18:00:23 +0000
Manifest this update: Sun 29 Mar 2026 18:00:23 +0000
Manifest next update: Mon 30 Mar 2026 18:00:23 +0000
Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=)
2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: X/1FL3MjQkmvvsbk5bqrRnEv7mY9mpSyJD2ACxpR4eI=)
3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:0d:cf:e7:f0:8c:1b:f2:98:dc:f2:4f:f1:66:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Mar 29 18:00:23 2026 GMT
Not After : Mar 30 18:00:23 2026 GMT
Subject: CN=d1017b100dea3b68ddb3a1a2b82af3572430c11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:28:21:2f:f0:9f:5e:d7:7a:d8:e2:71:cf:
cb:43:c3:ea:fe:8d:ca:dd:f3:5d:cb:41:f0:15:0b:
b0:e3:ea:dd:14:37:91:5f:29:71:5f:de:9e:6b:16:
cb:3c:c3:ab:ef:44:74:21:2f:e6:e3:1d:a9:41:46:
b2:70:06:69:8d:fa:95:96:0b:0a:0f:43:fa:26:8e:
80:a4:df:30:fe:bb:31:20:03:92:84:00:3a:ae:0c:
58:ff:7a:fd:91:d6:1a:4a:7e:c9:55:7f:80:9a:8b:
3a:5c:f9:09:32:96:56:41:cc:78:b9:e0:15:7e:8e:
c7:c3:28:53:61:fe:8d:64:19:b2:b0:4b:b0:c6:6d:
a6:ee:ce:ac:ad:2a:5b:c7:e4:43:87:5e:a9:9f:1b:
b8:e9:7d:ad:0c:5f:82:b4:35:67:b1:49:18:da:c7:
23:7d:f5:61:e9:c5:35:cf:c0:06:68:d7:95:8d:66:
92:0c:0b:e9:f5:5c:5c:3d:bb:f0:0a:a3:0e:fa:7b:
09:b7:0f:d3:b2:b2:1c:38:07:30:89:21:15:50:0c:
5f:8b:a2:16:bb:89:c2:76:88:54:1d:6f:b0:bb:dd:
6f:b4:a9:c4:a6:16:d0:39:32:b8:15:04:97:65:20:
ee:bc:f2:58:05:23:e5:bb:06:2c:50:74:0a:08:4e:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:01:7B:10:0D:EA:3B:68:DD:B3:A1:A2:B8:2A:F3:57:24:30:C1:1B
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ff:39:3f:ab:09:fb:7d:a5:af:31:4c:32:a1:27:02:ad:80:
65:8f:19:fc:6e:07:f9:bf:5c:c4:c7:cc:43:da:80:a3:1d:d0:
e9:3e:8c:bd:7c:8c:b1:77:72:9e:13:b5:0e:f5:1f:8c:d7:bc:
7f:bf:f3:c7:e7:1d:b5:39:5b:5c:6b:5d:24:41:cc:7d:aa:f7:
94:61:52:72:4d:0f:6a:3a:fb:b6:7e:11:91:1e:1f:04:f1:97:
fb:95:b7:d9:9c:ea:51:45:d8:98:0d:f0:68:59:45:35:9c:4c:
2e:2d:75:33:f4:8a:65:6d:e5:0f:5d:81:a6:68:04:c2:87:be:
f3:55:63:52:b7:ef:7b:a6:47:a9:17:78:91:ed:d6:97:a4:69:
5b:13:b9:c5:27:a0:47:ed:da:71:59:ee:8e:82:26:e8:ee:15:
c3:60:67:57:ba:d9:9a:a0:a3:d9:ea:0e:cf:e8:40:43:da:69:
4f:2a:91:65:cd:ac:3f:82:fe:87:f5:fa:09:af:1c:ba:4b:69:
79:5f:da:00:8f:4c:6e:6f:1b:c9:de:6a:63:e8:f8:4c:94:f3:
19:ff:7e:de:f4:37:f9:4f:b3:21:e6:20:d3:20:ac:f8:e7:18:
14:61:e4:82:00:f5:74:94:a9:87:03:94:e9:88:53:fb:cc:20:
2e:15:59:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:54 2026 by rpki-client