Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: g/ytXx9rHjvcypWK7YuC+pcl3/Ji1zzMVU23QOX1nJ4=
Subject key identifier: 68:58:5E:21:31:1E:43:F1:0D:FB:11:5D:6E:EC:87:C3:88:27:E6:7C
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 019D382E9F9E49D57FB24CAEDB1C4DCFC934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:01:12 +0000
Manifest this update: Sun 29 Mar 2026 06:01:12 +0000
Manifest next update: Mon 30 Mar 2026 06:01:12 +0000
Files and hashes: 1: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: 3s+khu+HqytuXrPOB+mvz93IO8mH1KDAPC6AYzAZkN0=)
2: NYfYWYZMa_439o1QRYF0WdRM5MM.roa (hash: 8UO+Z6kVQhD/teXdacx0W8x4zMZ5SdEkPaLtrfrmHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9f:9e:49:d5:7f:b2:4c:ae:db:1c:4d:cf:c9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Mar 29 06:01:12 2026 GMT
Not After : Mar 30 06:01:12 2026 GMT
Subject: CN=68585e21311e43f10dfb115d6eec87c38827e67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:ff:8f:a7:28:55:b7:84:a2:75:35:4d:a7:
69:f1:0c:66:8b:de:75:6b:7a:e3:7e:ad:df:41:25:
9b:bb:dd:bc:f8:7d:cf:66:70:0f:a5:4c:ed:81:8d:
90:95:8a:6d:bb:0e:06:1b:de:38:18:17:f3:b4:6d:
9e:13:66:35:0f:1e:13:ec:93:7b:63:19:7d:b9:f7:
f5:43:c9:98:53:09:32:d0:1e:c6:1a:9d:75:09:5d:
df:7e:76:51:e2:7e:9a:71:ae:73:18:eb:c3:91:3f:
b8:c7:75:7c:cf:f9:8f:b6:c0:ad:f2:6f:a6:67:b4:
bc:29:f5:a5:24:53:73:a1:6d:20:ac:a1:7b:d9:7a:
9c:93:14:c8:29:db:43:54:8f:3e:8b:81:a9:bd:85:
ea:46:95:b4:04:77:e0:94:41:ce:4e:0a:98:81:db:
a7:6c:e0:b9:d7:9d:0b:9f:bb:b6:82:ef:fd:c4:4f:
22:84:8e:cb:68:ab:df:c3:c7:d8:90:a7:04:45:d8:
cf:4d:ac:ba:7b:3e:bd:41:80:77:09:a5:7f:af:7d:
14:0d:5d:4f:ed:33:56:7a:89:ba:0e:6e:58:fa:ef:
07:66:ab:74:eb:a3:bb:85:bf:3e:ea:c8:1f:86:03:
78:06:af:47:cd:3e:6f:1f:e0:bd:79:d1:00:5f:01:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:58:5E:21:31:1E:43:F1:0D:FB:11:5D:6E:EC:87:C3:88:27:E6:7C
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:69:9e:68:86:4c:aa:84:b3:81:53:bb:48:74:ee:de:a3:18:
5a:82:69:b4:10:89:92:b0:fa:0c:28:e4:f3:95:da:59:ed:cc:
f4:a9:fc:9e:ca:1e:d7:f6:76:a1:39:9c:34:38:e1:af:5c:3d:
d7:de:aa:11:58:fd:4e:a9:28:fe:32:56:1f:1c:d2:65:f9:eb:
65:77:ba:9c:63:50:90:84:ec:9f:8b:fe:e5:1b:87:95:3d:96:
b2:2f:ca:c2:c4:ce:1a:b3:7e:a5:e1:83:c0:c1:d4:48:4a:41:
98:d4:ee:cd:59:b1:6e:45:e0:41:2f:dd:35:6c:dd:99:0d:23:
50:32:d9:0e:36:52:2b:dd:c6:09:75:ed:f4:de:64:9e:6a:be:
16:0d:a6:40:71:31:6b:d2:e8:e2:54:af:45:14:a7:23:f5:59:
a6:97:46:98:74:b2:ad:0e:5c:a3:74:3f:8c:3f:00:94:ce:24:
05:f2:13:aa:38:01:f3:96:6d:3d:30:4d:8b:f6:12:78:e2:61:
c6:f8:5a:ce:a4:f2:29:7c:ef:0f:6d:9b:e8:b7:d9:e2:b4:4d:
56:3e:23:03:94:d9:2c:0a:5c:ee:f1:01:a4:b3:23:50:a2:b7:
1c:58:32:fe:01:fe:44:ae:da:9f:13:97:88:cc:04:b4:f7:f7:
a1:1d:4d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:06 2026 by rpki-client