Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: 49kjb8sA5nngte/M8PL+P6W7c2dgLvFNcWoxOTbi+OI=
Subject key identifier: 04:00:42:F1:76:A4:0A:A9:86:2D:90:95:7F:71:00:86:4B:18:28:53
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 019D3909B3CD9321EAB8EC539C83119CA19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 1126
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa (hash: DP27/a5o1Ym+vesDLFqV0Tua4ny+ds0/pH34jhmErS8=)
2: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: /Ki25UlJVeKHxMBjdWZHoM9BVH0ptPoXE9xiQQ81uSc=)
3: Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa (hash: KqQ8TKxBYl3JumzrSj+0qt5zeDJPsxKpAnGsc38qwpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b3:cd:93:21:ea:b8:ec:53:9c:83:11:9c:a1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=040042f176a40aa9862d90957f7100864b182853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:92:7d:ca:d9:26:3c:fa:be:a1:38:74:db:
3a:39:5b:4f:ea:09:9f:16:9f:11:32:1d:6a:3b:25:
a5:a2:17:40:22:c3:5b:83:50:08:e4:e6:74:1d:16:
4f:52:2b:a5:ef:3e:73:2f:87:a3:4d:62:14:0e:78:
88:90:4e:09:5d:41:c3:5a:36:91:82:ed:e9:fe:4d:
db:94:58:9e:be:36:c9:64:09:ca:d4:8d:3a:13:db:
66:ba:31:16:a2:5c:5b:6d:13:62:7e:0a:12:ca:21:
6f:6f:b1:5e:eb:2a:bb:86:b2:d2:78:e9:a1:68:6a:
b1:7e:d5:42:a4:c8:e1:9e:58:b1:89:d5:1a:2d:97:
ea:1d:8a:7c:ce:95:65:7a:71:78:4c:56:b0:cd:5a:
24:15:3c:51:04:c6:d7:aa:00:50:ea:a0:9f:5f:ff:
b7:eb:48:58:a5:4c:2e:a3:d0:92:62:f9:b2:fa:70:
79:b3:e4:d9:32:da:96:4d:3a:7a:d2:74:ca:26:b1:
8b:3b:4c:b4:73:55:28:e2:ad:62:b4:21:a5:65:ad:
9f:af:d6:1a:d3:21:7b:48:a3:46:0e:ed:5c:c1:58:
c5:9f:e0:b4:95:9b:60:4f:bd:0e:74:42:11:c6:44:
af:15:45:61:bd:8b:f6:6e:30:c6:72:7f:1d:67:e1:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:00:42:F1:76:A4:0A:A9:86:2D:90:95:7F:71:00:86:4B:18:28:53
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2d:b6:e2:eb:90:4e:fe:33:53:c5:5c:c7:0d:f9:3b:9c:dd:
e5:c2:3b:1a:8c:a0:06:c6:c1:2d:b6:c3:ec:f2:2b:43:b9:05:
a4:b3:14:e6:49:d4:59:d0:b2:14:84:19:fb:65:01:92:ab:c9:
ac:7c:25:0c:8f:96:40:ee:fb:7b:13:62:8e:69:3a:86:de:e9:
83:7e:85:7e:27:f5:79:19:63:55:53:1a:b3:7e:0c:22:23:b2:
3d:8c:04:83:25:57:65:c7:dc:dd:bf:c0:b7:7d:ad:d6:56:32:
e0:9d:44:a2:ad:00:04:be:db:f1:33:00:0f:41:81:55:1e:af:
e0:c7:9c:11:98:9c:58:86:e2:69:ea:25:eb:80:2e:22:25:ba:
cd:8b:7d:85:db:f9:e6:f7:44:1f:5d:23:f0:9a:2a:4f:99:a7:
c1:7b:1f:75:42:8e:5a:3d:94:62:f1:8f:12:2e:5a:34:b1:e7:
5e:37:95:0d:aa:d6:04:61:37:f4:89:de:17:c4:34:f7:30:3a:
c8:ea:8f:2a:f0:04:74:d9:41:8e:d1:ba:82:d5:e8:7c:6d:56:
e4:2e:b5:13:bf:38:23:f9:65:ac:ca:53:0a:a6:f3:75:a5:a1:
fa:4c:ce:df:ee:38:a1:be:a9:b9:a2:6f:16:f5:5c:e6:09:2f:
f7:e0:02:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:06 2026 by rpki-client