Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json)
Hash identifier: gTh21yw9c9pJjE77dt7f8Da/T0o++4AghbQWdPKGdhk=
Subject key identifier: 03:AE:48:FC:50:D1:3F:0F:A6:4C:CF:A9:B9:D8:BF:D5:3F:F8:03:3F
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial: 019D386666FCD59DA9E5947A554797AB1705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
Manifest number: 1864
Signing time: Sun 29 Mar 2026 07:02:08 +0000
Manifest this update: Sun 29 Mar 2026 07:02:08 +0000
Manifest next update: Mon 30 Mar 2026 07:02:08 +0000
Files and hashes: 1: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: czvh/VcYYiR3gFNsIN5mVsD0QLbsFFYA0zbjKx2CsXQ=)
2: Qmu3wW12Nt0wC-4fyX9XhN0sy00.roa (hash: 3puXzcVdaiUqy4sNyffXvbU1Eh7Kt4nob6sCXMDl8Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:66:fc:d5:9d:a9:e5:94:7a:55:47:97:ab:17:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Validity
Not Before: Mar 29 07:02:08 2026 GMT
Not After : Mar 30 07:02:08 2026 GMT
Subject: CN=03ae48fc50d13f0fa64ccfa9b9d8bfd53ff8033f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:d5:58:1d:62:f5:e3:a7:1e:f9:4c:32:75:
07:d3:f6:49:ab:5d:89:2d:63:4f:d8:ca:5c:21:a4:
39:8a:33:ba:66:63:ee:18:8a:42:80:81:bc:39:75:
c3:48:d0:68:14:d8:b3:1b:b6:88:84:4e:81:19:b5:
60:72:3e:9e:24:23:97:c2:e7:dc:a1:b5:f8:b7:28:
5d:1b:d6:f7:af:16:54:f9:e8:e5:37:7e:9a:96:0a:
4c:7b:d1:5f:7f:6f:71:01:ff:46:6c:24:20:68:ae:
30:97:df:cb:4b:0b:a2:bf:ea:2d:eb:c1:94:cb:64:
24:08:ed:e2:c8:3c:c6:63:58:7c:ee:12:cd:bf:8f:
ef:fc:29:a5:04:9c:56:d0:23:98:4c:cc:10:54:b4:
ce:d1:57:39:1f:ae:4e:a2:9d:1f:14:63:0b:9d:68:
2a:89:f2:80:e1:5e:af:b3:2b:3c:3c:2b:9b:d2:fa:
e4:fe:95:81:b3:f1:8e:28:0b:b6:a1:73:59:6e:e1:
34:56:cc:3d:13:53:72:10:d5:b1:36:ed:9c:63:39:
79:67:ab:b0:ec:ed:9e:70:4c:31:7e:12:88:76:8f:
80:0c:3f:82:6a:7c:77:64:2c:85:db:23:fd:a7:29:
18:31:80:f6:87:2e:7b:d4:39:f8:26:14:65:5a:6c:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AE:48:FC:50:D1:3F:0F:A6:4C:CF:A9:B9:D8:BF:D5:3F:F8:03:3F
X509v3 Authority Key Identifier:
keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:03:0c:7b:51:d1:a4:cf:11:5a:85:e4:4d:8c:c8:4b:ef:30:
55:1a:8b:4a:4a:4a:0a:b6:06:40:12:d9:98:ce:23:da:80:94:
02:16:98:b1:54:07:2d:9b:28:fb:f9:8f:14:21:08:eb:dc:10:
b1:32:a2:cb:13:a2:fa:39:45:cc:32:f1:37:b9:60:d7:d0:c5:
ab:25:4b:31:46:3b:53:52:54:66:a5:0e:25:8a:89:a3:57:bf:
84:44:73:a1:24:2e:8f:28:34:98:50:a5:6a:06:ab:6a:bb:b9:
18:5c:62:fe:a8:6c:de:55:28:24:8c:ed:a6:2b:e8:b0:b4:a1:
0e:80:63:ab:38:99:d2:33:f3:08:01:64:a9:94:31:4b:e6:a7:
5b:31:30:5f:eb:4e:9e:92:cf:eb:05:df:d2:86:10:c2:cc:17:
c4:29:08:c9:50:41:3e:7c:63:ff:e1:5b:ca:76:8c:14:1b:c5:
7d:a6:8c:40:67:67:1f:fc:da:1d:f4:87:e9:08:e1:af:d2:88:
b1:e8:a4:eb:06:56:73:ee:72:79:6b:39:2a:ef:e1:f2:4b:9c:
40:c0:62:c4:0b:92:f5:43:bc:7e:e7:38:51:4f:ef:b4:f5:12:
db:be:50:a5:13:8a:95:b4:44:35:8d:80:2b:19:1c:26:2d:6d:
05:ed:b1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:16 2026 by rpki-client