Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft
File: GI8TycwU9V7iIgtEl2mS0R1d6HE.mft (raw, json)
Hash identifier: ZfMaa2d8bj5WAnCsfuKwzEialPGeCWjhQzzuoqeLwts=
Subject key identifier: 07:E4:4F:E4:62:BA:EA:96:ED:B4:A3:1D:C2:D6:1F:35:A2:CD:33:5B
Authority key identifier: 18:8F:13:C9:CC:14:F5:5E:E2:22:0B:44:97:69:92:D1:1D:5D:E8:71
Certificate issuer: /CN=188f13c9cc14f55ee2220b44976992d11d5de871
Certificate serial: 019D37898D8C8BA47C04CBDAA08FDFD8BE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft
Manifest number: 0186
Signing time: Sun 29 Mar 2026 03:00:54 +0000
Manifest this update: Sun 29 Mar 2026 03:00:54 +0000
Manifest next update: Mon 30 Mar 2026 03:00:54 +0000
Files and hashes: 1: GI8TycwU9V7iIgtEl2mS0R1d6HE.crl (hash: B462e3nKvT4gZ8yjYW36OJ9Z0LffHK/XA/t2HIZZsZQ=)
2: PzE_8e48NSrjuEXwETdW0v6zNSY.roa (hash: Gt3prVp6LYLN+xJ8+Sn4cyYMDMXLHyapcc6UlbYLHJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:8d:8c:8b:a4:7c:04:cb:da:a0:8f:df:d8:be:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188f13c9cc14f55ee2220b44976992d11d5de871
Validity
Not Before: Mar 29 03:00:54 2026 GMT
Not After : Mar 30 03:00:54 2026 GMT
Subject: CN=07e44fe462baea96edb4a31dc2d61f35a2cd335b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:50:8f:ef:42:7b:3e:5a:25:3f:8e:88:9e:
71:c5:ab:af:f7:ed:6c:7a:f2:b0:cf:ae:d1:5e:e5:
ae:28:73:13:96:ec:a5:de:af:f9:10:4d:8a:d8:e9:
fb:6c:d0:85:44:18:6c:ca:08:14:49:49:c4:58:d8:
ab:f5:79:43:ae:09:80:65:ee:33:8a:79:c8:b1:cb:
6d:cc:e6:c5:c4:17:58:71:9d:d7:a4:da:f4:ee:c5:
35:35:86:fe:14:ca:8f:b7:ff:18:62:d4:56:43:bd:
be:4f:42:f0:6e:6b:f0:85:82:16:cf:b6:ec:f4:b9:
48:26:eb:9f:9c:9b:20:9d:4a:8e:9c:4f:3e:77:4c:
2d:77:fe:5b:55:ce:99:88:b8:cc:53:23:ac:8e:29:
22:5d:fd:2b:4b:16:33:e2:ca:4e:a1:9f:7d:3b:6c:
f4:91:a2:2d:32:48:e7:78:34:1f:cb:9c:1e:56:35:
e7:b2:54:43:f4:bf:d7:77:ff:02:4a:8a:2b:7a:54:
26:70:d4:f5:20:95:a2:4f:7a:20:fa:38:75:15:5e:
01:4b:5b:7d:e6:59:52:ea:af:d8:f1:f5:7e:bc:3d:
0f:86:ee:d8:f0:e8:73:4f:45:6a:11:e1:15:f8:57:
46:e2:f6:41:6b:ca:14:b7:35:60:db:b3:af:07:87:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E4:4F:E4:62:BA:EA:96:ED:B4:A3:1D:C2:D6:1F:35:A2:CD:33:5B
X509v3 Authority Key Identifier:
keyid:18:8F:13:C9:CC:14:F5:5E:E2:22:0B:44:97:69:92:D1:1D:5D:E8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d9:66:22:05:f5:99:49:cd:03:3c:66:11:a1:c0:ce:d6:4b:
5c:5f:1f:06:4e:40:70:a4:90:47:96:cc:04:77:39:42:35:58:
5c:12:4f:00:b8:4f:ee:04:f5:80:be:1e:04:17:fe:83:35:92:
98:fe:51:db:71:c6:b5:97:19:a7:a4:c8:72:41:e3:ef:32:4f:
11:93:da:fb:fc:98:96:40:65:0c:fc:10:77:3b:16:af:e9:f8:
3e:7e:55:fe:4d:c0:e6:91:ce:e3:ea:63:86:9e:6c:2b:c5:fe:
54:b5:cb:d5:0b:7f:15:92:50:6a:f5:e5:c5:a8:dd:ca:de:98:
75:ba:b0:e5:42:42:d9:5d:23:b0:d8:6c:89:3a:75:f9:10:58:
ae:d0:20:2e:78:f6:79:34:f2:39:d4:74:e3:bb:06:67:e8:09:
8f:8f:e1:b5:a3:2b:b8:66:9e:d8:9d:c0:d4:07:37:ef:83:ea:
0d:b8:a3:8a:8d:45:23:88:93:2d:f0:13:7b:01:6f:2d:c5:f8:
8f:b2:d7:e9:af:7a:fd:11:45:cb:f6:4e:a9:17:9a:d4:26:cd:
b4:ea:87:4d:d2:be:74:e6:ac:50:27:d2:a9:db:24:77:64:63:
c4:65:69:12:6c:1d:73:d3:56:6c:05:00:cd:f5:6f:ee:40:b4:
36:a5:56:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:06 2026 by rpki-client