Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
File: 0GmJqc1r0vLDwN7GCKKL49O6ToE.mft (raw, json)
Hash identifier: ulVPR3ykbF+VOq/znUn1Fq3//0BHtppy/GwQWxWdipc=
Subject key identifier: 48:77:71:86:D2:91:31:7C:9E:5A:7E:87:8B:15:D9:5F:DE:F2:DC:6E
Authority key identifier: D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
Certificate issuer: /CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Certificate serial: 019D382E26B79D3BEF6C79BD9252004ADD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: 0GmJqc1r0vLDwN7GCKKL49O6ToE.crl (hash: 4EjhYlGJYjzh8bF8d3gGv4PkjualXxambeHFnCd4324=)
2: wsFDs0k_i43xFHAOdnBr2BMkzX0.roa (hash: TtkJrd9Ep6l68yC5CkOYpRhWIjpFiNmgnjq9PKBAW0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:26:b7:9d:3b:ef:6c:79:bd:92:52:00:4a:dd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=48777186d291317c9e5a7e878b15d95fdef2dc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:ec:04:39:e8:83:a9:f1:35:79:04:f3:03:
91:d2:0c:dd:07:90:b7:a1:21:7a:04:8e:a3:e7:67:
3b:f5:5c:97:f7:c8:1b:ea:f5:12:3d:2a:f9:59:6e:
46:21:47:25:a0:02:a1:32:99:39:98:b0:fd:12:42:
34:71:3d:47:c2:36:54:e8:b4:91:fd:49:4b:50:5b:
b3:4b:2a:40:89:b7:41:98:50:56:80:d9:51:f4:89:
7c:a8:e9:74:dc:fc:a9:71:86:49:ee:15:1f:2b:62:
5d:4c:a4:4d:f8:f0:2a:46:f8:78:bc:4e:f6:55:87:
c5:70:3e:8e:94:1b:23:f7:17:fa:f7:72:a9:3d:f7:
63:e6:fa:9b:1a:3e:a3:ee:42:e5:e1:32:8d:52:2e:
7d:20:32:1a:9c:bf:6c:69:2b:a1:78:c8:7a:f6:0c:
d0:d9:4b:a3:37:5d:96:b8:1f:f4:6c:7a:3c:e2:ba:
de:73:67:dd:e9:eb:82:87:92:ae:80:a5:1e:5a:6c:
42:57:4d:05:7e:c8:84:3f:73:29:ea:0b:0f:43:c2:
60:31:6d:0a:84:8a:9c:6a:7a:8b:08:e4:b0:ac:06:
7a:38:e5:79:6d:2c:d1:d8:14:39:28:05:d5:de:45:
7b:9d:11:07:5f:da:3a:28:73:61:f6:f4:7a:ad:a9:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:77:71:86:D2:91:31:7C:9E:5A:7E:87:8B:15:D9:5F:DE:F2:DC:6E
X509v3 Authority Key Identifier:
keyid:D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:78:f5:3d:6d:b9:a6:28:e8:b4:cb:80:1c:34:8d:15:77:d4:
5e:4a:6b:71:8f:a9:98:d5:f2:98:b0:c7:0b:b1:0e:db:0d:45:
d5:5c:7f:86:ad:79:fc:1e:4d:a7:f0:33:b1:e3:88:b7:01:cf:
a6:4c:3b:34:6c:af:6d:30:9e:e7:81:d6:df:d0:f2:56:31:a5:
7a:b4:31:20:36:e1:6c:1d:93:bc:49:f1:19:a8:db:e6:27:02:
f1:f0:0a:bc:da:3d:06:27:16:4d:e6:fd:68:69:0a:f7:2b:b4:
ce:07:8c:91:99:21:c4:19:06:27:d0:75:dd:74:9f:4c:09:35:
34:6c:70:bf:e8:2e:c0:1c:7e:9b:b3:95:28:6d:9c:a4:57:29:
0f:9d:dd:09:c3:d9:f7:55:76:a0:dc:c7:64:0d:a7:a7:cb:a9:
96:75:80:5e:4b:f8:55:cd:2f:a5:82:4b:08:d4:80:a4:f8:87:
61:ee:07:5d:45:79:7b:f6:eb:f3:8e:e7:93:12:e5:b6:6f:e4:
5c:59:85:0a:e8:f9:1a:de:03:84:ee:af:79:06:10:fa:fa:e9:
70:69:5b:77:5e:e4:e7:d9:15:58:21:52:43:98:39:de:81:42:
27:d3:85:77:d7:46:74:25:b6:2e:85:d0:e6:74:0b:22:9d:35:
22:e1:10:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:51 2026 by rpki-client