Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: A+NXkadqMCvFRLUq8JCzEI4V0dewx3cTBH5DfEPZs48=
Subject key identifier: 68:78:1A:C6:17:27:17:CC:A2:15:1E:B9:13:AF:81:67:88:A3:84:1A
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 019D38D3B756E12C20063894FB89DF75E6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 09:01:32 +0000
Manifest this update: Sun 29 Mar 2026 09:01:32 +0000
Manifest next update: Mon 30 Mar 2026 09:01:32 +0000
Files and hashes: 1: E2vGMfTh0_d3hFyTF_vwxF5KrPA.roa (hash: DBcvB5VPooiTXjGKSVqOi+hUE2hv4iu9s06iz8E2+EI=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: AgpUe4aulZv0zfRzZUMWFnLprhLd9gJnjb0ROaIQjLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b7:56:e1:2c:20:06:38:94:fb:89:df:75:e6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Mar 29 09:01:32 2026 GMT
Not After : Mar 30 09:01:32 2026 GMT
Subject: CN=68781ac6172717cca2151eb913af816788a3841a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:4c:16:67:11:e9:90:6a:2c:a8:1c:fa:f2:
45:4f:0b:99:9b:c9:fd:6b:1e:ac:a3:9b:4b:d6:05:
b6:46:c0:38:c5:41:b2:55:66:e9:1d:5b:ad:1d:2d:
34:7e:6f:75:30:93:4c:d2:a5:6d:5b:3e:c3:32:1a:
0d:66:60:b3:24:00:45:3e:bd:35:e6:64:d8:86:72:
68:b9:f1:18:58:8d:c8:e1:32:cc:4e:d2:9d:8e:49:
90:0e:45:be:da:79:c2:23:15:fd:80:6a:b8:7b:94:
3f:57:ac:a9:48:aa:38:f7:cc:ba:e8:bd:01:0a:10:
5e:37:1c:e9:cf:07:b0:51:84:92:2b:91:02:90:a8:
e8:24:89:0f:b0:94:67:51:f7:ce:6a:a7:ca:c2:93:
ff:41:5c:24:7c:f8:15:3f:da:9d:ae:9c:e0:81:6a:
85:78:a7:79:88:e4:de:26:78:8a:d0:37:53:98:a0:
c4:32:ae:b1:6d:b4:e0:75:b2:f4:8d:81:c0:af:09:
44:6d:89:a2:13:c4:83:12:18:cd:7f:f2:6b:d8:e1:
d4:50:c4:60:4f:5b:61:d9:07:8f:21:16:f1:bf:b8:
24:6e:4d:5a:f1:fc:dd:23:c1:82:1f:a9:18:f4:1a:
cc:4a:4d:9e:8e:67:af:49:8c:4b:7b:dd:97:95:ee:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:78:1A:C6:17:27:17:CC:A2:15:1E:B9:13:AF:81:67:88:A3:84:1A
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2d:ad:dd:a2:fc:17:f2:ba:b0:f5:7c:3a:e3:24:ca:7e:e9:
69:19:c1:52:30:8e:4a:0a:8b:b9:ca:72:e8:e9:53:9c:3f:0c:
bf:93:83:86:17:c0:76:d1:7f:12:8f:2c:7d:fe:86:f6:95:d8:
52:56:64:ba:01:87:4e:c6:8f:e2:ca:d3:29:26:db:d3:1a:b4:
09:89:80:2c:5f:59:b4:ad:12:06:87:3d:35:e1:9e:6d:3a:6b:
c0:68:c4:4e:3e:d7:5a:04:cc:33:03:12:8a:1f:19:1b:2f:c2:
b9:e6:a5:87:d6:3a:74:7c:16:30:59:59:53:14:7f:64:b8:c3:
da:c2:d7:08:5e:2f:f5:b8:bf:4c:56:fe:c4:5b:7c:a6:e0:9c:
55:77:a3:4b:7e:b8:0c:94:02:15:53:4d:4a:f8:27:4d:ad:1c:
ec:92:01:4b:c2:a1:c4:04:4c:f5:58:70:c1:d5:8b:de:02:80:
b8:ae:e5:00:1d:55:48:2d:05:f5:8c:64:d6:60:f8:da:d6:14:
89:e9:78:40:c2:03:91:3a:8c:5a:06:cf:f8:84:88:b8:fe:9e:
e4:71:e6:b0:b1:ed:18:80:c4:c3:11:9c:77:16:d1:a5:97:a5:
7d:f3:ce:bd:c8:5f:12:35:c5:f3:cd:5d:0f:0d:b7:1a:25:a3:
40:ee:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:24 2026 by rpki-client