Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
File: ggBZa784LUmLxewrP9ZTOehbmPI.mft (raw, json)
Hash identifier: JHfQqrY26t1ijbeoMEyLISgcu+Zda+rSpTWFCPY52Vs=
Subject key identifier: 14:75:3A:77:04:47:E0:67:1E:49:6B:D4:2E:33:A2:E6:AB:C0:9C:53
Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
Certificate issuer: /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Certificate serial: 019D38D33E833733C3697DBD0227334E9BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
Manifest number: 1028
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: C3dW_FiIoEs6GrFhvU5lar2mS5g.roa (hash: fqgtLb5/szWJ2+3XnL0HEWrQ0seXWzzVVKN65vv4UQo=)
2: ggBZa784LUmLxewrP9ZTOehbmPI.crl (hash: YcAnyVF+V5MxvEyc1UypG+4qYvD6eE89IkFhcDcV/PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3e:83:37:33:c3:69:7d:bd:02:27:33:4e:9b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=14753a770447e0671e496bd42e33a2e6abc09c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:92:7a:a1:51:a0:1e:61:97:ca:d7:70:ef:0d:
f2:54:43:43:3b:94:c6:81:92:71:10:38:91:63:07:
d0:b2:fe:6f:29:36:79:35:61:d1:98:b1:b8:5b:d6:
84:88:96:25:06:a0:a0:b7:a3:8a:d7:01:2b:13:a3:
e0:bf:06:25:5f:dd:a4:22:5d:d1:2a:35:92:e3:6f:
ba:a4:2f:eb:d9:fe:a9:75:4b:32:89:0c:14:b0:c1:
c9:d5:4d:9d:99:3d:88:6c:be:81:c2:48:f0:21:14:
d4:c9:27:77:88:03:a3:d5:99:95:99:7a:b2:87:f4:
a2:d8:4f:09:78:71:03:2f:54:55:68:77:f0:9c:01:
7b:b4:da:b6:03:3f:9c:49:1b:cd:8a:f1:36:f9:41:
9f:c7:de:df:65:57:3b:a7:ed:3e:76:ce:bd:56:2a:
ab:84:f7:b8:a0:de:2b:53:19:e2:48:bb:42:68:37:
ce:53:0e:d7:9f:8f:d0:2a:34:b5:71:3b:3f:c4:80:
8c:90:f0:e3:31:51:ba:02:d1:12:00:0f:6b:2c:48:
f5:c1:f5:e9:9b:89:47:af:31:94:05:ba:22:17:d0:
76:34:b4:f8:38:cb:ff:2f:9d:73:0d:4a:ee:47:52:
60:9b:81:6e:b1:80:db:4f:ee:f4:81:a8:05:7e:a2:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:75:3A:77:04:47:E0:67:1E:49:6B:D4:2E:33:A2:E6:AB:C0:9C:53
X509v3 Authority Key Identifier:
keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f5:43:87:72:bc:74:1d:ca:7e:ef:26:bc:b7:e5:66:de:bc:
c1:7a:f0:3d:5d:e0:b0:39:8a:c1:54:52:1d:77:1d:58:76:2a:
1c:6b:1f:cd:e1:4f:5a:52:cc:78:ee:2d:b7:92:c9:a6:6c:4e:
59:03:63:3d:d2:9c:8a:d4:8f:94:e3:ac:54:8a:f0:ba:f8:36:
b6:ba:57:d5:1c:81:96:53:96:45:78:0f:a7:1a:28:23:02:e7:
70:20:d9:55:20:1e:82:96:4f:74:28:68:47:28:59:0e:2b:00:
23:1a:e7:e2:ff:7c:4b:70:b1:2e:1d:a3:f7:d4:b4:5a:bf:ed:
5b:c7:24:01:d9:42:6f:65:7a:b5:e9:0e:c7:b4:89:fd:ed:cc:
23:0e:5e:88:2f:29:9b:f8:50:83:0b:f4:67:5b:aa:38:cd:36:
cb:89:b0:da:af:f4:fb:76:c7:3b:18:4d:33:e0:7c:c7:64:48:
6a:09:74:15:46:51:a4:a8:c7:9d:6a:0a:7c:6e:f7:6f:d2:52:
6c:9e:0b:69:a6:80:81:38:29:3c:64:33:45:f4:56:10:25:e7:
8c:f0:5b:76:a9:70:9b:2f:bf:b0:64:36:b9:93:fb:d3:fa:fe:
4a:31:84:f8:62:4f:1e:09:c4:64:83:2d:03:d1:bf:0b:46:73:
73:b0:0b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:39 2026 by rpki-client