Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: Wmm8crgyKQjo5WczrMkN49hgh6+CiUPm3/jo2l5uQ+U=
Subject key identifier: 8B:AA:C0:64:EE:B4:47:FE:E9:B0:55:94:EE:81:E3:1C:DF:B8:9C:CB
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 019D38D3AD0837203109956A5AD6FC83788E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:29 +0000
Manifest this update: Sun 29 Mar 2026 09:01:29 +0000
Manifest next update: Mon 30 Mar 2026 09:01:29 +0000
Files and hashes: 1: 84Vy4QZqvQZUIRmhoX03xS6PmHg.asa (hash: mu6fp0Fipel740MCIXuJN9FB1rFnZw35tGJ95/rLm3o=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: 7aGvuZMdHApHTy4yb3zEZF/6xYGVK9GMQJaJxw8Nxjw=)
3: zfQjLRUyouMoxd3eQ6QBiqQWAMo.roa (hash: fytzxgaA8VilTty70xA4ueAmIkMerr/peaUGm58YXCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ad:08:37:20:31:09:95:6a:5a:d6:fc:83:78:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Mar 29 09:01:29 2026 GMT
Not After : Mar 30 09:01:29 2026 GMT
Subject: CN=8baac064eeb447fee9b05594ee81e31cdfb89ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:53:b0:58:b4:96:9e:c5:4f:9c:21:96:71:
aa:d5:a2:3a:b0:29:d5:4a:55:e1:16:d1:98:ef:6b:
8a:f8:19:36:92:0f:55:19:47:d0:9f:05:48:de:ed:
08:26:44:c1:17:f7:a6:61:b3:34:24:56:17:3a:88:
99:ac:db:ab:e6:4e:a2:6a:ff:90:d6:92:21:a5:0f:
d6:e6:ea:20:b2:3c:29:c9:ad:09:aa:59:7a:9d:32:
dc:ee:43:cd:09:9a:9f:08:9a:39:39:05:8f:34:1a:
b1:29:4b:fd:3b:4e:8e:c1:a2:cc:64:1b:9c:2a:8b:
74:97:73:43:24:a4:5f:02:f1:ac:97:ad:e3:f1:dc:
b7:8e:30:03:48:3a:c8:d0:7f:3e:05:38:5d:1b:6e:
ff:28:f2:90:a8:65:8e:f9:11:6b:35:7a:76:16:f4:
78:cd:97:bd:01:21:f1:38:4e:a2:e1:2a:93:d8:4a:
45:b0:87:33:88:c4:38:ee:5c:d4:2f:26:3d:3f:cb:
0d:a7:01:93:8f:e2:99:f0:3f:27:0f:66:0d:7c:4a:
fb:1e:62:7c:39:6d:10:a4:a5:c6:3f:90:76:31:bb:
95:12:70:31:fd:3a:3c:f8:9d:d5:fd:25:47:be:71:
e7:d0:14:f5:b5:14:db:7f:f0:0a:b2:3c:f8:ae:bf:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AA:C0:64:EE:B4:47:FE:E9:B0:55:94:EE:81:E3:1C:DF:B8:9C:CB
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1d:7a:64:bd:09:19:c7:04:09:e8:fa:63:88:c9:d3:be:06:
15:61:4c:aa:99:0b:b3:85:0f:e9:b2:d6:6f:59:f5:94:10:d3:
8c:fc:1c:88:45:04:e7:fe:ac:cd:c0:29:6c:05:c5:e5:45:55:
37:ef:27:f8:6f:49:11:b7:98:d7:db:fa:5e:bc:bc:86:77:f6:
84:de:28:de:fa:b4:d6:96:31:a3:a1:c3:a3:2c:1d:84:25:b1:
80:fa:2c:b9:7f:8e:da:8a:19:f7:dc:63:60:5e:7d:6b:28:5b:
86:50:36:e4:31:59:50:52:04:41:51:df:bc:93:9e:46:8f:0c:
e8:c8:a0:85:ce:55:f5:c2:71:1d:4d:d8:a1:34:c3:2e:c0:62:
ed:18:f5:59:0d:39:20:b0:c3:26:c1:78:ab:d4:2d:3d:70:9a:
a3:ac:93:3b:16:2c:2f:61:35:b2:0c:81:96:14:b2:a8:bb:38:
6e:eb:a9:0f:5e:a0:8e:71:81:5e:5d:1e:3f:58:1d:21:36:c1:
0c:e8:dc:5b:c5:61:a5:2e:79:bd:96:14:f3:c8:5e:fd:10:46:
e0:05:00:5e:a1:03:83:cc:7a:ba:8e:fb:2b:ac:c9:90:53:61:
5b:84:8a:8e:a2:35:e6:02:83:e0:23:c7:b5:f7:8d:f7:d4:7f:
b1:03:b1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:36 2026 by rpki-client