Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File: GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier: pFhYwwyZQfRkM6sOkpVQQ4GsSf24p9jgpoKjXozxaJw=
Subject key identifier: 72:60:9E:69:D0:BB:3A:A1:B7:95:6D:C8:1F:7B:F8:20:53:E8:38:58
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer: /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial: 019D389BC1820766E002B78D6D2FB8E7F1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: KaV4krQ8cZmE0/2u+es3ZxqXimhJmQZY7/te3ygtpys=)
2: i2X0mHk6bAtPNecvn2NA6zmZj9U.roa (hash: mQLU4VLoVcMKqVZZfsB2FdV3V92h7zVuv01+LCyktYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c1:82:07:66:e0:02:b7:8d:6d:2f:b8:e7:f1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=72609e69d0bb3aa1b7956dc81f7bf82053e83858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:9c:61:ea:ab:86:fc:f1:97:48:80:6a:2e:
a7:8b:9f:4f:65:9b:49:38:62:78:17:c7:fe:9d:df:
59:c6:29:79:0f:65:26:02:54:d6:0b:5e:90:64:c4:
1b:7a:eb:0f:c4:a5:30:a8:4a:10:f2:eb:fa:13:a7:
34:c1:7b:8b:22:7d:4c:7e:01:e1:8f:ac:15:9b:01:
e1:b9:db:20:b1:2a:e8:f8:83:ab:2f:54:3e:18:70:
4e:4b:88:2f:7a:dd:b0:a2:89:e5:0d:b2:35:79:bc:
32:67:e7:05:2e:65:a6:fc:81:2c:21:f5:85:e5:3a:
29:cb:24:b1:1d:3d:f3:5a:f2:d4:1e:b1:f3:51:c1:
c0:23:7e:57:a3:07:9c:3e:24:3f:19:9d:e0:71:3d:
e9:b2:c0:db:ec:d2:42:33:53:e1:a5:3a:13:36:c1:
8a:f1:ae:6d:ff:83:45:08:ee:d5:9d:f0:c6:dd:8e:
e0:6a:90:4d:57:1d:3d:b4:9d:8b:de:6f:20:b2:62:
4c:be:1c:0b:7f:2e:4d:22:41:04:ab:b9:ab:a8:f7:
5f:9c:57:d5:e1:b3:db:20:76:5c:f1:c9:9d:94:33:
8e:31:0f:ba:c2:84:c8:f4:be:e4:86:02:d7:50:94:
4d:c8:1a:fe:6b:65:de:57:d0:95:5d:bf:3f:ff:bb:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:60:9E:69:D0:BB:3A:A1:B7:95:6D:C8:1F:7B:F8:20:53:E8:38:58
X509v3 Authority Key Identifier:
keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:56:a4:84:aa:fa:5f:da:57:eb:12:85:62:b4:1f:21:e1:4a:
e1:cc:32:45:8b:a5:40:86:aa:fa:a5:33:4c:2b:20:21:31:5d:
81:d7:da:bd:cd:5b:82:6e:69:99:25:fa:0d:10:46:f4:f0:1c:
8e:94:67:51:63:f7:38:27:ec:f9:59:c9:8b:d5:a9:09:12:59:
6d:97:48:47:b0:df:c7:53:0b:d0:64:7c:c4:da:15:d6:1b:1a:
4e:18:51:5a:16:af:a0:64:3b:3e:8a:a0:6b:a3:75:a1:6a:f5:
f5:f7:c9:cf:3f:44:85:f0:01:84:06:c3:4a:a3:3e:e4:b3:12:
84:46:3c:81:7b:e9:b5:35:b8:83:d7:43:ac:9b:e2:eb:94:c4:
b5:82:ee:61:be:91:18:0e:6b:aa:4c:41:5d:6a:53:10:d6:97:
9c:bd:93:29:32:15:69:ac:fe:b9:b5:40:eb:ce:4f:2d:d4:00:
91:30:4e:ba:19:88:0a:6e:80:76:9e:2a:76:0a:d2:a4:d0:29:
c2:19:d9:91:6d:33:e8:05:37:9c:ef:4d:3c:3b:f4:2f:99:17:
fb:33:5d:6c:36:74:7d:6d:65:df:a0:f9:be:2f:6d:e7:f5:c2:
bb:8d:33:8e:e4:1b:1c:fd:a3:89:bd:16:34:6a:c0:9f:d5:30:
f1:ee:50:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:32 2026 by rpki-client