Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: UwOi77wXtKiBHuegPqyseB7fyTjPk8lTcNo5sWcRkM4=
Subject key identifier: C0:96:73:E8:9A:D5:7F:C3:80:F3:96:DA:63:44:99:BC:29:5F:CB:30
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 019D38664E810A9358B006B79B939236DBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 096A
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (hash: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: dUB4ForD7elY8fDWBJt5kKFrvYcldTk0wfu8C1ciFLs=)
3: StgAPdXsLWXdyjwd0NgXnOpHgDM.roa (hash: CqI61wUJN0vtPYYBH79k6FeQKUdhcEdxzCN0wPzCxIY=)
4: XtW69XYWfcYs9FhfW77svXCHmQk.roa (hash: +2PiuVV/xd9FID0vQ4PS/1nWqfCBv4fOx6GV++A7pIo=)
5: xTvnABmzNdQ7rQ9kUoYbhsXZGao.roa (hash: epVzxBSblNKuTBQkW5kiwP+e9xI7OzToQE+spC6i0y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4e:81:0a:93:58:b0:06:b7:9b:93:92:36:db:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=c09673e89ad57fc380f396da634499bc295fcb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:82:96:80:6b:d1:a7:c9:2d:35:60:f2:33:
89:ac:f2:2b:a6:d8:ad:9b:31:66:6f:e0:e2:1b:f5:
1a:63:2a:bd:f5:06:80:24:95:bf:a4:ff:ac:71:8a:
83:2c:e4:dd:8f:6d:d9:cc:dc:d0:ca:dc:5d:40:bc:
bf:00:e3:25:27:15:5f:17:4c:e2:b2:14:35:50:18:
41:aa:43:3b:fa:76:f3:de:a1:e3:19:90:96:a2:a4:
4f:cf:22:1f:3e:42:55:04:11:61:04:fc:a1:fc:10:
25:4f:ce:47:6f:23:3a:f1:ba:e9:0d:ef:b3:9b:0d:
a0:19:2d:e4:0e:26:3f:4e:6e:0d:f9:df:d5:67:22:
e4:bc:df:a5:68:30:d4:91:a8:8c:1f:cc:fc:50:cc:
2d:db:7f:f9:73:e5:29:92:17:79:7e:0d:64:77:96:
21:15:fa:93:2b:99:a4:23:bd:2f:2a:f8:32:e0:a4:
00:72:7e:c9:48:e3:81:84:20:23:ac:d8:32:6d:2e:
b7:65:48:4e:e2:53:df:b2:ef:7f:90:39:d6:b1:98:
b5:99:97:3b:e3:7e:64:05:ee:5a:eb:5c:6b:fe:28:
88:e4:32:ef:8d:0d:68:0d:ec:33:f9:80:24:b6:4f:
ed:02:38:8e:38:53:34:23:5c:c9:c6:09:fe:42:b2:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:96:73:E8:9A:D5:7F:C3:80:F3:96:DA:63:44:99:BC:29:5F:CB:30
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ea:c2:e9:6c:08:0d:92:7a:a7:9c:e1:31:4a:3f:a5:e6:8f:
51:00:f0:bf:80:8a:87:20:64:25:8c:3a:35:7d:50:51:d0:05:
7a:99:df:8d:57:c0:e1:ed:d1:af:08:0b:d1:56:58:6f:fb:dc:
dd:01:c7:a1:0e:79:16:d5:47:43:ed:cf:76:ea:88:94:30:09:
a8:28:31:53:31:1b:fc:0c:83:87:5f:12:29:65:68:a1:1c:29:
6c:4f:74:03:c7:16:a2:91:96:15:16:69:95:43:44:b2:f2:df:
ea:8d:e5:4f:8e:81:85:49:db:e9:e5:0b:67:66:60:bf:f5:ec:
7b:b0:da:3c:af:a6:90:78:9e:19:08:36:bd:82:24:d1:e3:77:
54:6a:2d:ec:86:dc:0b:a2:f4:fa:d5:9c:da:37:40:b8:09:ba:
6b:1e:98:be:fc:fe:7b:31:2b:cb:a8:99:4c:bd:1b:3d:b0:37:
1f:45:79:9a:16:f5:6b:03:5a:6b:74:a3:0d:e6:37:5c:27:09:
05:48:9f:91:f5:91:f1:f0:da:ed:e6:77:6a:e1:34:10:c7:de:
50:f1:d4:a2:90:5f:0e:ff:7c:65:67:a1:46:ac:38:2b:15:53:
a4:96:4b:02:30:28:a7:44:90:00:a5:72:25:34:87:01:9e:ad:
f3:15:39:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:58 2026 by rpki-client