Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier: wFkAa44R2oPluUNT+NP0bXtyZOJadOixr9D+TO86we0=
Subject key identifier: 41:CC:97:7C:FE:BE:D4:5A:55:7A:D6:72:9A:72:60:0D:5B:E3:F3:46
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 019D382E7056B7DEA594E911D163A8ACD552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: 8jxEfSsMBe-K4VvTnO-OwvOLMBM.roa (hash: 3hU9n5i+lk1nxy24FsPYr0quzMoUlf0Ht4DETZ7ST+s=)
2: TLlV6jW863bNfhyrt15RgS7DF4k.roa (hash: kGMIhvDQxFzFfEL8ihPcdM+a2HFqV1ObKxrxWA65PvA=)
3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: AbMedHl9hbDihfSHYUlBOnmP9Sd+dWM/9N//LZW7L0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:70:56:b7:de:a5:94:e9:11:d1:63:a8:ac:d5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=41cc977cfebed45a557ad6729a72600d5be3f346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:1b:e8:90:86:a5:2a:40:23:32:92:a5:e7:
50:be:a9:5f:35:1b:f7:a2:d7:c2:76:10:8f:24:96:
e3:45:46:f9:0c:01:5e:61:92:c6:af:88:4a:ec:4a:
29:2d:f3:79:3d:fd:80:fa:76:c6:55:72:30:a9:34:
f8:86:54:f8:3b:dd:57:b6:99:71:b9:b8:9d:a8:c5:
ba:43:7b:c8:6b:dc:3a:22:18:a8:1a:e5:9f:a6:52:
bd:ea:f2:98:5f:c0:6e:94:a0:cd:f6:16:1f:47:47:
67:26:68:f3:4e:49:fd:fd:b3:77:8e:a6:1f:1d:3b:
2f:39:74:df:3a:42:60:18:50:8c:69:bc:84:58:98:
f4:bc:74:ed:2d:43:c6:10:a6:17:f9:d5:a1:c9:7d:
5b:d1:41:0f:73:c8:a7:ef:01:3d:f3:3b:21:0c:c9:
8b:ab:9f:b9:1d:ff:38:a7:2c:81:31:48:1c:ea:8f:
92:6a:8d:7a:89:5b:83:70:20:f6:52:75:66:49:f6:
9a:5c:42:0e:f2:1e:81:96:78:ec:2d:b5:5d:aa:18:
4c:0b:73:22:8d:7d:2d:e7:d6:ec:05:28:3a:4d:bd:
7b:65:5b:5f:20:74:85:88:c3:24:df:42:50:0a:30:
bf:d6:77:24:56:9c:3f:66:79:71:e4:b2:d2:0b:74:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CC:97:7C:FE:BE:D4:5A:55:7A:D6:72:9A:72:60:0D:5B:E3:F3:46
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:48:db:17:65:98:10:c6:a2:2b:88:28:15:43:f7:60:fb:09:
52:77:0d:2a:8b:c3:de:e5:7d:3f:a0:78:f4:f5:59:f6:63:0a:
b0:cf:b2:6d:10:2b:0c:1d:f8:85:2a:d0:01:d1:58:72:23:52:
17:71:ce:52:80:41:3d:a4:fc:63:5c:39:9e:a4:ad:32:ce:ea:
f4:4f:bd:d1:02:e6:7d:a0:e4:b1:53:68:61:2a:fb:98:cc:ed:
bd:ac:5e:7c:43:eb:9e:3f:6a:9b:db:2b:6c:49:72:60:db:d2:
63:e9:6c:8b:86:48:fb:f5:c6:76:c1:2a:90:04:1a:37:f1:34:
ca:61:91:30:0d:59:9b:95:cb:89:ac:ab:18:ee:32:cb:34:5b:
c8:af:80:63:14:bb:91:c6:93:8a:91:f4:49:3c:c2:37:ab:a9:
de:5a:de:2b:c4:69:ab:8f:93:37:14:94:b9:9a:56:19:6c:01:
91:7e:da:a7:23:7e:af:89:a0:0a:50:dc:aa:ca:40:d0:53:44:
6e:15:ad:73:67:67:0e:2e:a6:d4:f9:1f:cf:8a:17:3b:25:1a:
f5:44:75:0b:c1:ed:07:42:aa:ec:80:03:5d:c8:df:ee:d1:5f:
be:2a:ef:02:bc:43:db:b2:ad:7d:b9:fc:5e:24:f2:58:ab:38:
b9:29:13:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LnBWt96llOkR0WOorNVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjlkOWZmZTA0OGE3MDAwM2YxNmYwNmUyNGQ5YmYyZGI4
NWViNTIwHhcNMjYwMzI5MDYwMTAwWhcNMjYwMzMwMDYwMTAwWjAzMTEwLwYDVQQD
Eyg0MWNjOTc3Y2ZlYmVkNDVhNTU3YWQ2NzI5YTcyNjAwZDViZTNmMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9Qb6JCGpSpAIzKSpedQvqlfNRv3
otfCdhCPJJbjRUb5DAFeYZLGr4hK7EopLfN5Pf2A+nbGVXIwqTT4hlT4O91Xtplx
ubidqMW6Q3vIa9w6IhioGuWfplK96vKYX8BulKDN9hYfR0dnJmjzTkn9/bN3jqYf
HTsvOXTfOkJgGFCMabyEWJj0vHTtLUPGEKYX+dWhyX1b0UEPc8in7wE98zshDMmL
q5+5Hf84pyyBMUgc6o+Sao16iVuDcCD2UnVmSfaaXEIO8h6BlnjsLbVdqhhMC3Mi
jX0t59bsBSg6Tb17ZVtfIHSFiMMk30JQCjC/1nckVpw/Znlx5LLSC3SC8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHMl3z+vtRaVXrWcppyYA1b4/NGMB8GA1UdIwQY
MBaAFIBp2f/gSKcAA/FvBuJNm/LbhetSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWIt
ZTAyMmUzMDA5YTcxLzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWItZTAyMmUzMDA5YTcx
LzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0jbF2WY
EMaiK4goFUP3YPsJUncNKovD3uV9P6B49PVZ9mMKsM+ybRArDB34hSrQAdFYciNS
F3HOUoBBPaT8Y1w5nqStMs7q9E+90QLmfaDksVNoYSr7mMztvaxefEPrnj9qm9sr
bElyYNvSY+lsi4ZI+/XGdsEqkAQaN/E0ymGRMA1Zm5XLiayrGO4yyzRbyK+AYxS7
kcaTipH0STzCN6up3lreK8Rpq4+TNxSUuZpWGWwBkX7apyN+r4mgClDcqspA0FNE
bhWtc2dnDi6m1Pkfz4oXOyUa9UR1C8HtB0Kq7IADXcjf7tFfvirvArxD27Ktfbn8
XiTyWKs4uSkTjQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:30 2026 by rpki-client