Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
File: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft (raw, json)
Hash identifier: U6jMGI4kS6jrXPdAKXXcm8OHFJ3iANTxreqhOjNfN2Y=
Subject key identifier: 35:19:C5:75:C4:75:66:A9:4F:B8:B8:83:CA:25:C6:2F:4C:62:18:52
Authority key identifier: 19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4
Certificate issuer: /CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
Certificate serial: 019D37C069713DB34C045813FA50A7A408DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
Manifest number: 0CD8
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl (hash: sTwpbvlDakx7UwBxXpkmAAnrcD2POO+vRVpGQ8+7eDk=)
2: SnBUF-l7sU2GN1xYWmkSVmuspLE.roa (hash: NWqfON704hEJ6MRTsiaDYlhowGx3tqMVvkRiS8+G1qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:69:71:3d:b3:4c:04:58:13:fa:50:a7:a4:08:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=3519c575c47566a94fb8b883ca25c62f4c621852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:9a:ea:6a:bd:10:c0:17:b9:24:6b:59:95:
73:b5:40:64:ac:a3:e6:f4:67:1d:3e:b6:4d:c9:55:
62:b9:9b:09:2a:24:38:03:39:b1:37:07:cb:15:14:
b1:e3:4c:ed:12:cd:1a:a3:49:f6:78:84:a4:71:29:
42:6d:e9:22:91:89:bf:cd:8d:32:c4:6d:5e:f0:c2:
97:25:21:7f:79:1e:2a:a5:75:5d:92:9f:3f:88:ed:
8a:14:5d:e4:bb:55:8d:16:c5:9d:02:49:25:37:0c:
f4:e5:85:a0:c7:73:1e:e7:50:e4:46:62:64:9e:59:
bd:1b:f9:e9:44:e3:ec:b5:2d:07:79:7b:29:2c:e3:
59:5c:df:e7:67:8e:41:68:47:ab:f1:5b:f0:de:5d:
d6:cc:65:70:2f:76:aa:fd:da:90:c0:a4:1a:ae:3c:
92:91:d0:16:db:64:6b:56:14:cf:05:7e:81:3c:a7:
5f:20:db:1b:33:23:12:ab:6a:a1:56:1b:52:24:72:
e9:d1:d2:93:5d:f6:16:59:f6:df:e6:5f:cc:f9:8b:
ea:0a:41:22:5d:4d:b7:4e:ee:a6:eb:be:dd:0f:fa:
13:6a:91:2b:07:cb:61:85:05:d2:b0:83:95:cd:0f:
2f:34:0c:fd:e7:8d:2c:de:73:b3:ab:2c:db:52:df:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:19:C5:75:C4:75:66:A9:4F:B8:B8:83:CA:25:C6:2F:4C:62:18:52
X509v3 Authority Key Identifier:
keyid:19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:82:27:db:36:ef:57:db:f8:4f:81:68:c6:ad:b1:bc:8e:f5:
0b:7d:b4:7f:a7:90:0e:9e:46:72:0c:86:be:0f:d0:bf:14:5e:
fa:33:f3:45:c7:87:e0:49:92:cc:09:af:6b:e5:10:bf:5c:84:
3b:41:1d:b2:74:8e:7c:86:1f:50:fc:f2:62:bc:4d:f0:ea:a1:
2a:12:f3:ce:6b:a1:44:ea:08:f7:a9:33:52:06:77:f3:00:7c:
eb:2c:d5:73:1f:70:49:09:22:04:55:6e:07:77:7e:78:53:f7:
91:54:a4:d1:c4:a3:71:5d:88:20:66:d9:e3:84:d6:f3:ce:25:
f1:62:5c:b9:15:cd:93:88:d4:e7:fd:2b:34:e9:2c:c0:e3:27:
54:c5:6e:c9:9b:f4:3e:4e:cf:a4:dc:17:39:8a:86:2b:56:e8:
c6:96:c4:e8:7c:de:c7:55:fe:f0:d5:90:2c:0d:8e:33:85:7c:
a9:32:c7:fe:58:02:67:08:da:fc:64:d4:01:6d:e0:9f:72:fa:
6b:ba:f8:e4:27:de:1a:01:52:c5:2f:2e:fe:e1:e7:f7:9c:42:
eb:98:3d:8c:68:1f:f2:a7:4a:aa:10:7e:1c:28:0d:2b:68:bf:
61:46:0f:77:80:7d:66:22:8f:d4:e0:ee:88:ab:d4:09:cc:ae:
1e:8c:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:55 2026 by rpki-client