Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
File: GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft (raw, json)
Hash identifier: UI7VBsN/7A0CP9XqMP3bNw3w6jsMsF+IeoI4canmvHg=
Subject key identifier: 6A:43:65:BE:87:0C:D8:20:77:72:4A:8F:67:D4:B3:54:80:33:9B:E0
Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
Certificate issuer: /CN=197fc930e4aa59b0303459f755698e8f998f471e
Certificate serial: 019D39AE5EB79C0FFFDF7988554AFA8AB23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 13:00:21 +0000
Manifest this update: Sun 29 Mar 2026 13:00:21 +0000
Manifest next update: Mon 30 Mar 2026 13:00:21 +0000
Files and hashes: 1: GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl (hash: mOU/H3E5zvveqCtRy0UoevOTJSY06NdOs6aY1FIf3Ys=)
2: Zxga6O5B6uWj5ovSd6ojGTRvTQk.roa (hash: B5IjyWOTGquDtIk33USdJO3jmFl66T5rjOlw+iwqVn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:5e:b7:9c:0f:ff:df:79:88:55:4a:fa:8a:b2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e
Validity
Not Before: Mar 29 13:00:21 2026 GMT
Not After : Mar 30 13:00:21 2026 GMT
Subject: CN=6a4365be870cd82077724a8f67d4b35480339be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:48:a3:20:f7:fa:57:5f:86:8f:bb:62:b6:
5f:a7:35:07:bf:b8:86:82:16:92:a8:bb:95:23:45:
8e:9d:db:1f:3f:f5:15:f7:bb:74:63:c8:32:b1:c3:
cd:92:bb:45:f4:26:31:cf:c9:fa:32:23:f4:77:59:
b8:e7:0d:c2:ee:a4:1a:bd:b4:74:bd:9c:f2:0d:89:
73:34:60:3d:5f:22:f6:e0:f9:98:a1:f4:19:dc:c1:
42:f8:9c:5f:54:05:5c:f8:02:8a:d5:35:f9:f0:43:
3e:ff:04:c7:35:ad:a6:0d:50:f2:e2:93:6b:12:4f:
c8:6a:5b:7a:35:d2:70:fd:f4:fd:b0:83:0c:d8:92:
d0:e3:84:03:4f:9f:ec:60:3a:af:1e:7d:e6:af:11:
77:2b:32:3b:fe:09:c8:09:31:a8:8d:d0:d8:1c:5a:
54:10:92:aa:d8:4b:ba:89:55:d9:58:89:1f:d3:29:
23:77:40:b4:9a:6e:15:be:1a:45:22:c9:41:fc:5a:
d3:24:2c:13:72:ba:03:19:36:11:34:8e:0c:bc:57:
3e:c5:84:be:3a:19:39:e0:e7:fd:4c:4c:4e:1e:fb:
87:93:52:0b:b5:6d:06:ef:6e:b8:18:8f:2c:e5:51:
53:fa:03:8a:55:19:7a:ad:1c:f4:42:c0:a0:6f:17:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:65:BE:87:0C:D8:20:77:72:4A:8F:67:D4:B3:54:80:33:9B:E0
X509v3 Authority Key Identifier:
keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5d:4d:9d:f1:65:01:d6:b7:4b:20:52:6d:dd:e3:9d:a8:e8:
cf:5a:04:0c:2c:38:09:f6:b5:a6:c2:d5:b7:83:0c:62:68:b4:
f2:e3:12:12:74:0a:11:34:43:a5:83:47:f0:3f:c0:58:45:2a:
aa:c3:7e:32:bd:2f:cc:86:4d:b0:99:76:6a:82:28:4f:ac:37:
37:7f:1e:de:20:f4:98:dc:30:a7:06:eb:c9:b5:b9:3a:bc:b8:
4f:73:95:9a:af:1e:fc:d0:c8:b3:8f:14:42:2c:55:f2:c8:40:
5d:b8:2b:32:17:07:b7:e6:3f:ad:ec:e1:0c:21:90:eb:17:2d:
4b:ce:99:7a:b8:63:54:c6:b6:d5:a0:35:35:6d:48:38:58:0d:
3b:12:60:f4:69:85:53:47:53:a2:bd:68:57:6c:f8:9f:5c:85:
44:98:20:8f:b4:fb:66:03:13:c0:34:75:7c:cf:38:bb:0e:07:
49:cc:d7:8e:37:51:63:83:10:bb:67:21:28:e9:17:bf:cb:71:
81:9a:c3:4f:1e:ec:23:35:95:32:02:48:bf:82:f4:71:13:b1:
0b:bd:1e:93:df:05:c9:31:8d:42:39:d6:cf:13:a0:e3:97:6a:
bb:7b:62:0b:f4:4b:8c:5c:a8:37:8d:03:ca:ad:1f:e3:0b:80:
a4:ae:b0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:10 2026 by rpki-client