Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: Cuwo7H2ARB/Iipdpxu2muPcgW+XsXKBJTn2VxIQvrsw=
Subject key identifier: 97:EF:49:9B:05:02:9D:04:25:43:34:03:5D:19:09:A4:91:AC:0B:B0
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 019D2EBD39D6DF6817A8277AEB84E6AEFAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 189F
Signing time: Fri 27 Mar 2026 10:00:46 +0000
Manifest this update: Fri 27 Mar 2026 10:00:46 +0000
Manifest next update: Sat 28 Mar 2026 10:00:46 +0000
Files and hashes: 1: BCTCosehzN-IVujDky1DFPEPdk8.roa (hash: dD51Omff3fmTkuQoAW0zLyIe0HD79k7wegGUmnwdJ5U=)
2: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: fQ/IBV5IpizxyC2Goo0PmE7zxiTc68XAx5WpQXBPYlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:bd:39:d6:df:68:17:a8:27:7a:eb:84:e6:ae:fa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Mar 27 10:00:46 2026 GMT
Not After : Mar 28 10:00:46 2026 GMT
Subject: CN=97ef499b05029d04254334035d1909a491ac0bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:3a:28:19:d2:bc:b1:73:cd:96:d5:f9:57:
49:f7:9f:ce:32:2b:27:24:9c:0d:25:91:da:a5:79:
b3:00:a1:cc:ee:06:94:f2:53:d3:29:7f:5e:63:44:
9b:61:7e:e8:6c:cd:e8:ee:be:62:90:53:bf:77:af:
9f:c2:cd:90:96:20:6f:aa:0a:d0:21:bd:ee:57:55:
9d:17:6b:62:9b:03:f4:ac:7c:39:87:e1:da:b9:08:
5b:f9:5f:37:11:40:7e:67:34:6d:cd:4e:dd:f3:4c:
f5:75:ea:83:05:14:25:53:d0:2f:c2:bf:a2:77:e4:
a7:e4:12:24:9e:50:44:7f:51:43:2e:c9:21:b6:8d:
b3:55:76:18:89:40:f1:19:4b:55:2b:bd:61:6c:8b:
38:c8:5c:c0:0c:84:b0:3c:d2:65:b2:a3:9b:2d:88:
64:4d:7b:c3:15:37:a2:f3:af:bb:79:cb:df:9f:28:
97:0e:af:2a:b8:68:f0:7a:43:cb:60:8a:25:0b:86:
bc:93:90:f5:dd:92:75:7b:fb:83:84:8d:d3:c5:28:
d4:16:ee:6a:41:16:12:d0:a6:3d:5b:84:35:1c:0d:
46:8d:d2:1a:b5:76:12:e5:5e:bd:3c:96:1a:c8:0e:
f1:58:e0:e3:72:65:c9:46:01:23:22:2f:ec:1b:62:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EF:49:9B:05:02:9D:04:25:43:34:03:5D:19:09:A4:91:AC:0B:B0
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:95:6e:22:56:06:82:c9:b2:19:22:19:54:5c:5f:81:6b:8c:
86:e2:c6:6a:47:d6:d1:2d:26:bb:fc:02:ba:73:5b:c7:03:1e:
ce:53:f0:f9:98:f5:08:5d:1c:51:eb:7c:4c:8b:70:e7:a3:85:
5f:ee:ad:02:b0:47:3b:dc:c5:85:61:05:2f:4d:b3:af:69:ea:
1d:b5:c3:ad:93:63:e8:c4:5d:b4:3f:db:04:a7:e3:bb:83:de:
5d:0a:47:fb:85:59:d4:32:c5:bb:13:84:b0:b1:be:cf:f0:9e:
03:62:b3:ee:53:7b:59:c6:30:e4:cc:c0:16:4e:22:31:0e:3a:
ca:92:31:e1:8e:79:8d:c0:7e:d3:3b:26:4c:49:66:83:04:64:
1a:cb:48:d2:35:be:d6:8f:e4:33:c0:fb:e5:1f:e3:77:f0:13:
4d:d5:da:82:50:d6:77:89:82:cc:c8:3e:92:0c:13:4a:00:52:
75:b4:c1:a1:f8:75:f3:03:07:dd:a3:af:4f:1e:1d:a9:eb:3f:
4b:ff:8a:8c:fd:5f:8b:d4:c3:12:6d:24:fc:df:6d:62:2b:7e:
f5:d1:5f:46:6e:8a:22:36:0a:19:41:0b:1f:37:48:2f:64:c2:
1d:b2:e0:4f:4f:24:a5:82:e3:25:4f:5f:b2:e2:f6:20:a7:d8:
27:b0:e2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 17:54:42 2026 by rpki-client