Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File: GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier: CP+f8wDkLCF1lRQPU3jHep+ZqmZO3te1CzmJ5Er7ifQ=
Subject key identifier: 79:7F:16:C0:CE:79:48:BE:4F:BC:A0:2C:6F:32:9D:6A:67:57:D4:9C
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer: /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial: 019D3866139EAECE99E4646E84ECC3675A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 07:01:46 +0000
Manifest this update: Sun 29 Mar 2026 07:01:46 +0000
Manifest next update: Mon 30 Mar 2026 07:01:46 +0000
Files and hashes: 1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: P7sP5eIpGOmOAP05w2Af69C49dijCm64eWr9qm+WMHY=)
2: O1x05-HbZz9z_RAG_UsW8fq9KnQ.roa (hash: RqXyqzQCK+VpxYKPTIZPxW8p4AdlK8gMbx5a8aqVV1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:13:9e:ae:ce:99:e4:64:6e:84:ec:c3:67:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Validity
Not Before: Mar 29 07:01:46 2026 GMT
Not After : Mar 30 07:01:46 2026 GMT
Subject: CN=797f16c0ce7948be4fbca02c6f329d6a6757d49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:d3:a7:2a:60:2f:20:cc:94:b0:01:53:e1:
4c:32:b2:ad:91:96:c6:10:c9:7b:ce:d1:0c:a2:27:
4b:1d:cd:b3:f1:39:70:09:29:34:7a:7b:83:bf:b4:
ca:3f:33:1a:14:33:a3:9d:a8:00:f4:f2:bf:fd:00:
60:23:e6:b1:af:3b:8b:5d:48:dc:7b:0c:43:82:8e:
23:77:45:a3:28:ff:20:d7:66:2f:7c:0c:e7:f1:12:
fd:8a:cc:2f:b8:49:ac:46:92:8d:0f:ee:4d:a3:bf:
42:01:ba:23:82:00:cc:57:f3:df:2e:1f:38:c7:7a:
94:d7:b5:de:f9:9e:86:97:15:ba:03:f4:59:a1:d9:
00:14:57:98:aa:65:df:8b:93:51:50:59:d2:25:9b:
09:bd:17:d5:8b:13:45:76:b2:8c:2b:b5:a7:f9:6b:
e2:ba:fc:e8:ae:76:72:44:6f:aa:e0:4d:57:a2:20:
02:75:77:26:64:1d:57:27:f1:94:f6:8d:83:8c:ab:
0c:91:3a:9a:c0:22:56:94:02:7b:53:96:d3:0d:7f:
e0:a7:f2:16:e1:4a:7b:04:90:85:18:9d:74:ea:32:
65:ea:fb:10:b5:67:9e:c7:97:58:f8:b9:19:7b:74:
ce:b7:f2:82:df:f9:c0:7b:47:e1:90:34:de:70:43:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7F:16:C0:CE:79:48:BE:4F:BC:A0:2C:6F:32:9D:6A:67:57:D4:9C
X509v3 Authority Key Identifier:
keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:41:d1:a6:f3:73:37:75:85:18:d5:59:a9:27:b9:90:6e:52:
20:f8:75:f8:5f:59:16:c2:9d:0b:74:3a:b3:f2:a1:57:98:ec:
6d:a9:e2:43:da:de:9c:34:c1:6c:8a:d7:86:9f:e9:88:7b:68:
89:55:ce:2f:7c:16:dd:c5:ab:0d:c5:39:fb:c3:f2:a5:95:41:
42:32:4c:ec:30:7e:4c:6e:bd:25:aa:43:5f:6c:26:85:da:63:
f6:b6:30:2c:8e:e4:5b:79:fd:0f:b7:db:17:84:a6:3f:b1:0d:
94:e6:8e:bf:31:15:dd:2d:ef:87:70:16:d7:3e:d1:a6:40:d1:
9a:9f:fb:23:fd:ce:80:58:7a:0e:d7:12:dc:90:a5:4c:81:ca:
91:fe:4e:21:08:c8:9a:9d:91:9c:c6:b9:c3:30:d7:83:36:d0:
44:4e:d2:e4:14:65:ac:73:53:23:91:09:3d:73:85:f1:bb:e0:
6e:f6:78:20:8c:0d:ee:d0:50:75:0c:ba:ae:5e:03:e6:fb:95:
82:03:fe:59:be:02:9d:e6:68:84:b7:4e:d1:dc:9d:89:47:8e:
6b:d2:40:da:e7:d4:d1:4a:97:e5:98:68:34:8a:98:94:de:44:
c2:17:ee:58:e5:54:c9:d3:68:16:98:d2:a2:76:0e:fc:d1:4a:
99:80:46:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:09 2026 by rpki-client