Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier: HjTrnGmBCPb3v4QXy6nubHEgjd85megA4OxrQeIQBN8=
Subject key identifier: F8:15:D9:0C:BE:F1:29:DE:06:F7:B6:F5:C3:0B:95:4F:F8:CD:C5:77
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer: /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial: 019CB76F2140000EBCC07D561EFD3794F6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number: 131A
Signing time: Wed 04 Mar 2026 06:00:39 +0000
Manifest this update: Wed 04 Mar 2026 06:00:39 +0000
Manifest next update: Thu 05 Mar 2026 06:00:39 +0000
Files and hashes: 1: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: k0KydK3Rb9FjgZF5XExFjuInEQEdr5ogySkVcGiA79E=)
2: VF3A5uqK3baTRWsNVPe20tVkhMU.roa (hash: oCRuLVCgV+aXZr+hRj4Ct4VJ7B5cjA1VYigwMKDagmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:6f:21:40:00:0e:bc:c0:7d:56:1e:fd:37:94:f6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Validity
Not Before: Mar 4 06:00:39 2026 GMT
Not After : Mar 5 06:00:39 2026 GMT
Subject: CN=f815d90cbef129de06f7b6f5c30b954ff8cdc577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:db:b3:3b:73:dc:11:7c:15:32:27:2b:1f:
20:3b:c0:b0:3c:9a:aa:e0:e8:c7:40:dc:a9:a9:57:
25:31:8b:fc:93:2d:02:a5:2c:95:dd:6d:05:9f:52:
83:b2:40:34:9c:56:34:ce:61:f2:90:41:e0:21:11:
70:35:39:21:03:e3:5b:0e:92:5e:9a:60:37:b0:27:
87:c0:63:60:1a:c5:b2:79:65:b2:37:33:40:0e:bb:
9b:41:29:81:57:19:ac:59:37:26:2b:a1:25:dd:fc:
66:e3:ad:99:19:0a:9b:11:e8:61:05:87:c1:a6:07:
a9:5f:d4:58:6f:a9:7a:c2:ef:45:d3:9a:4a:c6:77:
c7:2d:f6:c8:2a:63:88:94:73:eb:14:c2:ff:02:c8:
fb:30:1a:63:bc:f9:0b:02:16:a5:ba:33:51:d4:a2:
d1:6a:e2:c2:0e:85:12:00:c8:9d:05:53:2b:cc:81:
d5:c9:c4:07:b8:a7:67:d9:d0:20:4c:9c:fb:e1:85:
aa:75:44:6a:3f:57:60:96:72:c1:f6:4a:a8:6c:ca:
6b:59:3f:c0:de:42:be:de:00:3e:87:1b:16:a9:d1:
fb:c1:75:dd:2c:2f:09:d4:79:aa:11:ab:db:2c:83:
c2:9b:c7:c7:81:ef:ce:25:ba:9c:47:63:d7:43:4b:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:15:D9:0C:BE:F1:29:DE:06:F7:B6:F5:C3:0B:95:4F:F8:CD:C5:77
X509v3 Authority Key Identifier:
keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d3:70:36:54:ed:cc:e4:10:9d:8b:a0:b4:8d:4a:e4:08:e9:
60:0f:d7:62:aa:de:c9:f0:9c:8a:7d:17:a5:21:46:1a:cf:92:
03:d2:ae:36:13:48:15:ba:f1:fc:55:a5:ba:c3:15:2f:78:68:
05:a6:36:95:f1:b2:ac:06:b6:19:77:4e:c4:10:61:1e:51:60:
66:08:57:83:c3:47:32:1c:ad:3a:cb:33:21:bf:8b:b1:87:38:
3b:8d:b3:8d:3a:99:33:d6:b1:02:9b:bb:6a:39:7d:cf:07:11:
60:00:69:97:2c:40:18:d2:99:fb:ac:da:0e:7e:0d:17:12:41:
78:dc:0c:3a:9c:73:02:a3:30:b5:e6:0f:ed:8d:55:47:5b:44:
61:95:7b:e1:08:1f:25:4d:c5:e7:72:1e:c5:7c:43:aa:17:9f:
fd:63:1a:fb:4e:b3:ad:ca:19:8a:5a:db:bf:d9:a5:b7:8c:8b:
48:10:3b:29:9b:54:67:7a:53:d3:6b:5c:60:58:59:c1:5b:d0:
df:d3:86:1d:a7:5f:9a:97:ef:31:49:e4:a2:84:ec:9a:a7:87:
c8:00:b4:9a:2e:3d:b0:68:a7:35:70:ef:22:ad:1c:77:7d:ae:
4b:f8:0c:c7:b0:6d:16:c7:2a:86:13:ef:6f:91:e1:9c:07:41:
07:61:62:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 15:41:04 2026 by rpki-client