Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: z/lrcj8DtLJH9uBF9xs5hoAEg/YbQHgpxERLTALCiHE=
Subject key identifier: 30:32:29:D9:59:B0:95:0D:CD:8B:B8:FF:1F:1C:21:88:AD:4E:57:BE
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 019D11577BAA51942E7330F59ED3D97D79D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0A60
Signing time: Sat 21 Mar 2026 17:00:39 +0000
Manifest this update: Sat 21 Mar 2026 17:00:39 +0000
Manifest next update: Sun 22 Mar 2026 17:00:39 +0000
Files and hashes: 1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: CXLuWxp99fBfGF6PVVaaZXxUr2v1Jl8leLl5F7pR8/A=)
3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:11:57:7b:aa:51:94:2e:73:30:f5:9e:d3:d9:7d:79:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Mar 21 17:00:39 2026 GMT
Not After : Mar 22 17:00:39 2026 GMT
Subject: CN=303229d959b0950dcd8bb8ff1f1c2188ad4e57be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:a9:dd:a7:79:33:44:00:3c:66:6d:b8:11:
a3:d5:6f:3b:8b:a8:89:72:98:2a:f0:6b:c4:ae:c9:
33:0b:b2:d8:79:1b:66:a3:c4:80:84:8f:06:aa:a3:
ee:e2:5e:44:3c:da:c2:a0:5f:f7:6d:cc:d3:38:49:
87:13:1d:d2:95:a8:70:a9:6e:2b:a8:25:ef:5e:21:
f6:96:ec:a2:94:11:5c:7a:08:fb:44:eb:99:e3:fa:
92:78:2b:ce:66:c6:ae:d9:7e:e3:f4:8f:5b:95:e3:
40:8c:c8:fe:e5:44:ca:19:6d:c1:da:f1:7a:99:b1:
ff:10:79:b4:92:d8:94:2b:bc:f3:86:40:b0:29:20:
72:b6:9a:4a:4c:8b:b0:ad:71:6e:1d:fd:f8:dc:d5:
70:1a:ea:36:3b:64:d6:7c:ee:83:30:84:c6:8b:44:
c3:c6:52:63:07:c7:65:d7:25:87:c8:ba:9f:d8:0b:
a3:fd:b0:76:e1:2b:1b:e7:75:84:5c:f7:dd:e1:61:
f0:a0:8e:ce:c6:fc:71:01:5d:e4:97:85:82:18:eb:
22:24:ba:87:da:c5:06:ed:21:26:54:5f:5c:4c:f6:
63:5d:61:44:2b:b6:96:97:eb:48:8f:ca:c3:66:83:
8c:b9:95:f0:04:6f:b9:a3:09:28:1a:d9:db:fb:06:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:32:29:D9:59:B0:95:0D:CD:8B:B8:FF:1F:1C:21:88:AD:4E:57:BE
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:07:87:12:5e:c9:e4:37:78:8a:fc:ff:7a:ec:d3:ac:6b:b4:
ed:b3:05:f3:76:fc:27:43:aa:b3:2b:55:0d:f9:f3:cc:15:15:
e2:fc:0f:8a:54:98:3e:7a:ff:4e:89:01:a9:b9:74:46:d1:2c:
fb:97:b1:54:fb:28:97:5a:a3:81:b8:f0:71:a0:eb:c5:37:51:
52:85:a4:07:4e:e0:1c:09:03:4c:19:25:11:5d:b3:76:1d:6f:
47:ae:c2:1a:a8:df:6b:43:e4:cd:bc:11:51:b2:2b:29:ce:f0:
1a:d6:07:86:68:5f:38:52:e1:88:f4:2c:84:b0:22:4b:81:c1:
f8:25:a6:9a:3e:69:3e:e1:e9:ff:42:f7:3d:02:c8:c5:a6:ff:
2b:75:61:f6:3e:25:cd:9b:0c:a9:ff:ff:7e:08:a1:5d:7e:23:
b6:f8:e6:09:fd:98:9e:c8:d6:20:bd:2c:0b:78:8f:d2:6b:8e:
56:d7:ad:31:a8:ce:e9:09:05:55:29:e6:9f:1d:46:d1:d5:83:
4b:5a:1f:f1:8a:e1:4a:df:15:d4:3f:9a:f0:1d:df:65:1e:c7:
e9:a4:7c:da:76:9c:a2:01:7b:f1:13:af:9e:7b:57:fb:14:e0:
76:0c:14:af:cb:e3:51:c0:77:eb:a4:19:fc:00:85:23:34:de:
1e:16:0d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:27:10 2026 by rpki-client