Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
File: GyceKuYih3VSuJ28R016EwWEpI4.mft (raw, json)
Hash identifier: LEW2Z6rPBolx/VdJ6b6uZu4jhRtrGQa8a0MmDbownTw=
Subject key identifier: 1D:B9:38:BD:24:D0:DE:C6:8A:E8:B4:FB:A0:1E:74:6E:C7:9F:BB:0A
Authority key identifier: 1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E
Certificate issuer: /CN=1b271e2ae622877552b89dbc474d7a130584a48e
Certificate serial: 019D27DF95E46EF57EEA1194C21340A537CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
Manifest number: 0C93
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: GyceKuYih3VSuJ28R016EwWEpI4.crl (hash: J3xGYetrHtQsxp3DNrhmbJJn3EF5VvqoLuXJrP4JryE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:95:e4:6e:f5:7e:ea:11:94:c2:13:40:a5:37:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b271e2ae622877552b89dbc474d7a130584a48e
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=1db938bd24d0dec68ae8b4fba01e746ec79fbb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:4f:92:3d:f1:fc:ae:fc:fe:28:88:a1:9c:
1e:ed:8c:e2:d5:76:8c:ab:64:41:1a:72:3f:c4:ee:
48:ca:b0:4b:aa:17:84:e7:dc:a4:c6:58:3e:d5:8d:
6b:d8:91:63:59:6b:d1:a5:e7:04:52:df:be:4c:1d:
3c:07:13:15:0c:d9:44:f2:74:50:c5:f9:6c:0b:ff:
35:08:84:e2:2d:37:48:dc:99:7f:db:3e:1a:51:07:
6b:b1:fe:2b:7e:d1:5b:5f:ba:cc:fb:45:3b:e1:e2:
69:27:6c:b1:19:93:b7:08:de:23:42:c5:c8:c1:38:
d6:61:68:fe:e4:ef:e9:bd:19:3d:0f:f1:f3:d1:9b:
b2:00:64:3f:3b:1c:a5:cf:2f:c9:e2:c5:ce:5e:3d:
5d:7b:52:bf:61:4d:42:76:10:0b:be:be:d7:b9:6e:
d1:45:9c:14:a4:07:ce:ee:aa:20:1e:04:49:f4:71:
c1:e9:02:8f:bb:67:6b:6f:8d:ad:24:14:ae:b3:cf:
3c:0a:15:e3:2e:61:cb:29:4a:7e:ab:3d:3d:1c:54:
bd:38:5f:fc:af:9b:98:ad:ba:95:55:01:4e:a1:87:
02:13:fd:7b:c6:2b:ad:72:43:0d:60:c8:74:85:fc:
fc:92:04:51:41:aa:cf:6f:4b:cf:f6:03:00:47:4e:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B9:38:BD:24:D0:DE:C6:8A:E8:B4:FB:A0:1E:74:6E:C7:9F:BB:0A
X509v3 Authority Key Identifier:
keyid:1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b9:0d:c6:b4:ae:08:36:70:a2:46:60:0c:f7:83:38:2b:42:
42:94:1e:8b:7a:5b:3c:75:48:d0:fa:57:fc:aa:6d:12:8f:ca:
de:c6:9b:0d:a1:11:63:23:7b:fc:8e:2d:29:6b:49:46:d0:79:
8c:75:73:51:54:9c:00:9f:2b:93:18:57:46:c3:f7:77:ee:ce:
b6:ad:f1:38:cb:ee:df:d7:28:c1:e5:8c:4b:56:aa:4e:00:4b:
1c:d2:86:9a:6c:e8:a7:55:eb:90:21:dd:24:e5:46:e5:fa:78:
05:4a:35:39:ca:73:87:18:ea:a2:5a:e6:68:03:4a:9c:32:5c:
e5:34:e5:59:f3:ea:49:cd:43:6d:64:b5:69:c6:b9:0a:61:20:
21:50:5d:8c:81:cb:f3:d7:8b:3a:8f:3b:e6:a3:ac:fb:4d:d0:
5a:41:06:29:ba:0a:d3:74:b5:ad:00:8f:95:e7:cd:4e:ba:fd:
47:48:7d:37:49:88:8f:34:ee:90:83:e2:7e:a3:ca:2c:31:b3:
83:8f:0f:55:ee:0f:af:e9:63:24:5f:b3:30:ce:dc:7d:d1:21:
a6:03:33:5a:9d:9f:a2:b3:13:92:b3:b5:b3:34:77:54:93:fb:
f6:72:31:f0:ea:55:f9:75:5e:90:a9:3e:67:82:20:a7:cf:c0:
f5:e9:a7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:33:07 2026 by rpki-client