Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
File: GAIUWTANFfrFUHBc9uJYmZ09hro.mft (raw, json)
Hash identifier: qh4HTv3ueYJENr7Ou7y6Cg530Y2fH3sANfgKpPIkco4=
Subject key identifier: 24:B4:43:04:3B:88:0A:CF:81:13:2B:94:AD:13:C7:96:31:47:39:04
Authority key identifier: 18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
Certificate issuer: /CN=18021459300d15fac550705cf6e258999d3d86ba
Certificate serial: 019D284E0F53937F4FF8F77D0F1E96853A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
Manifest number: 0D69
Signing time: Thu 26 Mar 2026 04:01:37 +0000
Manifest this update: Thu 26 Mar 2026 04:01:37 +0000
Manifest next update: Fri 27 Mar 2026 04:01:37 +0000
Files and hashes: 1: GAIUWTANFfrFUHBc9uJYmZ09hro.crl (hash: 7DWUuuJHtnp2AFY/IPH3/fmNcKcYX8ws+RrM2m8oZiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:0f:53:93:7f:4f:f8:f7:7d:0f:1e:96:85:3a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18021459300d15fac550705cf6e258999d3d86ba
Validity
Not Before: Mar 26 04:01:37 2026 GMT
Not After : Mar 27 04:01:37 2026 GMT
Subject: CN=24b443043b880acf81132b94ad13c79631473904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:99:54:dc:9d:a4:f4:9b:2f:7b:e0:2b:ef:
f4:ab:79:3e:34:1c:24:08:bb:26:36:70:3c:73:b1:
3d:fc:78:3a:92:3d:41:11:cb:7a:6e:f0:c8:f0:42:
38:55:31:e5:71:8c:29:98:5c:22:b8:5a:04:95:60:
c5:41:6a:e2:01:70:e7:0c:8b:f4:5e:75:a1:09:91:
5e:5b:fe:ca:f6:51:49:b8:e2:c5:be:d6:aa:51:95:
02:01:09:2f:d1:af:7a:c3:96:d5:5b:7b:81:06:ca:
84:4e:de:05:57:b2:33:67:0e:a3:c9:8c:15:48:a7:
fb:d1:e4:ff:94:b2:a9:a4:7e:6a:11:07:b4:e7:f8:
ba:1a:b2:ed:9f:6f:d6:3e:45:b5:7c:77:90:0e:4a:
88:f9:f0:91:28:78:e3:41:2e:ec:0f:9d:00:e7:77:
63:f8:fd:2c:be:3a:98:21:c5:de:bd:c4:26:de:68:
b1:5e:f1:b4:7d:12:8d:3c:62:38:e3:26:95:f3:af:
19:cf:4d:fe:f3:42:1d:93:c8:6d:ae:a6:69:4b:2c:
c2:48:a5:77:3b:4f:f9:f1:d5:6b:38:98:7f:fd:55:
eb:01:ff:4d:92:dc:d1:91:a3:54:36:20:70:78:00:
55:24:42:b4:3c:3d:c5:31:78:1f:3d:f4:cf:1a:65:
f9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B4:43:04:3B:88:0A:CF:81:13:2B:94:AD:13:C7:96:31:47:39:04
X509v3 Authority Key Identifier:
keyid:18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:80:d5:5d:3e:57:7d:11:f3:86:bc:f4:29:96:9a:eb:13:3f:
28:5f:4e:2f:43:fd:52:a3:ac:e6:90:72:49:da:fa:28:9c:0f:
3f:b1:79:5a:d4:f2:02:2a:09:f1:96:9b:44:ba:e5:70:74:0c:
2d:22:05:2d:ce:66:ba:86:0a:79:95:99:c2:0b:2b:14:d4:c2:
40:df:e3:9e:ab:46:dd:3f:a4:15:92:1c:42:44:58:72:7c:99:
f9:01:68:e5:71:5e:22:5e:82:38:65:b3:ae:4d:79:80:13:a1:
87:eb:fb:c6:2d:0a:9e:97:a8:17:bd:42:d3:5c:a7:de:0a:ed:
0c:b5:1b:b6:9c:9c:39:bb:99:0f:f0:0a:8c:36:8d:03:35:5a:
c0:13:14:02:f2:64:8e:b5:c9:35:a6:f1:26:d1:4d:02:09:cc:
aa:e2:05:e8:7b:d0:10:1a:b9:ef:1f:0b:0a:74:39:34:82:d1:
39:bc:a0:80:52:c0:23:fe:9e:2a:cb:b6:58:82:3e:7c:02:0a:
c8:76:90:24:4c:6a:92:e8:a5:53:c0:69:1a:e6:6f:7b:89:8b:
d5:83:11:f6:0d:d3:e9:71:df:1f:e4:4d:2d:04:07:6c:eb:b0:
0e:c0:51:3e:3f:e4:df:51:bc:e1:77:4c:6c:1d:ef:d2:71:7c:
df:a9:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:22 2026 by rpki-client