Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.mft
File: ggNj3xH_dJw6wmto69BzI1-sqCM.mft (raw, json)
Hash identifier: 6XZ4lctJIb0ZVeeTUk2nQBYSXD4VhuhLU8kXix1XBQg=
Subject key identifier: 2F:34:97:82:E3:F0:4C:2C:E8:A1:B6:D4:1B:34:16:11:EC:CE:0C:9F
Authority key identifier: 82:03:63:DF:11:FF:74:9C:3A:C2:6B:68:EB:D0:73:23:5F:AC:A8:23
Certificate issuer: /CN=820363df11ff749c3ac26b68ebd073235faca823
Certificate serial: 019D25836265FD5E68C194B6DB2942E5D287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggNj3xH_dJw6wmto69BzI1-sqCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.mft
Manifest number: 74
Signing time: Wed 25 Mar 2026 15:01:00 +0000
Manifest this update: Wed 25 Mar 2026 15:01:00 +0000
Manifest next update: Thu 26 Mar 2026 15:01:00 +0000
Files and hashes: 1: ggNj3xH_dJw6wmto69BzI1-sqCM.crl (hash: eQ0+jkkvIKRbOZ33v8kPBJqsErCaiCOTrB/+4QVY3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ggNj3xH_dJw6wmto69BzI1-sqCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:62:65:fd:5e:68:c1:94:b6:db:29:42:e5:d2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=820363df11ff749c3ac26b68ebd073235faca823
Validity
Not Before: Mar 25 15:01:00 2026 GMT
Not After : Mar 26 15:01:00 2026 GMT
Subject: CN=2f349782e3f04c2ce8a1b6d41b341611ecce0c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:65:45:c5:8b:99:1c:0e:8e:71:5b:61:6b:ed:
fd:fb:ca:04:cc:08:9a:80:19:44:be:da:7e:19:a3:
d6:69:28:31:1f:10:ca:a6:f3:0c:8d:cb:d7:ed:ce:
0d:ba:7e:b1:c4:08:5a:df:63:f1:c9:af:b5:d1:f2:
18:c6:57:0b:e4:ad:ed:d8:8f:ea:b0:45:d2:8f:13:
04:ec:a4:9a:4b:89:0e:97:56:39:97:6d:bb:0a:20:
dd:13:75:dd:88:db:63:8c:16:bd:56:5a:6f:05:0d:
0a:67:de:59:4c:c6:8d:d3:1c:97:a6:f1:35:72:11:
f0:c4:60:08:df:4f:05:8d:0d:32:c1:c1:dc:40:bb:
f5:ea:21:81:8e:c0:24:51:ed:5e:cb:b4:f4:12:1f:
06:cd:5a:79:42:55:48:6c:7b:64:c7:26:cf:0b:3a:
47:1e:53:75:a1:83:07:6f:58:d0:ae:d7:40:04:17:
f1:35:bf:74:ba:c6:98:39:5c:79:b7:cb:e5:cf:df:
e3:74:b3:6d:f1:28:44:a5:b1:79:e5:b5:a2:e9:74:
0a:61:33:3b:fa:fb:bd:1f:09:12:b2:dd:f5:56:ae:
00:b6:d8:ac:fe:10:67:2a:97:27:35:da:5f:ee:d5:
ff:8e:c4:f9:d3:84:d3:ad:0e:19:a8:45:61:bd:38:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:34:97:82:E3:F0:4C:2C:E8:A1:B6:D4:1B:34:16:11:EC:CE:0C:9F
X509v3 Authority Key Identifier:
keyid:82:03:63:DF:11:FF:74:9C:3A:C2:6B:68:EB:D0:73:23:5F:AC:A8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggNj3xH_dJw6wmto69BzI1-sqCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bddc11-e5f8-4778-880f-b2279e08327a/1/ggNj3xH_dJw6wmto69BzI1-sqCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:04:1a:62:1e:8e:13:e7:be:da:d2:ed:ea:13:f3:0e:1b:58:
e8:83:07:a7:33:1d:30:26:27:29:48:87:8f:fd:50:d3:00:01:
d1:54:cb:a3:ef:4a:ad:56:9f:ec:a9:b4:75:5c:d7:16:d2:50:
eb:8f:9c:db:e8:1d:96:00:61:89:b3:0f:73:fd:57:06:1b:94:
e4:d8:2b:47:76:01:77:14:70:17:b4:dd:27:ae:af:87:04:9f:
96:dc:84:29:94:1a:f7:23:49:7d:1a:bb:79:e6:6f:0d:80:0f:
8a:20:b4:e3:fc:16:e0:26:48:ee:6c:e3:48:1d:65:99:09:3e:
5e:a5:eb:00:a0:27:6e:3f:63:1b:a5:81:80:e4:01:c5:00:10:
42:c2:ad:df:16:87:f7:b2:d2:22:86:bf:b8:1a:24:f2:b1:96:
a5:51:cd:25:f3:37:09:03:98:ef:cb:69:bc:14:77:15:2e:d7:
c6:f1:ee:be:ce:4d:f6:86:1a:7d:9a:cc:a3:6e:f2:7c:6e:e8:
3d:7c:1c:37:04:5f:1a:71:28:82:5e:ad:28:ea:2b:77:cc:bf:
7e:67:67:04:ca:af:fd:03:d5:27:59:4a:a2:79:23:be:74:6f:
b9:08:0c:4e:ee:ae:67:6c:98:07:3b:3d:f1:1b:bb:43:39:c5:
fa:34:71:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:14 2026 by rpki-client