Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier: r8Xn8UInx9Cv/o9sQmJt4NWzn+kHKi/J5P4QyvdBhtE=
Subject key identifier: 40:F5:11:7A:09:B9:BD:6F:FB:73:43:0B:D0:69:6F:3F:31:14:EC:02
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial: 019D28F33E031801B580D55F59319A623EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number: 1817
Signing time: Thu 26 Mar 2026 07:02:02 +0000
Manifest this update: Thu 26 Mar 2026 07:02:02 +0000
Manifest next update: Fri 27 Mar 2026 07:02:02 +0000
Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: rZpw9xDpWUbTQUvAvAcQAKPrlBTJqlqplonGExRSdT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:3e:03:18:01:b5:80:d5:5f:59:31:9a:62:3e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Validity
Not Before: Mar 26 07:02:02 2026 GMT
Not After : Mar 27 07:02:02 2026 GMT
Subject: CN=40f5117a09b9bd6ffb73430bd0696f3f3114ec02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:ea:da:f9:42:4a:61:ee:91:ab:a8:00:b4:
05:ec:fb:02:a7:94:ca:21:0c:97:90:e6:9b:87:67:
39:f8:33:8d:58:7b:1a:ee:57:ce:d2:25:f6:94:61:
e8:c0:3b:d8:11:b7:b9:e4:70:b7:89:ae:3d:c4:ab:
13:31:7b:88:a0:93:03:bb:36:d7:f2:d3:66:81:67:
c0:7a:4d:42:b5:44:7d:65:51:ad:18:8a:d0:23:7c:
e7:88:ab:de:bd:9f:df:f3:42:22:6b:07:e8:d5:48:
be:62:b3:41:25:d2:3a:04:2d:a5:10:13:38:a9:4a:
a1:a9:3c:ab:a4:af:d5:82:46:45:bc:25:30:21:2a:
43:ee:79:10:31:cc:9e:b1:bc:be:41:ea:cd:69:33:
a4:4d:fd:ee:d7:05:a2:0f:19:4c:50:09:0d:f1:a9:
79:fb:4d:b7:88:dd:09:89:52:97:e2:30:ea:3f:4b:
8c:52:3e:d5:9c:5a:d6:c2:c3:a2:c1:09:4f:2e:54:
11:b3:5a:8a:68:be:c0:0b:d8:a7:80:0a:e9:31:d8:
ef:e0:8e:b9:20:77:c2:fb:3d:a7:d2:b7:ee:12:ef:
7c:bf:0e:9c:ca:52:80:d5:aa:8c:60:3a:e0:65:a1:
02:59:d2:7c:58:aa:e2:40:b6:2a:6c:f5:34:ad:56:
70:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F5:11:7A:09:B9:BD:6F:FB:73:43:0B:D0:69:6F:3F:31:14:EC:02
X509v3 Authority Key Identifier:
keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:03:23:70:94:50:ad:3a:b2:e5:e4:6f:e4:1c:9f:4c:5d:71:
d7:d1:c3:d0:67:41:b8:3c:1c:10:7a:23:8a:fa:00:95:91:ca:
3a:ad:10:b8:5c:a3:2f:68:74:20:71:9a:8c:00:ff:80:b1:0f:
8d:6c:43:62:ba:29:ad:d9:6f:7b:2e:7a:7a:c1:c9:1c:b4:5d:
79:f8:16:2a:e0:0c:a2:4a:e6:5d:eb:15:5e:8a:bb:7b:bf:93:
0c:8b:97:51:bc:ab:74:1d:09:b3:a9:b1:88:5f:07:db:91:c8:
5d:e9:61:39:03:c6:92:13:41:df:30:10:ef:29:d2:79:aa:38:
f6:e9:a7:be:15:22:f9:cd:71:bc:2d:75:c3:02:cb:31:83:e5:
61:da:60:61:9f:5c:11:a6:5c:41:7f:83:79:f2:08:38:d9:04:
4b:d7:f9:02:2f:4c:e7:28:d1:34:36:0c:50:ee:af:76:be:a5:
74:7b:db:7d:94:2b:67:49:0e:2d:95:76:1c:13:ea:ac:8b:f6:
14:a9:b0:07:fe:2c:43:a8:97:f5:6b:04:91:af:8d:de:24:5a:
9a:8b:8a:a8:0c:a3:78:88:f5:46:3d:17:0c:23:45:fc:0c:04:
a5:6f:53:12:f6:58:d0:d1:f6:01:1f:94:86:4b:29:12:a6:0e:
1e:a4:02:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:48 2026 by rpki-client