Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft
File: GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft (raw, json)
Hash identifier: pWp8ppa5dA0CWqCSVjdjeHY8kvDyqXEpuRphoIm4f/c=
Subject key identifier: 0F:36:57:42:EE:56:3D:BF:5F:7C:F3:B9:47:53:64:BC:B5:46:E0:04
Authority key identifier: 1A:34:16:89:45:1E:53:5B:F5:5C:CB:7D:35:1A:57:0C:89:34:58:D1
Certificate issuer: /CN=1a341689451e535bf55ccb7d351a570c893458d1
Certificate serial: 019D33ACC3AF10F1C39E1FF03F48F800128B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjQWiUUeU1v1XMt9NRpXDIk0WNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft
Manifest number: C6
Signing time: Sat 28 Mar 2026 09:00:53 +0000
Manifest this update: Sat 28 Mar 2026 09:00:53 +0000
Manifest next update: Sun 29 Mar 2026 09:00:53 +0000
Files and hashes: 1: GjQWiUUeU1v1XMt9NRpXDIk0WNE.crl (hash: /LcP9vAkXQgcbw7wXf//3f1QTV2llLFul5HF4gydNKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjQWiUUeU1v1XMt9NRpXDIk0WNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:c3:af:10:f1:c3:9e:1f:f0:3f:48:f8:00:12:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a341689451e535bf55ccb7d351a570c893458d1
Validity
Not Before: Mar 28 09:00:53 2026 GMT
Not After : Mar 29 09:00:53 2026 GMT
Subject: CN=0f365742ee563dbf5f7cf3b9475364bcb546e004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:78:01:65:40:e4:b8:99:63:b7:d6:9c:b8:
4f:1f:66:bc:27:d2:89:96:a8:5e:82:8c:99:bc:67:
bf:78:e4:35:af:66:01:04:f5:91:69:8d:6f:33:58:
95:c9:08:8e:5d:25:97:4d:02:58:9e:50:0e:5f:24:
f7:fa:d8:d6:fc:3b:53:fb:04:64:2d:ba:30:a6:7f:
88:6d:5c:9a:e4:f7:f4:b9:07:f3:7a:54:82:ec:b6:
49:24:d8:06:91:1b:fe:24:98:91:06:47:cf:fa:7c:
c8:3d:8d:5b:b5:b0:80:61:cb:a2:4a:fd:f0:90:86:
f6:dc:05:30:ee:63:93:6e:5d:8e:c0:b0:28:14:00:
99:41:2e:1d:f5:81:1d:f7:11:ae:e4:a0:e4:5a:15:
6e:2b:04:00:f5:15:2c:4d:43:69:7c:a3:8c:9c:84:
f7:e7:cb:16:6e:81:5b:90:8a:fc:a1:42:e8:33:47:
da:18:46:8a:5e:13:1d:2b:db:a5:8a:b5:03:8c:c3:
ac:d0:3d:cc:1f:28:32:5c:43:2d:60:72:79:05:53:
16:50:9a:23:32:d6:52:dd:fc:a7:9c:08:eb:f0:83:
5d:61:86:c8:e3:86:cd:4f:7e:4d:7d:30:74:0c:9c:
f1:96:19:e3:ce:ba:69:61:d8:85:d8:75:fa:27:25:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:36:57:42:EE:56:3D:BF:5F:7C:F3:B9:47:53:64:BC:B5:46:E0:04
X509v3 Authority Key Identifier:
keyid:1A:34:16:89:45:1E:53:5B:F5:5C:CB:7D:35:1A:57:0C:89:34:58:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjQWiUUeU1v1XMt9NRpXDIk0WNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9263ef-2803-4e84-824a-f512d387580f/1/GjQWiUUeU1v1XMt9NRpXDIk0WNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:82:9c:2f:eb:85:4f:3c:fa:0e:ae:6d:68:2a:37:7f:af:89:
e9:a9:eb:40:ea:0d:d1:80:49:d2:c9:1f:df:b2:03:ad:20:cb:
d4:d9:30:6e:f0:39:b4:f5:32:ed:77:d4:86:8a:24:19:c6:70:
33:e3:80:86:f7:11:12:81:11:c8:e5:55:c9:e7:dd:a2:28:67:
99:b2:9d:30:47:9a:c8:16:37:e6:e8:cf:53:66:2d:4b:e8:ca:
c8:93:a5:9d:e0:8e:5a:b5:4d:20:10:ee:6d:68:0d:23:65:07:
78:f8:3a:7b:c8:fd:27:f7:97:c3:78:04:f4:93:e4:91:81:19:
e7:fa:1f:39:c5:ed:89:9b:f8:be:6b:55:c7:d6:60:bc:15:4b:
2b:27:2d:d6:0f:fe:5e:67:b1:df:42:30:65:9f:0f:b0:70:ef:
2b:a7:fd:6e:e4:02:a6:8f:2c:6a:c9:d9:7e:7b:d7:6d:ec:c9:
0d:4e:54:ed:bd:f5:e3:30:5e:c2:01:59:77:e8:0a:4e:1a:b2:
51:11:b0:84:98:56:e4:3a:25:74:15:7e:27:42:16:43:a0:32:
05:ec:c9:33:47:27:61:74:55:a3:8d:9e:2d:c7:53:f9:7a:b2:
e1:f9:65:cb:9e:86:1e:19:1e:a8:a0:55:8a:77:ee:a3:88:5c:
a0:e8:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:43 2026 by rpki-client