Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier: YsJbPBSPo5s88p5hq1JWpoPQ+B/KPkhidTpPlOFsWA8=
Subject key identifier: 7E:24:51:AB:6F:BC:6D:C5:5F:A7:35:4D:B2:BC:57:67:A0:B8:AB:98
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial: 019D2BF2CE8E7A98E4DE4264A26B5CCE9688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 21:00:25 +0000
Manifest this update: Thu 26 Mar 2026 21:00:25 +0000
Manifest next update: Fri 27 Mar 2026 21:00:25 +0000
Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: RU+4Z9ThE6QMZSuJPjab3ufc+HmR6Sd4y2cgoIdSscI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f2:ce:8e:7a:98:e4:de:42:64:a2:6b:5c:ce:96:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Validity
Not Before: Mar 26 21:00:25 2026 GMT
Not After : Mar 27 21:00:25 2026 GMT
Subject: CN=7e2451ab6fbc6dc55fa7354db2bc5767a0b8ab98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:d8:b3:6c:b3:c8:cf:46:31:84:43:25:f6:
0b:76:4a:dd:76:5c:a0:9e:b9:e8:1a:82:c1:92:a5:
38:68:13:12:b9:0c:21:07:f5:09:ee:2a:8f:4e:e3:
9d:45:94:f0:20:bf:35:e4:1d:bf:bb:d8:9b:d6:12:
03:87:c5:26:57:6e:46:80:f8:f2:8b:ec:b2:e1:87:
3e:b3:4c:4e:aa:6e:c9:9b:c9:67:e8:5a:5e:46:a9:
12:dd:39:b7:ce:13:f5:f0:88:76:69:5e:b6:28:4d:
2a:fe:6b:c0:3c:b2:e4:8b:30:af:69:e9:81:81:15:
01:88:da:6b:32:ec:5d:ea:68:3c:1e:2c:57:8f:83:
06:97:b6:d0:f4:2a:f6:ad:f0:9e:e3:05:f5:c9:d1:
ca:73:0f:91:e1:80:16:78:ac:05:12:f3:39:7b:0c:
0a:e6:0f:35:73:57:0b:76:50:96:8f:7e:52:93:3a:
a6:30:ee:ca:15:f9:d2:5b:8a:73:69:36:ad:8a:20:
2c:95:f8:37:54:18:bd:b5:db:3a:30:90:54:9a:bc:
68:11:2c:aa:57:df:77:8e:0c:0b:50:13:b8:35:46:
1f:b8:e7:75:38:9e:dc:07:9a:84:ba:a2:f8:41:d2:
8d:26:50:7c:ce:37:a8:8b:ee:7b:3e:d1:c7:d5:9f:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:51:AB:6F:BC:6D:C5:5F:A7:35:4D:B2:BC:57:67:A0:B8:AB:98
X509v3 Authority Key Identifier:
keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f1:3e:5f:b0:d3:4e:c5:a0:ac:88:5d:b6:76:b8:30:f0:13:
13:b1:50:64:67:38:83:29:08:4d:43:0b:d3:ee:de:94:3a:d0:
8e:19:8d:33:bf:d1:5a:6d:83:7b:b4:50:5b:64:81:ae:21:e8:
98:04:3a:73:f9:6b:e7:b4:f1:8b:f0:bb:24:b8:94:d2:27:c9:
1f:f3:a0:10:0b:12:d7:f3:a5:6f:60:44:b4:4f:f7:64:d0:a4:
b9:1e:32:99:00:dc:06:07:3d:36:59:15:28:e5:55:42:4f:08:
34:6a:6b:19:a4:ab:ee:cd:b6:4f:75:2f:12:35:62:d2:9d:2c:
f0:ad:b9:80:45:18:43:d0:57:49:2c:f5:e0:fe:50:98:a8:70:
96:c4:ff:c3:4d:2e:b6:cf:a2:2a:e0:29:72:f3:af:23:cc:9a:
af:b2:c4:cf:f2:d4:2c:dc:8c:b0:76:e2:08:5d:3e:a5:07:71:
39:7d:db:cf:84:34:38:7c:8d:20:24:12:a0:09:6f:3b:f9:76:
5f:12:48:05:d7:72:4d:1b:fe:85:06:81:ac:15:67:d2:33:1d:
19:b3:58:25:6d:97:4b:35:fa:30:fd:4f:16:87:fc:fd:a4:71:
94:10:3e:25:d4:37:a5:93:c0:fd:67:db:24:26:65:f1:a3:c6:
8c:84:e1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:02:57 2026 by rpki-client