Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
File: gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft (raw, json)
Hash identifier: SolZ2k0uMR3NtFUqsmcyYSQzm9XhfS7lO+xZe32Qboo=
Subject key identifier: EE:E0:A7:E2:07:D3:F0:86:DD:45:05:DE:AC:E4:1C:F8:A7:FA:AC:8B
Authority key identifier: 80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68
Certificate issuer: /CN=80eb71d019a483225c324c88c6c48020ef9f1168
Certificate serial: 019D29974ED557E4B16B9BB710D1023264FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 10:01:15 +0000
Manifest this update: Thu 26 Mar 2026 10:01:15 +0000
Manifest next update: Fri 27 Mar 2026 10:01:15 +0000
Files and hashes: 1: gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl (hash: jlmCxAmpYB0Vt4AO5lMnv5aUoxVx2wJDQAlo79TKmCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:4e:d5:57:e4:b1:6b:9b:b7:10:d1:02:32:64:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80eb71d019a483225c324c88c6c48020ef9f1168
Validity
Not Before: Mar 26 10:01:15 2026 GMT
Not After : Mar 27 10:01:15 2026 GMT
Subject: CN=eee0a7e207d3f086dd4505deace41cf8a7faac8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:8d:6e:16:22:9f:55:11:9d:d2:20:17:39:
09:6b:f5:72:31:82:a8:2f:97:1f:2c:91:c3:1f:2e:
04:17:eb:70:58:08:f1:8b:35:91:2f:14:1c:28:03:
32:46:ec:ee:94:4c:11:0b:3f:cb:52:a4:89:54:87:
9f:be:23:d7:30:52:03:7f:ba:9e:8a:58:52:8d:50:
fc:ea:c8:34:63:b3:ca:e3:f7:d9:30:27:2b:0a:3e:
c9:66:8f:de:97:d6:a8:0a:cc:cb:f5:72:7f:d7:5d:
bb:10:dd:d6:f8:34:68:7f:d8:59:59:bb:d9:27:97:
10:32:58:1a:81:d6:0a:c5:f0:a5:2c:c9:f4:f7:0e:
4f:28:47:81:74:27:4e:58:42:6b:f8:a1:12:fb:9d:
38:41:10:4e:e1:7c:71:8b:17:a5:89:9f:e7:c8:e9:
8c:5b:71:b6:b0:94:d9:84:ec:46:e7:f7:6f:c3:57:
d9:c4:21:58:57:96:61:91:1f:f4:b1:64:53:c8:7a:
f6:ef:ee:6b:d5:8a:8b:e3:64:19:1a:67:99:c4:bd:
6d:15:7d:2e:aa:61:d6:be:7d:a3:10:90:20:be:b4:
93:49:f9:b6:4d:25:0d:a9:be:88:48:24:e0:69:73:
2c:ef:97:7c:c8:c5:a7:51:87:37:e1:69:54:79:73:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E0:A7:E2:07:D3:F0:86:DD:45:05:DE:AC:E4:1C:F8:A7:FA:AC:8B
X509v3 Authority Key Identifier:
keyid:80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:24:5b:4f:cc:af:c4:71:d9:ba:32:78:87:14:37:9b:7e:bf:
b1:48:1d:9a:74:47:96:9d:f7:a0:60:ce:f0:e6:d8:c0:ef:e8:
3a:9a:a9:b1:0b:51:ea:7a:46:0a:8d:47:d2:c2:f0:31:ea:b5:
24:01:25:cb:8e:a1:6e:61:13:23:f5:37:68:11:4e:bb:e4:28:
92:a2:7d:c0:99:f5:06:5d:28:c5:0b:bd:e1:37:5b:37:41:a6:
cd:68:87:0e:66:e0:74:c6:ad:d8:42:58:01:5c:74:fa:13:17:
9d:21:af:24:2b:f5:c5:1c:5f:09:65:86:88:2a:93:11:b6:5b:
b6:e4:2a:f9:93:38:b6:5e:4d:9e:da:36:ae:e6:0f:2f:32:df:
ed:2c:fb:c1:05:70:71:6e:38:61:4e:31:c8:0f:6f:4d:f2:72:
ed:27:37:ca:7f:b1:95:31:af:0a:5f:76:0d:bd:81:bf:a2:b0:
2b:b4:0f:b3:78:da:08:85:3d:d0:68:76:83:6c:07:4c:53:af:
2a:34:d3:4b:5a:06:20:54:0b:ef:9f:1a:a5:8f:80:ca:4e:a7:
c3:93:77:16:46:42:4c:bc:d4:b1:b2:bb:d9:eb:62:35:cd:82:
be:ec:c7:a4:a6:a2:be:d3:b0:f6:56:af:3a:70:cd:53:24:a3:
45:34:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:10 2026 by rpki-client