Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cfc59-4595-4bd3-8a22-09619fe64d73/1/gHxaewQd3kDvSjWe6yGZ1Foz0dM.mft
File: gHxaewQd3kDvSjWe6yGZ1Foz0dM.mft (raw, json)
Hash identifier: WH58jki8WKdi4lqWNLhOw25L5faOYzALnHmSU2O43nk=
Subject key identifier: 67:A3:D8:AD:43:80:0C:A6:A8:20:4C:03:B8:09:13:AB:4E:2E:08:35
Authority key identifier: 80:7C:5A:7B:04:1D:DE:40:EF:4A:35:9E:EB:21:99:D4:5A:33:D1:D3
Certificate issuer: /CN=807c5a7b041dde40ef4a359eeb2199d45a33d1d3
Certificate serial: 019D265F523FA0B162FD8053CA3D24DE1A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHxaewQd3kDvSjWe6yGZ1Foz0dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cfc59-4595-4bd3-8a22-09619fe64d73/1/gHxaewQd3kDvSjWe6yGZ1Foz0dM.mft
Manifest number: 016A
Signing time: Wed 25 Mar 2026 19:01:14 +0000
Manifest this update: Wed 25 Mar 2026 19:01:14 +0000
Manifest next update: Thu 26 Mar 2026 19:01:14 +0000
Files and hashes: 1: gHxaewQd3kDvSjWe6yGZ1Foz0dM.crl (hash: LglWLZDxeW43aAbgchFOD9vbeN/CNyCfiN1Q6856Cu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cfc59-4595-4bd3-8a22-09619fe64d73/1/gHxaewQd3kDvSjWe6yGZ1Foz0dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6cfc59-4595-4bd3-8a22-09619fe64d73/1/gHxaewQd3kDvSjWe6yGZ1Foz0dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHxaewQd3kDvSjWe6yGZ1Foz0dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:52:3f:a0:b1:62:fd:80:53:ca:3d:24:de:1a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807c5a7b041dde40ef4a359eeb2199d45a33d1d3
Validity
Not Before: Mar 25 19:01:14 2026 GMT
Not After : Mar 26 19:01:14 2026 GMT
Subject: CN=67a3d8ad43800ca6a8204c03b80913ab4e2e0835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:06:80:f3:0b:ae:73:c2:7f:ea:a9:87:75:
bf:d9:d5:bc:75:c8:f4:67:b9:3f:ba:82:1d:ff:85:
93:ce:c7:72:c8:bb:39:a9:46:ec:12:c1:70:a2:a3:
bc:59:01:eb:44:6a:6e:7f:33:7d:01:88:b6:46:ba:
c5:55:7d:cc:b8:e6:98:a4:a4:d5:65:5d:51:3b:a6:
c4:48:42:a3:87:cb:6d:d5:8e:9f:c4:82:1a:a5:f4:
a6:c0:9b:40:f0:7b:a5:16:22:b5:70:71:b9:83:58:
10:ff:22:72:46:f1:de:ae:a2:f7:dc:3c:04:8f:11:
45:71:c7:49:7d:e5:51:5a:50:69:2e:ac:3f:f8:38:
25:97:7d:6f:41:9c:23:43:7e:e2:af:46:d3:72:66:
ac:d6:a3:3d:ca:8d:6b:b9:81:36:17:81:da:54:f8:
bb:d8:d7:22:4a:2f:84:c1:68:ea:b5:89:24:69:4a:
d6:68:e8:aa:9c:76:59:c6:f9:95:3c:4b:73:47:d7:
5b:ed:3c:f3:81:06:0a:f1:f8:78:20:3c:ad:f3:89:
00:b2:15:cd:c5:83:b4:33:b8:2a:64:c8:21:de:b6:
63:32:a8:8c:c2:a1:9e:74:3d:69:a1:08:35:48:ac:
97:27:4d:58:22:df:66:b3:93:40:a8:32:ef:0a:1c:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A3:D8:AD:43:80:0C:A6:A8:20:4C:03:B8:09:13:AB:4E:2E:08:35
X509v3 Authority Key Identifier:
keyid:80:7C:5A:7B:04:1D:DE:40:EF:4A:35:9E:EB:21:99:D4:5A:33:D1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHxaewQd3kDvSjWe6yGZ1Foz0dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cfc59-4595-4bd3-8a22-09619fe64d73/1/gHxaewQd3kDvSjWe6yGZ1Foz0dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cfc59-4595-4bd3-8a22-09619fe64d73/1/gHxaewQd3kDvSjWe6yGZ1Foz0dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:33:84:80:2f:e5:af:63:78:40:0b:97:0f:e4:25:5f:8f:a4:
28:2e:2b:4c:b8:c9:a1:af:93:8e:c3:2c:4d:4e:eb:4b:6f:7d:
d6:93:e5:c9:b7:95:07:9b:69:a4:5c:bc:0e:9e:94:66:fb:54:
35:23:38:14:a9:44:ab:61:ca:d4:60:4e:cf:a0:95:89:67:0a:
76:38:0a:d0:3c:64:18:a6:a6:c7:cd:dc:0d:69:a4:49:9c:0e:
f5:24:ca:97:ef:4e:7d:b7:f1:be:ba:a3:7d:78:f7:f4:2a:fa:
02:22:fb:c4:95:58:cf:01:ed:c8:95:6a:6c:16:d4:c6:ad:a4:
6a:89:aa:0b:9f:a7:68:db:88:e7:ff:d8:b7:c0:77:64:91:a8:
61:3e:a1:6a:a0:45:b3:23:21:54:56:64:64:7e:49:30:1e:2f:
69:e8:7d:25:51:0e:0b:3e:5f:83:36:12:c2:c6:84:d3:4e:4f:
03:8e:57:e4:17:59:40:b4:f1:b9:d5:93:e6:0e:ad:d4:b6:61:
77:8b:bc:e2:ce:a5:34:56:f3:f9:12:b6:d6:3b:23:66:03:77:
47:c7:b4:d7:51:ff:5c:7a:4d:35:71:e3:9b:1b:85:1d:c6:6d:
6f:99:57:2e:a5:82:c2:dc:14:23:cf:58:c3:37:b8:39:45:68:
a6:07:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:36 2026 by rpki-client