Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier: 3iwYgARUTN0y2HPMk8qmTn3Ic8gdoKvhpgtUKCqQzRo=
Subject key identifier: AE:AA:44:C3:45:6E:8C:CD:10:68:F1:98:C7:50:60:86:11:54:7E:79
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial: 019D296108605F1E36BBD8977BEA8DDDD36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number: 0EDE
Signing time: Thu 26 Mar 2026 09:01:58 +0000
Manifest this update: Thu 26 Mar 2026 09:01:58 +0000
Manifest next update: Fri 27 Mar 2026 09:01:58 +0000
Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: XjeZklnR04SazVbuuLWBTxpFHGMuEZ9ea7qsZQk9SOc=)
2: qGxTxAsu5FkWitZ0KPLQqCXDGFM.roa (hash: zXhXvgnmYSnohs5FpeFJ6bYBqVk7H7oowzouCmYZY/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:08:60:5f:1e:36:bb:d8:97:7b:ea:8d:dd:d3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
Validity
Not Before: Mar 26 09:01:58 2026 GMT
Not After : Mar 27 09:01:58 2026 GMT
Subject: CN=aeaa44c3456e8ccd1068f198c750608611547e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:ee:f9:49:02:3c:30:b2:ea:a4:e3:d0:7b:
19:20:b5:f7:8e:71:cf:b1:71:83:13:7d:69:da:6c:
c2:4a:a9:a8:0d:30:38:7c:fc:ec:a4:d1:0e:23:93:
22:5a:a5:5c:09:f4:5b:3d:29:42:04:21:f0:8e:cc:
dd:a2:28:a2:59:e4:93:1c:9b:0e:12:98:97:1d:3a:
07:e6:4f:db:4c:3e:8d:22:58:24:38:74:6f:1a:92:
f2:cc:3b:6b:1a:11:5a:45:59:94:7c:d4:3c:0d:54:
af:95:15:0b:52:10:ef:2a:5c:a2:34:da:fb:5b:70:
36:38:c2:eb:8b:00:6b:1e:14:db:ac:42:65:41:ec:
67:36:88:7a:b9:a7:3f:59:dd:de:1a:df:75:38:52:
5e:77:b2:a2:c1:75:89:ce:7e:5f:3d:6e:d6:56:9e:
6f:fb:7b:f6:7d:e9:ad:e0:98:c0:13:76:cd:3d:80:
dd:a8:4b:e9:3f:bb:e9:58:cb:00:bb:6a:73:22:e5:
64:ed:09:cb:17:52:77:c4:9e:83:60:ee:1e:51:66:
f6:21:59:04:0c:e2:c4:88:c9:fc:11:54:c0:ce:a4:
8d:41:de:de:69:f6:3a:24:36:03:f9:63:af:c2:bb:
47:06:c7:3f:65:58:c2:b1:c0:1a:29:85:7b:45:22:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AA:44:C3:45:6E:8C:CD:10:68:F1:98:C7:50:60:86:11:54:7E:79
X509v3 Authority Key Identifier:
keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:90:e5:ad:da:fb:03:9c:e9:90:dc:82:ba:b1:5e:60:72:b6:
02:9a:49:89:f0:64:a0:bb:ee:2c:99:17:e4:72:0c:7d:43:25:
c1:b4:24:d9:a0:da:24:30:82:74:f7:db:34:84:1e:98:f9:bf:
c7:16:c7:51:63:ab:cd:1d:2a:72:70:05:24:90:09:f8:b6:12:
34:7c:7d:5f:90:2e:bc:77:27:bc:7a:43:4e:ed:22:e0:0e:47:
a4:5f:76:fb:7f:31:87:a9:c6:4b:65:35:aa:d3:09:d9:7d:60:
ae:ec:dc:c7:a1:a8:b5:2c:ef:e3:d5:6d:ac:f7:52:c2:d1:82:
55:ec:b7:1a:9a:98:84:af:51:64:2c:34:fa:98:dd:bc:9d:b4:
b6:31:fe:74:eb:7c:8d:20:15:ec:3b:d8:4e:ff:b7:25:a6:77:
56:be:80:68:d7:bf:9b:29:01:fd:3c:23:64:c2:91:ea:c5:ef:
14:7b:73:f2:2a:6a:9e:e5:04:fe:36:f4:ff:4d:08:59:19:45:
dc:1f:ab:0e:7c:de:d5:82:96:d1:f5:73:6b:c6:70:48:2e:35:
41:3f:46:2d:fd:c8:6a:19:37:b7:5b:76:ea:ed:a4:42:8e:64:
3f:b1:cb:be:44:3c:87:63:2a:36:3d:69:94:9b:62:2b:30:9f:
55:69:71:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:51 2026 by rpki-client