Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
File: GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json)
Hash identifier: Y5yFVEkyMrKKkVSmdsnOm+eRXNKhDu7e6ixKC2gf+4E=
Subject key identifier: 45:02:14:C4:1C:24:F1:83:A4:47:F7:2C:79:CF:AE:DC:98:03:7E:F9
Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
Certificate issuer: /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Certificate serial: 019D27727E6B62B9F425359600CBBFBFDBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
Manifest number: 0FE4
Signing time: Thu 26 Mar 2026 00:01:48 +0000
Manifest this update: Thu 26 Mar 2026 00:01:48 +0000
Manifest next update: Fri 27 Mar 2026 00:01:48 +0000
Files and hashes: 1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: 5KlwAgU49FqZYbTX+iJBaThKCp75GbEGa3eCiKZH0Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7e:6b:62:b9:f4:25:35:96:00:cb:bf:bf:db:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Validity
Not Before: Mar 26 00:01:48 2026 GMT
Not After : Mar 27 00:01:48 2026 GMT
Subject: CN=450214c41c24f183a447f72c79cfaedc98037ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:ab:e6:11:ee:50:e6:95:ad:4d:0d:cf:c1:
d0:78:63:3a:ed:80:02:19:4d:b5:cb:50:8f:31:9b:
1b:2d:ff:5f:a9:7b:79:79:94:38:e9:52:be:ad:ad:
32:23:80:63:21:e2:39:15:e7:19:c5:04:3d:72:d1:
72:c7:4e:6d:a4:59:41:e5:fb:66:82:5a:44:98:ab:
69:33:c7:55:b1:3c:7a:7e:83:f7:da:1c:7a:ef:71:
87:4c:68:55:9c:25:34:66:59:c6:93:a3:9e:bb:a2:
c7:a5:31:09:98:40:5e:9f:2b:99:b9:8e:31:af:e1:
52:58:c6:69:f6:88:33:5d:b0:ab:46:c3:14:d6:c8:
c2:75:44:3d:28:f1:4f:e6:5c:c8:52:b3:77:2a:71:
a1:66:d0:c0:0d:5f:3d:4d:cb:a8:82:46:47:cf:38:
60:a1:e3:d1:d0:f4:a4:43:89:f1:5f:49:6a:5c:75:
11:63:ac:50:7f:3a:f3:3c:30:6b:da:3e:69:97:0b:
5c:16:5d:dc:ef:1a:b9:f3:b9:0e:c7:69:1c:d0:88:
3e:ba:e2:ad:19:d7:72:b2:8d:b9:8d:54:24:16:67:
70:5d:19:65:7c:48:b4:bf:26:07:a6:79:64:55:5d:
a2:9c:bd:c0:dc:a7:84:1a:c3:35:f9:53:ad:b7:7d:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:02:14:C4:1C:24:F1:83:A4:47:F7:2C:79:CF:AE:DC:98:03:7E:F9
X509v3 Authority Key Identifier:
keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c9:36:cd:b7:07:70:9c:6d:48:0b:8c:81:43:fc:15:58:e7:
30:e0:e4:79:04:9b:0a:94:09:40:e7:1d:f8:2c:10:1e:58:9d:
a2:92:47:05:cb:4a:a8:7d:70:a9:7b:aa:e1:92:dc:39:dc:c1:
0b:00:78:d3:da:a5:47:5d:8e:47:7b:f1:0a:39:2c:89:94:1b:
5d:1b:53:21:34:d2:65:6c:f0:83:fd:4e:8c:9c:dd:42:1e:89:
7e:62:32:e6:e7:3c:f7:76:c8:cb:83:4d:79:45:03:24:c7:11:
76:2d:87:43:1f:10:2d:50:f5:fa:f7:eb:0c:91:44:41:fb:e1:
a4:fa:a3:5f:c9:41:5b:91:9e:ea:23:63:a6:81:90:c6:64:7c:
44:20:90:02:63:d4:a1:92:67:48:11:57:ee:c0:62:78:8b:03:
f2:55:4d:e8:bc:01:7b:39:d8:6f:37:46:24:e0:18:43:ae:3e:
03:6e:06:90:43:e5:17:64:21:ff:18:9a:a6:13:18:b8:3d:9b:
54:79:8b:69:dc:d2:46:d5:47:24:e8:79:47:d5:ea:c6:47:1d:
f9:ed:bf:12:8c:db:7e:8d:bc:7a:fb:cd:9b:d6:f5:45:df:1c:
d6:94:a5:5f:ad:c7:ba:b3:ee:48:61:82:38:ed:0c:d8:fc:b6:
b5:26:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:27 2026 by rpki-client