Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File: GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier: SbchxXXVheQyaQ2iD3uNxfkmrlZ5lp4oaeJnwmifNv0=
Subject key identifier: 7B:0E:59:DC:38:C9:4F:58:C9:89:F5:C2:E7:B4:87:FF:56:32:E9:74
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer: /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial: 019D27DFD7E07B276BEA36D8A9DFB5A200C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number: 15BF
Signing time: Thu 26 Mar 2026 02:01:14 +0000
Manifest this update: Thu 26 Mar 2026 02:01:14 +0000
Manifest next update: Fri 27 Mar 2026 02:01:14 +0000
Files and hashes: 1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: K/+nwdZEoQMjXxyWyKW6Q0XrbM/ClYUZmBG3lmMw+o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d7:e0:7b:27:6b:ea:36:d8:a9:df:b5:a2:00:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Validity
Not Before: Mar 26 02:01:14 2026 GMT
Not After : Mar 27 02:01:14 2026 GMT
Subject: CN=7b0e59dc38c94f58c989f5c2e7b487ff5632e974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:c4:01:63:6a:6b:bd:31:df:bc:b8:53:af:
02:3e:cb:b5:83:97:b8:61:b6:78:41:ea:5b:ae:a5:
3e:1d:a8:59:94:dc:f0:41:43:fd:5c:be:fc:8d:aa:
ad:2c:84:5e:8d:f5:c0:00:f6:24:aa:b5:93:71:99:
d6:4e:13:71:81:f4:d4:33:b2:c1:03:9d:4c:a3:7e:
e3:d3:84:6d:84:12:f0:dc:c2:eb:6a:9c:8c:50:a7:
ee:1c:8a:97:58:da:b4:9f:3f:c1:c0:d0:bd:5a:3f:
f1:64:24:62:f0:0b:34:d4:d5:0b:12:63:57:1c:80:
01:3b:26:c2:86:1b:15:82:24:e6:b8:a1:90:09:c5:
b8:24:f4:06:2c:34:f1:d1:5d:f8:3e:01:47:3d:46:
fd:b3:56:aa:7d:3f:95:50:ea:40:a1:21:0c:3e:37:
b9:17:1f:6a:9d:71:86:5a:2f:4c:dc:f4:1e:08:0a:
b7:b6:e9:29:17:39:72:14:52:27:ac:3c:40:10:a6:
2e:7d:28:55:e4:57:06:c0:e8:64:83:7d:51:6f:03:
f6:c4:69:4c:2c:8e:76:fe:a2:34:2a:7d:ca:55:59:
41:70:28:7c:35:f2:a1:1d:87:8e:70:86:fa:cc:8d:
1e:bf:41:36:27:eb:86:99:77:61:7b:c5:00:c1:92:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:59:DC:38:C9:4F:58:C9:89:F5:C2:E7:B4:87:FF:56:32:E9:74
X509v3 Authority Key Identifier:
keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ab:bf:b4:53:c9:45:f9:68:1a:91:f5:e9:66:1e:8b:72:85:
a3:78:77:19:26:da:27:6c:c1:63:63:4f:02:57:28:be:75:11:
d9:08:59:f9:3a:ea:b5:15:5e:7c:7a:27:0d:15:1c:c5:a6:b6:
da:37:76:d6:51:fb:02:c8:44:12:f0:2c:e8:f1:2a:ac:d2:36:
ec:f1:e1:de:79:af:ae:b0:12:d4:5e:0a:b9:cc:25:b4:d7:47:
d5:17:cd:08:71:65:6e:53:a9:ca:7a:7a:80:72:ac:41:9b:7e:
e8:59:c7:ff:41:03:98:ee:e4:a1:bb:5e:ca:32:ed:f4:93:be:
c6:ee:28:fd:cd:94:25:6b:7e:b3:10:2f:9a:dc:68:2c:79:da:
7a:29:84:d0:39:ee:d6:a0:16:a6:3e:96:0d:17:26:33:2e:58:
f2:b9:9b:82:7f:cb:37:9c:9d:86:2b:44:ce:c4:2d:0e:2f:89:
40:73:1a:05:0c:d1:33:79:5e:5f:86:f9:5b:7c:03:8a:34:9a:
8d:24:2a:40:90:1a:85:b3:f0:17:c0:b4:02:07:d8:91:55:9c:
7d:9e:8b:7e:f7:88:9f:9e:85:fc:07:9b:ad:0a:96:30:55:19:
08:5f:c7:6a:b7:58:e1:86:b2:e4:91:97:91:8c:91:36:6b:a3:
3c:a3:bb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:22:59 2026 by rpki-client