Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: cDHQSq468xBoWGttPJFBneGkDVuIpj7HI02QLG8EX6Q=
Subject key identifier: 3C:B8:C8:BA:31:AF:17:63:01:50:97:73:CD:DE:A3:DB:0C:35:8F:6C
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 019D26CCB9CADEB407CEBD5131C85644917E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:44 +0000
Manifest this update: Wed 25 Mar 2026 21:00:44 +0000
Manifest next update: Thu 26 Mar 2026 21:00:44 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: +uq83ErfRBWZ2ySqNKRuvwnwQM04CnJ7H4EWXgQliVg=)
2: I5h_-n6q20lsOaRJZ1RaRmHMf8U.roa (hash: zer7O7oW6HZhNmqlr1aPUcsYOzbLm/tHkE6ZSX4C2TU=)
3: QiybHyZYXADSID7uWkeeef6I9FM.roa (hash: nffxcFthp0YuUEIfa7lK0CY+6Pk1YEGmytbZGeUzOYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b9:ca:de:b4:07:ce:bd:51:31:c8:56:44:91:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Mar 25 21:00:44 2026 GMT
Not After : Mar 26 21:00:44 2026 GMT
Subject: CN=3cb8c8ba31af176301509773cddea3db0c358f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:05:f4:bc:fb:70:cf:c8:cf:47:4e:a3:2c:
50:ed:b5:e1:8c:6f:e7:b2:93:9e:68:d7:d8:e1:ea:
2f:c5:61:d3:e7:1f:55:28:61:a4:ad:43:71:9b:e0:
2b:11:da:b1:92:82:81:42:4f:1a:cb:fa:d0:86:43:
09:27:71:a6:8c:9a:c9:bb:c0:12:ee:c4:94:4d:8e:
39:2b:64:d8:04:3c:4b:10:97:35:23:50:b5:95:5e:
08:e1:95:bf:33:a4:c9:cb:a5:19:45:b3:34:ed:ea:
45:1e:9b:2e:cf:09:54:43:0f:4c:0d:69:b3:f5:20:
6d:d2:85:79:ad:08:70:39:04:6f:6b:7a:5b:f7:64:
b3:1b:ff:97:b1:24:4c:7f:0c:be:78:e8:dc:78:5f:
05:84:44:37:cd:0d:34:2e:1e:cf:72:e0:ea:6f:c7:
fa:2a:8a:9e:aa:c5:43:1f:86:5b:d4:3e:9f:29:32:
68:aa:34:27:3f:33:3e:52:e5:bd:4f:c0:a7:d1:b4:
b0:ca:44:ac:50:02:3d:dc:83:bc:a4:bb:97:a5:4c:
7a:4e:d7:b2:2a:dd:e3:d1:e6:73:3b:4a:cb:56:d8:
ef:e9:6c:c8:ba:a0:c1:4f:2b:a2:83:b0:fb:90:6d:
49:ad:a6:04:a6:49:6d:3c:03:ee:6b:b4:48:e6:ba:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B8:C8:BA:31:AF:17:63:01:50:97:73:CD:DE:A3:DB:0C:35:8F:6C
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a9:0a:c6:fc:e2:35:b4:a2:88:d2:e9:9a:88:1b:b5:4a:16:
66:9e:b1:1e:c7:09:47:44:08:b9:76:59:48:88:0a:21:91:51:
28:be:f5:d4:75:d5:88:03:29:2b:c9:12:42:d0:a8:cf:71:4d:
0c:a8:35:96:c0:48:5b:dc:c3:9b:a7:30:35:a1:3f:f1:d5:8d:
36:2e:6e:2d:b9:2c:7b:2d:5f:06:98:76:52:0d:57:65:1b:95:
cb:e4:2c:06:5a:9e:a7:1b:d3:7c:69:26:c9:d9:4d:cb:54:7d:
ca:d0:f2:85:8b:7b:e1:c5:bf:90:46:47:cd:50:cf:9c:b5:ef:
10:c7:b2:92:80:03:f7:11:f3:f4:b9:14:44:41:d6:93:02:b4:
49:16:e6:e3:3c:25:32:76:41:7c:e1:c2:c3:34:a7:1d:1a:19:
c7:b1:27:4f:4f:ed:13:83:d5:fc:b8:0c:f6:d2:7f:4f:41:99:
7a:b3:cb:94:ef:b5:2d:ae:01:63:a8:ef:69:7b:80:af:63:52:
40:81:ec:27:fe:87:81:ed:09:74:a3:c2:8e:98:82:78:9a:9a:
54:7d:a2:5a:50:02:db:71:b1:f4:89:b5:e9:7f:c2:5e:cd:76:
3d:69:44:5b:5e:58:96:95:57:0d:1f:c8:00:a2:5a:d4:0b:20:
d9:10:0e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:06 2026 by rpki-client