Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
File: 1-GSAgviI1Al6xM26hGYLkw91A18.mft (raw, json)
Hash identifier: lFusJjdfLS1IiiGXsihpb/ARuxspuHLFsjb4Zda4MNw=
Subject key identifier: 67:D9:22:0F:79:53:5D:8A:DE:E2:A8:0C:BF:03:04:39:9A:FB:B2:6C
Authority key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
Certificate issuer: /CN=f8648082f888d4097ac4cdba84660b930f75035f
Certificate serial: 019D26962DC723CF6936AAE4FAE4B425AFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
Manifest number: 013C
Signing time: Wed 25 Mar 2026 20:01:09 +0000
Manifest this update: Wed 25 Mar 2026 20:01:09 +0000
Manifest next update: Thu 26 Mar 2026 20:01:09 +0000
Files and hashes: 1: 1-GSAgviI1Al6xM26hGYLkw91A18.crl (hash: hl2Hj3bA7hFzed4JlatpsGP675Dcxnj/qsQ7vaeD72w=)
2: Ld1IptB75UF1wrERs5D-utW7pW8.roa (hash: qkhGZ0ztjC9ORXPQw0r6Rit5ibpjpCY4xiHV/vyohFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:2d:c7:23:cf:69:36:aa:e4:fa:e4:b4:25:af:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8648082f888d4097ac4cdba84660b930f75035f
Validity
Not Before: Mar 25 20:01:09 2026 GMT
Not After : Mar 26 20:01:09 2026 GMT
Subject: CN=67d9220f79535d8adee2a80cbf0304399afbb26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:a0:2e:78:82:6c:97:7c:59:b8:0a:62:5a:
16:b9:98:56:66:aa:e2:89:41:b3:7b:6b:bf:6f:9e:
a6:06:0e:87:ab:89:f9:c7:c2:7b:1c:01:51:72:31:
90:be:92:25:21:bd:f7:7b:6e:47:bf:f1:5b:24:6e:
a3:69:09:d9:e8:b8:8c:8a:4f:32:fd:a9:6b:a5:b4:
07:8f:bb:34:15:87:59:2b:c5:3c:33:f2:22:f3:b2:
06:73:db:14:ad:c1:e4:ed:02:2b:58:ba:f4:b1:1b:
b2:da:bc:9a:45:2e:d5:30:a0:cd:db:24:8a:a9:07:
84:39:ae:38:1a:e2:47:ac:4b:93:ab:69:9d:e8:88:
19:e3:d6:4c:5f:33:ac:5d:7b:cf:68:da:39:ce:3c:
26:c7:33:4e:99:1b:4d:6d:ab:c1:fa:2e:0b:20:a4:
6f:45:72:5c:38:76:30:8a:81:fd:65:d4:d0:f6:dd:
1c:00:51:d4:73:d4:0c:69:92:ce:fc:f9:fc:77:87:
6c:ef:57:42:62:b6:95:df:12:46:6d:70:35:fb:28:
a9:f8:46:bd:b7:82:ef:d1:59:a8:6c:93:42:1e:6c:
37:72:40:6a:ce:d9:3d:b6:4e:c0:a6:d9:44:2d:14:
49:b3:5a:a0:77:5a:29:35:f6:df:3f:89:95:c7:99:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D9:22:0F:79:53:5D:8A:DE:E2:A8:0C:BF:03:04:39:9A:FB:B2:6C
X509v3 Authority Key Identifier:
keyid:F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:47:27:88:55:8c:fe:12:5a:bb:02:83:94:2c:f5:c8:7b:cc:
1a:58:0e:01:2f:19:25:17:eb:84:e2:ec:9c:6a:4f:8d:4b:d6:
62:6e:d7:2a:d8:65:69:d6:e3:5b:4c:96:73:31:3c:c0:38:e2:
a9:c6:9a:46:c5:a5:fc:c5:a6:e5:a1:90:e7:c4:8c:31:9b:93:
bc:7a:2f:c3:b3:6c:a9:d1:83:4f:6d:3d:bd:c4:c1:12:de:81:
78:2f:e2:ff:f5:a7:db:3d:01:e2:07:4f:2c:fa:68:17:c3:07:
45:af:f4:9d:dc:f5:4b:4f:46:1e:64:ae:39:b9:1f:df:28:a2:
9c:f1:d5:82:21:de:06:f9:b9:58:65:8d:10:1f:ca:d0:c0:bc:
36:28:1d:7d:3f:8c:4a:48:1c:f7:45:4d:b1:b0:e4:27:0d:3b:
22:24:d0:1c:db:72:31:12:dd:23:57:cd:23:e6:50:f8:30:41:
11:83:96:48:9e:11:c7:df:4e:4d:89:92:6c:2b:a0:c3:d1:c6:
4a:22:f2:a4:79:28:8e:cf:20:d9:cc:ca:d0:36:36:e4:5c:c3:
78:8e:71:22:ef:21:21:4d:f2:e7:ec:69:82:c4:e7:d4:ba:12:
7f:1b:98:db:fb:0a:38:f5:27:08:38:50:6e:b9:1f:b0:7b:7d:
8e:de:c8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:41 2026 by rpki-client