Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
File: gCNZN6302riSXVgEWjNxgWyYBTE.mft (raw, json)
Hash identifier: p5YE60ca7ey9mUt2JTrIl/2MP/XNd1lOAk8mCl+leyk=
Subject key identifier: 1C:92:DA:A6:AA:92:07:3D:D0:84:D9:16:53:BF:48:A0:40:D6:5C:5B
Authority key identifier: 80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
Certificate issuer: /CN=80235937adf4dab8925d58045a3371816c980531
Certificate serial: 019D28BB127440B3054CD1ADF1994F478702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
Manifest number: 0A6C
Signing time: Thu 26 Mar 2026 06:00:41 +0000
Manifest this update: Thu 26 Mar 2026 06:00:41 +0000
Manifest next update: Fri 27 Mar 2026 06:00:41 +0000
Files and hashes: 1: gCNZN6302riSXVgEWjNxgWyYBTE.crl (hash: 5bVpdJzGXadrIpM2LFEr+bThfL+xF0oLgokwFjFBzy0=)
2: ni8xOmyPG8GcK3Z8TZmDGUp0yPU.roa (hash: iTNz2JkVG0lyLMF9W3w/Ic91Eg7OidyUS/S/a+cGNtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:12:74:40:b3:05:4c:d1:ad:f1:99:4f:47:87:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80235937adf4dab8925d58045a3371816c980531
Validity
Not Before: Mar 26 06:00:41 2026 GMT
Not After : Mar 27 06:00:41 2026 GMT
Subject: CN=1c92daa6aa92073dd084d91653bf48a040d65c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:05:6f:5b:b6:45:2c:61:70:b5:82:b5:44:
48:31:5b:76:cb:c4:92:d6:52:68:41:cf:20:3f:10:
1d:64:9d:a4:00:c0:db:73:39:b3:8a:ae:62:3c:b5:
9e:d6:62:3a:d9:c2:e9:90:f0:de:78:c0:37:97:51:
d7:3f:cc:af:d6:44:cb:b2:ee:54:ce:bb:fc:3e:e9:
6b:31:3f:7a:79:36:05:2c:cf:81:4c:54:85:36:88:
e0:98:c0:df:d0:1e:bc:8e:93:6f:84:1f:34:e7:5d:
d7:bc:51:c0:f9:10:dc:ec:50:a3:72:fd:32:6d:cc:
8d:78:d0:f4:ad:70:93:12:39:73:a1:9d:61:a6:5d:
db:e1:ac:4d:48:7c:07:13:9f:29:87:2f:2f:67:c9:
f1:3c:99:c5:a1:c0:a2:f3:b1:ce:10:0a:2b:40:a0:
6c:a1:7f:a1:22:a2:c3:8f:7a:c5:35:65:c5:4b:df:
07:99:54:ff:29:23:d3:66:77:f2:c3:55:07:bc:63:
bc:c8:6f:4c:73:5a:40:a1:02:be:9e:d5:d9:47:3f:
fd:8b:4b:99:70:f9:d2:1c:38:89:66:39:8f:be:46:
1c:5b:8f:b0:0a:67:32:7e:c2:31:49:3c:fd:78:cf:
8c:c5:ef:47:61:50:4c:b6:93:83:d5:35:b0:50:9e:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:92:DA:A6:AA:92:07:3D:D0:84:D9:16:53:BF:48:A0:40:D6:5C:5B
X509v3 Authority Key Identifier:
keyid:80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d2:0a:78:ce:b8:f6:65:88:01:b7:dc:54:32:25:71:c0:ae:
60:70:58:0c:bf:dc:c8:fe:3f:32:5a:42:cf:81:a6:ed:81:8b:
98:99:44:5a:17:28:a2:af:bf:7d:0f:3f:29:7b:2c:18:72:81:
89:5c:4e:df:2b:2b:5a:0a:a1:15:bb:fd:52:fa:34:2b:e7:40:
8d:db:95:d5:4a:a9:0b:71:48:62:b3:ef:3d:18:3e:7c:35:07:
42:c4:72:1c:d5:78:34:61:5d:9d:38:a2:8d:6b:d6:c4:e0:68:
5c:07:84:24:c7:ea:50:db:cd:48:df:3a:a5:bc:83:ed:45:06:
71:10:09:86:f7:0f:05:00:c7:7b:af:cf:7e:4b:2e:3c:3d:17:
98:0d:b8:43:74:88:52:11:4d:85:43:df:ea:36:37:a4:6c:49:
3a:1f:6d:35:b6:39:c9:79:2f:94:76:8d:3d:09:67:da:46:6e:
3a:34:b3:1b:4d:0d:30:bb:e2:75:63:4a:ea:35:98:66:bd:13:
4f:23:67:ca:38:58:9d:51:b8:b6:67:30:e0:f3:68:9a:e5:30:
9b:8b:c1:ee:32:e4:5b:60:ce:c0:32:d9:f8:c2:4b:3b:29:bd:
0b:ab:0d:02:df:f4:ca:45:d3:99:09:e7:c9:3c:48:0b:6e:ec:
fd:7b:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:41 2026 by rpki-client