Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/290956-7394-466d-93b6-a186b9946a3e/1/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.mft
File: gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.mft (raw, json)
Hash identifier: Ns7aAQuu++/LHX85NY0S6F2VTk+39sCvWm1CTVZM+zs=
Subject key identifier: 0F:3C:69:0D:6F:63:18:10:61:08:68:C5:22:E8:B2:2D:E0:57:39:66
Authority key identifier: 80:A0:81:42:3C:63:42:C9:71:2E:BA:6D:D9:8E:D7:A1:AC:5A:E8:17
Certificate issuer: /CN=80a081423c6342c9712eba6dd98ed7a1ac5ae817
Certificate serial: 019D254CE632C6A4AE629491C1EE63C70CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/290956-7394-466d-93b6-a186b9946a3e/1/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.mft
Manifest number: 74
Signing time: Wed 25 Mar 2026 14:01:29 +0000
Manifest this update: Wed 25 Mar 2026 14:01:29 +0000
Manifest next update: Thu 26 Mar 2026 14:01:29 +0000
Files and hashes: 1: gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.crl (hash: ayO/72HE3dPWqADqgvtkmgjFgrzG1xrwVtS7tyMN6to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/290956-7394-466d-93b6-a186b9946a3e/1/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/290956-7394-466d-93b6-a186b9946a3e/1/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:e6:32:c6:a4:ae:62:94:91:c1:ee:63:c7:0c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a081423c6342c9712eba6dd98ed7a1ac5ae817
Validity
Not Before: Mar 25 14:01:29 2026 GMT
Not After : Mar 26 14:01:29 2026 GMT
Subject: CN=0f3c690d6f631810610868c522e8b22de0573966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:e8:3c:86:10:4d:01:51:98:f4:b2:48:9f:
05:8b:96:41:78:6d:82:6e:4f:3b:7c:e9:fe:f9:07:
72:c8:9e:a3:2d:06:ad:1d:d4:92:55:dc:e6:a9:24:
5d:48:77:44:c6:06:25:fb:fc:21:09:64:19:84:8a:
72:f6:aa:99:6a:21:18:33:b6:45:bc:42:eb:36:44:
37:a1:2b:8d:e7:14:f9:4d:19:e4:3c:72:de:a0:65:
bc:ae:4d:67:b5:18:18:4d:b4:a1:e3:fb:1f:aa:c7:
a3:ed:87:27:5b:f0:0f:b7:8f:b4:a0:6a:f6:ad:e3:
de:ba:a9:85:e6:76:8e:ff:d7:31:39:c7:c0:2f:6d:
96:f4:5f:ba:4d:e5:b0:7c:23:c8:b7:6f:5b:e4:19:
1c:e8:e0:77:2c:92:72:2a:1e:08:1b:58:3f:5c:8e:
d1:65:f6:14:6f:d7:da:42:08:bb:7a:56:5d:d1:88:
1c:e2:c8:e9:10:94:77:cb:79:4d:e8:3c:97:a8:8b:
5d:fd:ac:01:ef:a9:01:94:62:36:5d:3a:93:52:0f:
78:80:84:b7:e0:3f:34:d1:fc:3e:4e:c4:22:15:6c:
30:0c:94:3b:d1:65:cf:43:c1:5f:67:4e:d6:b4:69:
90:ef:d7:4e:fe:38:b7:1d:78:4c:85:0f:68:cd:d7:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3C:69:0D:6F:63:18:10:61:08:68:C5:22:E8:B2:2D:E0:57:39:66
X509v3 Authority Key Identifier:
keyid:80:A0:81:42:3C:63:42:C9:71:2E:BA:6D:D9:8E:D7:A1:AC:5A:E8:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/290956-7394-466d-93b6-a186b9946a3e/1/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/290956-7394-466d-93b6-a186b9946a3e/1/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ae:af:be:ef:4c:8d:e2:e5:cb:d9:11:35:e5:8e:c1:61:cd:
f5:83:cb:ba:c3:49:c0:51:3d:c9:c4:f8:d0:53:bb:4c:88:f4:
4f:ad:da:2c:3f:3d:17:46:ef:77:c2:10:26:ae:81:88:c6:a2:
e2:3e:2b:cc:82:9b:41:ab:4e:9b:63:03:9d:f4:35:6c:bc:40:
d5:99:9b:32:33:04:9f:fd:0d:fa:46:81:19:20:b3:b9:db:08:
4a:2c:16:9b:a4:ad:13:4e:d8:d9:75:1e:2e:df:f1:09:0a:0d:
65:91:46:f9:0d:74:56:6d:d1:39:a9:bd:c2:b3:46:e2:f9:ad:
7c:d2:ec:12:5e:90:50:71:94:ea:13:37:38:c6:81:a5:ae:4e:
2b:85:d7:7f:f7:ca:74:2a:21:4b:a5:68:d2:6d:26:2e:68:aa:
39:69:96:96:12:f2:7d:35:d3:35:3e:d7:7a:52:e0:8d:b5:c1:
a3:91:eb:6b:11:92:ed:7f:36:e0:2b:0c:2e:53:72:45:32:ce:
48:66:5b:45:78:db:1d:f9:97:2c:07:cc:54:3f:e0:e0:66:32:
d3:be:cd:f1:ad:bf:f9:70:01:15:c5:d7:17:03:c1:10:fc:d3:
13:f8:db:2b:cd:3b:00:62:c0:72:db:22:05:bb:bd:e9:86:a9:
5b:0c:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:18 2026 by rpki-client