Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
File: gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft (raw, json)
Hash identifier: rrkyXJILrULqE/bEPrIZdttpPPapmeGcyo7d2wZ3B6I=
Subject key identifier: 27:B3:02:13:53:38:E7:C5:E8:AB:6F:98:57:8E:3D:7A:CC:F3:76:B8
Authority key identifier: 81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
Certificate issuer: /CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Certificate serial: 019D2AE0DE93C411095B6601D618A256089A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
Manifest number: 11F6
Signing time: Thu 26 Mar 2026 16:01:13 +0000
Manifest this update: Thu 26 Mar 2026 16:01:13 +0000
Manifest next update: Fri 27 Mar 2026 16:01:13 +0000
Files and hashes: 1: gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl (hash: 8Y6zOTC2mT4usdnxf109Ml3yl52iMisTUz4De0nEvJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:de:93:c4:11:09:5b:66:01:d6:18:a2:56:08:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Validity
Not Before: Mar 26 16:01:13 2026 GMT
Not After : Mar 27 16:01:13 2026 GMT
Subject: CN=27b302135338e7c5e8ab6f98578e3d7accf376b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:70:73:e5:33:d9:44:07:07:36:31:cd:6d:
fc:09:60:b9:73:58:7c:97:b1:5c:d2:17:0b:c9:fd:
1a:14:3f:e0:b8:59:96:a5:e3:c6:7c:76:2b:76:e2:
cb:ed:54:21:4a:37:1e:ef:61:06:34:91:b5:61:bf:
a3:3d:ee:02:9a:99:13:61:2e:d3:ff:aa:ac:e6:92:
78:6d:45:88:22:ad:f1:d9:55:46:52:2c:86:62:05:
c1:13:3f:d4:1e:64:c8:5d:d9:06:08:87:79:32:cf:
35:3c:b9:5a:7a:5e:cd:bb:b7:7e:c3:86:04:d7:0e:
3f:4d:48:74:f9:50:d7:4c:ab:bc:c7:29:3c:86:ed:
a7:f5:35:9b:81:ea:b2:86:a2:2c:45:02:5f:3e:a4:
99:ee:29:d7:0c:d3:06:61:2d:30:92:d5:52:52:8c:
6f:d0:d3:aa:00:d0:db:98:6a:11:3d:13:0d:8f:4c:
4a:a4:ff:72:f7:73:51:40:b1:ca:0c:30:2f:fe:36:
9b:7c:29:5f:9d:a9:df:ba:64:6d:c4:2e:d3:89:f1:
19:10:c4:35:fc:a2:b7:6b:f9:bc:e6:5c:51:b4:13:
8e:45:52:d6:1a:e9:f6:25:7d:5b:8e:4f:f8:22:d9:
35:67:f5:33:99:e9:c4:8b:d2:9e:66:9a:1e:85:d8:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B3:02:13:53:38:E7:C5:E8:AB:6F:98:57:8E:3D:7A:CC:F3:76:B8
X509v3 Authority Key Identifier:
keyid:81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:73:9a:87:0f:46:e5:3a:d7:d0:bd:21:91:4e:53:63:2b:41:
29:61:d8:a1:d6:e4:9c:59:20:ab:b2:dc:d7:1b:bc:db:c9:5c:
59:d0:5d:91:c7:9f:54:9b:25:7f:15:b8:ea:84:20:92:2e:ae:
e0:57:48:3f:89:75:47:2d:29:18:ef:88:37:aa:2a:ef:9e:c5:
c4:55:93:de:4d:44:29:46:52:a2:e4:56:8f:6d:09:8b:dd:ce:
b9:2f:a5:2a:8e:b0:2e:5c:04:d9:fb:6c:71:ce:c2:d2:ba:2f:
dd:7e:9f:be:ca:0a:5b:8d:79:f1:b6:6c:c4:e9:df:39:0e:83:
15:99:8c:f0:13:df:32:b3:4f:d1:cb:ef:08:c2:06:ac:f2:a0:
26:ed:3c:79:8f:4a:61:b2:7b:c7:9f:85:9b:d9:29:27:d5:4c:
31:2b:74:53:89:db:7a:f5:e0:ab:5c:fb:f7:fd:18:e6:19:d1:
1d:5f:9d:28:70:15:de:5b:fe:07:d1:33:67:d0:16:12:9f:76:
18:2e:70:16:c2:92:e9:10:5e:1d:55:db:28:9a:17:50:59:cc:
da:3b:a0:a7:75:d4:66:d6:42:08:42:71:5f:55:94:f0:c1:41:
8a:d6:37:8e:88:7d:8c:cb:5b:47:9b:18:df:65:bd:7d:00:18:
d7:9f:37:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:49:17 2026 by rpki-client