Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
File: GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json)
Hash identifier: P8LxfPE+UFq9JGRWrrMmrc40D35y6lWGgtWkKEl6vJs=
Subject key identifier: 60:A7:C4:60:40:2D:D2:01:06:BE:F4:C4:B4:EA:D3:AD:B6:0B:9E:BA
Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
Certificate issuer: /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Certificate serial: 019D2961137287DE4A62B13602B811BB0814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
Manifest number: 1776
Signing time: Thu 26 Mar 2026 09:02:00 +0000
Manifest this update: Thu 26 Mar 2026 09:02:00 +0000
Manifest next update: Fri 27 Mar 2026 09:02:00 +0000
Files and hashes: 1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: L/IEsCXNZRAkDbrK+NyetW6KmY1td0SNEVCIbq9L/Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:13:72:87:de:4a:62:b1:36:02:b8:11:bb:08:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Validity
Not Before: Mar 26 09:02:00 2026 GMT
Not After : Mar 27 09:02:00 2026 GMT
Subject: CN=60a7c460402dd20106bef4c4b4ead3adb60b9eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:a1:9b:15:b0:58:e8:2f:4d:5b:40:b3:12:
b5:e1:74:89:4e:f5:9c:cc:c6:e6:69:0d:9b:5c:37:
d7:64:17:58:c4:23:24:c2:67:41:55:4a:80:48:86:
7d:b6:c6:c9:ba:b9:8b:8a:5c:da:0e:2e:de:8d:6f:
80:5e:3b:bd:4a:95:b4:d3:86:d9:98:54:4d:9d:1c:
f2:2c:ad:00:23:db:f7:0f:19:df:14:62:aa:fc:e6:
4e:e7:9a:a4:0e:34:9a:54:92:e8:82:16:96:85:30:
63:9a:aa:d2:77:f7:9d:1b:93:7f:59:5a:05:f2:7b:
8e:61:42:fa:e5:0e:1f:0b:fd:5d:b7:91:6f:8c:d8:
9e:bd:a5:ef:5b:19:cc:14:71:c1:de:65:47:f1:67:
50:a7:36:04:9d:ea:2d:ac:4a:2a:fa:e2:3e:30:7c:
9a:50:fc:98:f6:94:d2:1c:39:8b:76:53:a2:ff:51:
89:a0:0e:5c:69:d2:1f:a0:cb:0c:f7:f4:97:84:0c:
6e:ec:cb:59:06:21:db:2b:b7:6e:12:c8:00:6c:aa:
6c:db:04:45:52:94:0c:ec:de:67:c2:8f:54:02:0c:
00:55:47:40:31:7e:0e:a2:eb:3f:a5:6b:d7:f0:79:
47:cc:06:49:69:41:e4:6f:66:1a:35:14:c2:66:73:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A7:C4:60:40:2D:D2:01:06:BE:F4:C4:B4:EA:D3:AD:B6:0B:9E:BA
X509v3 Authority Key Identifier:
keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3b:0c:a6:e2:b4:2f:5b:12:16:37:09:c8:1d:68:a1:cc:e8:
61:56:f5:95:d2:04:aa:f0:d7:1c:0f:c7:25:9d:f9:bd:9b:2e:
6f:72:ae:f2:ae:8c:3e:f6:f5:94:d0:ac:da:b2:57:2f:80:dd:
98:45:37:e4:7b:c9:78:59:ca:43:b4:43:93:9a:55:a3:2e:a5:
e1:d3:d6:26:f7:19:3a:b6:d9:60:25:4f:bc:53:dd:bc:2c:de:
e3:ac:84:00:2c:55:cc:e8:8f:4a:bd:67:98:e0:78:0b:f4:e4:
fe:e5:73:22:8a:10:a8:96:ba:6d:82:d5:7b:75:19:aa:58:19:
b9:2d:04:c9:69:e4:07:e7:d8:03:d4:5b:08:ab:be:8f:1c:cc:
c2:ef:de:60:b7:ce:45:35:4c:92:e6:31:c7:a9:a8:47:52:03:
a0:17:b1:b4:1a:32:6d:07:28:40:db:38:9c:c9:56:b9:a4:4b:
71:dd:03:0b:07:e3:9c:35:65:3f:d0:e3:a2:91:f8:b8:19:55:
45:49:e0:e3:89:b6:a1:74:38:1c:c5:24:78:42:fb:e1:d6:a9:
e1:ff:60:0a:25:54:b4:fc:7e:6a:13:26:4b:33:ba:8b:f9:f3:
fe:fa:78:22:8b:f3:fc:76:8b:7c:f0:09:b5:50:ff:49:2e:67:
19:4c:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:59 2026 by rpki-client