Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
File: gCVbZMlsAQvaN98j2JJo6OR0jdM.mft (raw, json)
Hash identifier: nqaFD6QvjGq80X9EkMvCuxbd74+d3OUhNHbnb9FPIBE=
Subject key identifier: 1D:20:1D:44:71:21:EA:A1:DA:1C:A0:45:F0:FB:CD:DA:EB:A4:35:51
Authority key identifier: 80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
Certificate issuer: /CN=80255b64c96c010bda37df23d89268e8e4748dd3
Certificate serial: 019D27E0356EEC249D0C870B7A49D9434CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
Manifest number: 0A6D
Signing time: Thu 26 Mar 2026 02:01:38 +0000
Manifest this update: Thu 26 Mar 2026 02:01:38 +0000
Manifest next update: Fri 27 Mar 2026 02:01:38 +0000
Files and hashes: 1: gCVbZMlsAQvaN98j2JJo6OR0jdM.crl (hash: T+6y0NonYc25B6igHErBJakchdKHDa2OYFesST/AQEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:35:6e:ec:24:9d:0c:87:0b:7a:49:d9:43:4c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80255b64c96c010bda37df23d89268e8e4748dd3
Validity
Not Before: Mar 26 02:01:38 2026 GMT
Not After : Mar 27 02:01:38 2026 GMT
Subject: CN=1d201d447121eaa1da1ca045f0fbcddaeba43551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:32:90:a8:cc:f4:92:4d:f2:67:16:21:b7:
6f:8d:a9:4a:e8:a1:20:6d:13:0a:fe:1d:83:af:59:
d1:fb:8c:e3:53:3a:8b:94:98:d7:48:22:4c:94:9d:
79:58:31:9d:9b:eb:c0:21:ce:e7:e4:72:f5:84:a6:
74:9b:32:e4:0e:d2:03:c4:96:d2:ba:b1:3a:5f:67:
34:a0:1f:eb:48:42:f0:f1:48:66:09:b7:40:e9:34:
38:00:7d:2e:85:92:d8:81:fe:b5:a6:7e:a7:bb:91:
9b:9f:ee:9b:e6:19:4e:0c:77:1f:dd:48:a1:64:d5:
83:9a:44:6a:55:38:87:ab:6f:ce:40:56:34:97:ad:
b1:d3:f3:39:a0:e4:2b:a5:b7:e9:7b:fb:db:d8:83:
25:9a:7e:b3:ec:5c:51:4c:87:a0:f6:81:30:4c:30:
1d:a8:6f:f9:02:e0:57:c9:c5:b9:08:99:89:1f:e3:
de:de:ae:b3:2f:fd:d4:b1:a6:22:ef:49:6f:51:47:
df:3a:dc:e5:8b:47:bb:9d:7c:76:75:e9:c1:2e:4c:
ce:08:2d:b1:db:20:25:3f:64:d8:f4:e9:26:f4:d3:
1d:50:e7:cf:60:1c:32:fa:68:97:0a:cb:db:ce:1d:
86:fb:8c:ac:a1:37:27:68:6f:56:63:5a:89:f8:1f:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:20:1D:44:71:21:EA:A1:DA:1C:A0:45:F0:FB:CD:DA:EB:A4:35:51
X509v3 Authority Key Identifier:
keyid:80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d1:e8:76:1b:1c:b4:5b:e9:1b:b5:64:a5:e1:8a:35:df:45:
79:bb:f4:56:dd:89:8c:65:63:1a:6d:ea:8e:a6:05:b3:fe:e3:
0d:c8:4b:6d:e8:ab:a1:00:3e:f6:3f:89:82:4a:aa:f6:fe:ee:
5a:bb:4e:22:ab:bc:d3:a1:04:a2:96:a8:9b:7d:d2:a5:68:0f:
3c:eb:10:c9:8d:8e:83:75:0a:76:7d:23:a1:94:94:22:cd:f9:
ad:43:86:09:ba:5f:fd:6f:6b:c7:39:ad:a0:50:e3:84:a4:05:
be:3d:2a:21:48:34:48:ab:3d:6c:fc:d3:41:f4:92:95:38:23:
cc:d3:e0:a3:23:02:54:6c:cc:58:70:d7:ba:be:c2:0a:34:84:
33:49:57:52:e2:e2:3d:33:df:46:2b:44:81:09:5b:dc:6d:7b:
3e:fd:1d:17:ac:57:1c:53:e7:47:2a:97:b2:97:cc:01:41:86:
78:97:1c:31:5c:36:28:1f:a4:38:53:c5:82:36:f8:b4:af:2f:
76:4f:cd:79:53:eb:28:f4:44:92:e6:3f:de:a1:b6:50:4e:29:
9c:4f:fd:70:c9:88:b8:45:d7:1d:a4:f3:ee:d9:6c:cb:80:8e:
e3:79:e4:03:04:d9:9e:d9:ec:3b:52:a8:f3:6b:cb:fc:a1:61:
4e:59:18:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:15 2026 by rpki-client