Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier: xVuEp1MNMUXgD0myUXDLgVpojNh832OQZl9pzovbL6w=
Subject key identifier: 63:E9:4A:D8:00:15:19:C1:68:46:52:DC:BA:0E:5E:2B:1B:8E:8E:60
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial: 019D2704AE8EB22A611D8AEE618370025D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:51 +0000
Manifest this update: Wed 25 Mar 2026 22:01:51 +0000
Manifest next update: Thu 26 Mar 2026 22:01:51 +0000
Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: 4bEfXsSFWl8W1UyD2O+8H0n1Qsoof4RT1sYOPYauX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ae:8e:b2:2a:61:1d:8a:ee:61:83:70:02:5d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Validity
Not Before: Mar 25 22:01:51 2026 GMT
Not After : Mar 26 22:01:51 2026 GMT
Subject: CN=63e94ad8001519c1684652dcba0e5e2b1b8e8e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:6b:7b:e7:fb:cb:84:d3:f3:f7:37:c1:b4:
dd:b8:d4:68:50:76:8a:ac:5a:fd:e0:d4:a3:d4:f2:
b9:0b:74:3d:0d:8e:0d:65:77:ec:09:53:4c:e3:24:
58:e3:19:1d:7e:d6:c2:52:25:58:d8:f2:38:f2:c6:
09:99:0e:a0:01:97:70:65:64:93:84:2e:9e:2b:8e:
a4:99:e5:c0:a0:fb:a7:5a:64:2f:b1:2e:57:68:f3:
78:c7:c3:12:94:04:75:63:29:1c:fa:89:2f:06:8a:
b7:0b:bd:f9:86:98:4f:0e:81:78:21:c9:d9:11:e7:
eb:54:dd:4d:b0:c8:06:ce:eb:e7:08:14:8d:86:eb:
00:f3:80:1a:84:cb:17:8d:c1:93:eb:c6:cc:91:b3:
df:08:da:d9:8d:3f:03:b7:64:ed:32:d9:09:5e:be:
5c:58:20:76:5e:66:b5:65:66:c6:ee:1c:d8:9b:63:
01:43:3e:94:0f:c9:e6:b0:db:c8:15:94:8a:ca:dd:
87:e9:76:ef:12:d5:ae:42:e9:61:26:ba:df:56:57:
3b:2e:4c:b2:74:56:2c:48:68:23:3a:06:cb:e0:f2:
3d:65:ea:ba:ff:b3:6d:fb:e0:39:64:1a:38:58:46:
11:a9:a5:02:f3:78:cb:ec:97:11:31:86:4c:1c:cb:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E9:4A:D8:00:15:19:C1:68:46:52:DC:BA:0E:5E:2B:1B:8E:8E:60
X509v3 Authority Key Identifier:
keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bd:af:6c:e5:c7:b3:9d:e8:44:e6:9c:38:59:bd:a5:96:5b:
23:6d:85:41:c6:bf:b0:ae:45:33:2b:75:9f:03:4d:80:d3:5d:
53:ce:22:e5:7b:77:72:86:5c:00:fe:46:6b:ff:0a:19:14:51:
c7:cf:76:16:30:31:8b:39:ae:31:ba:7b:89:1e:1c:bd:b8:38:
33:51:f8:ed:56:e2:33:26:2f:50:3f:37:4f:81:67:c0:9b:54:
7c:6b:fb:87:7b:fa:f1:aa:b6:65:38:38:61:b3:68:9b:a2:b5:
53:55:09:66:ec:64:b1:f8:93:f4:9a:c2:c2:32:9a:c7:a6:ff:
08:78:8a:06:89:94:e0:45:e8:92:61:4d:b1:21:8e:0d:b0:a1:
71:66:5d:01:6c:20:11:ba:fd:e4:66:77:1e:aa:9d:aa:c1:63:
85:03:0e:76:70:51:4c:36:31:cf:49:cf:e1:64:85:f2:fe:dd:
12:35:b6:60:eb:2f:2f:c4:41:e2:8e:10:bb:12:c9:67:7e:bb:
49:d0:ad:1e:c7:f1:ef:55:51:58:a4:f9:03:cd:93:34:62:7e:
62:56:4d:f3:26:ee:91:2d:0f:1a:2f:b1:f6:93:3b:cd:c3:74:
f4:3e:88:8a:7d:e8:2f:a0:63:ca:6a:e1:94:d2:41:04:b4:f6:
22:30:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:51 2026 by rpki-client