Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.mft
File: 58_GwHE9iA8Xja-Ve5gjMImuTVU.mft (raw, json)
Hash identifier: 3lh8Xj6uwpl1RZVXYHCYJuhfAYHMY2lew4rcTIrMzHI=
Subject key identifier: D1:E9:70:0A:AD:65:EB:CF:C7:DD:73:EB:BC:6F:DD:F8:76:29:CD:7D
Authority key identifier: E7:CF:C6:C0:71:3D:88:0F:17:8D:AF:95:7B:98:23:30:89:AE:4D:55
Certificate issuer: /CN=e7cfc6c0713d880f178daf957b98233089ae4d55
Certificate serial: 01A0D34AE01EE87D72F16DF9D2B4F8A315ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58_GwHE9iA8Xja-Ve5gjMImuTVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.mft
Manifest number: 9E
Signing time: Thu 24 Sep 2026 12:01:34 +0000
Manifest this update: Thu 24 Sep 2026 12:01:34 +0000
Manifest next update: Fri 25 Sep 2026 12:01:34 +0000
Files and hashes: 1: 58_GwHE9iA8Xja-Ve5gjMImuTVU.crl (hash: CnwKvDmjJhXeTjPc28fVfwxQ4NPRBgDA56j8E6D+5xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/58_GwHE9iA8Xja-Ve5gjMImuTVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:e0:1e:e8:7d:72:f1:6d:f9:d2:b4:f8:a3:15:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cfc6c0713d880f178daf957b98233089ae4d55
Validity
Not Before: Sep 24 12:01:34 2026 GMT
Not After : Sep 25 12:01:34 2026 GMT
Subject: CN=d1e9700aad65ebcfc7dd73ebbc6fddf87629cd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:57:18:54:02:ed:4f:7f:7a:89:85:cb:0a:
e2:87:bf:5d:78:e1:71:b8:d2:96:e3:fe:b1:21:e7:
60:87:a9:ea:a0:d3:1a:40:7e:95:1e:b2:68:bc:d9:
d6:e1:5a:4f:c5:7b:94:3e:bc:76:a3:24:3a:f5:b2:
3c:a1:56:f0:1a:b2:a2:e1:0a:4d:0e:0c:79:c6:58:
ec:07:26:d3:3b:25:d8:16:9d:a1:91:12:3f:01:eb:
e7:2d:97:59:6b:c5:5a:74:0a:6c:ad:26:cb:15:9b:
3f:ba:06:5b:6e:85:f4:60:02:95:3e:a5:7f:48:1c:
3f:af:f3:0a:d1:bb:45:41:e4:bc:4c:ea:06:64:c2:
0a:4c:06:11:d5:3e:3b:b5:28:cf:de:a2:95:c4:f9:
59:67:c3:d3:dd:7a:58:ab:77:b1:96:d6:5d:90:b3:
a2:c2:47:e0:ec:2f:b3:19:80:f1:fd:36:f0:11:76:
c7:38:a5:81:8e:ab:9d:76:66:af:1c:6b:f7:61:f7:
de:be:32:00:c6:11:38:86:3d:96:a1:28:13:2f:aa:
56:db:05:f8:4f:ba:34:52:cf:32:f6:7c:e9:41:42:
9d:7d:e6:c0:0f:93:9c:23:0a:1c:29:9e:6c:a2:4e:
7a:6f:40:b0:c1:d6:fd:49:29:8d:19:66:89:d0:66:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E9:70:0A:AD:65:EB:CF:C7:DD:73:EB:BC:6F:DD:F8:76:29:CD:7D
X509v3 Authority Key Identifier:
keyid:E7:CF:C6:C0:71:3D:88:0F:17:8D:AF:95:7B:98:23:30:89:AE:4D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58_GwHE9iA8Xja-Ve5gjMImuTVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8e:1c:f1:94:1d:96:ba:2f:3e:3f:f5:fb:3e:fb:3c:4f:73:
5d:ce:f1:4a:3d:5c:2c:1f:b9:32:ef:47:3f:86:31:35:37:90:
4a:eb:1b:bd:52:68:50:b7:c3:dd:d7:46:39:22:7c:f2:c8:49:
5a:cb:5f:24:0b:59:18:4f:55:73:a0:bc:aa:2d:be:ad:72:bd:
6b:56:37:95:75:0b:b1:ab:17:37:b6:76:d2:d4:78:b2:61:16:
56:11:1d:85:e0:19:b1:54:19:ac:bd:4e:fa:fc:0d:cd:c7:8f:
f6:6d:6f:88:ec:cc:64:2e:92:b7:3e:14:bf:64:97:75:54:79:
7b:5a:31:69:45:f0:74:64:c4:e9:a5:c2:bd:60:e3:d5:09:f1:
44:cc:c9:cc:54:5a:c4:de:6e:8c:08:71:8b:52:7b:c0:f9:eb:
b0:c2:47:5e:fc:b9:7d:6b:81:1c:95:f3:40:61:4f:e1:44:c6:
02:e0:91:55:26:73:cd:84:83:89:39:4b:e8:f1:75:dc:bb:0b:
d4:b6:21:48:71:aa:e1:14:ab:50:6f:0c:00:59:4b:b3:8f:66:
de:fa:50:88:b6:4e:d0:35:de:f6:10:9c:8e:70:e9:c7:65:3f:
4a:ed:f6:0a:e4:90:78:64:13:b6:4d:69:f2:d1:98:46:2a:13:
8f:5f:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:02:57 2026 by rpki-client