Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
File: GzVUSY88jdU5wlqdhTSPq4F-2iM.mft (raw, json)
Hash identifier: AMKcPt+dtvxAwabPiks3vYU4pv+xiZrnf/3NmhuIgG8=
Subject key identifier: 45:FC:35:EE:83:57:10:99:02:26:8A:83:B7:08:EE:89:41:E7:3D:45
Authority key identifier: 1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
Certificate issuer: /CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Certificate serial: 019D26CCC39BD9A0ABC877F563DBDF5C0015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
Manifest number: 0D7A
Signing time: Wed 25 Mar 2026 21:00:46 +0000
Manifest this update: Wed 25 Mar 2026 21:00:46 +0000
Manifest next update: Thu 26 Mar 2026 21:00:46 +0000
Files and hashes: 1: GzVUSY88jdU5wlqdhTSPq4F-2iM.crl (hash: 4hOGq5s8mrki3aZQDJ5VsV+a1tSpKDqpwWQ7HN57LLc=)
2: XD-rsCQ7MnQa0FvN9-UFfOu8xoY.roa (hash: Tc60kjga5Dja2TfTQjYcITx+fK92CUP6hqCPaaMpKbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c3:9b:d9:a0:ab:c8:77:f5:63:db:df:5c:00:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Validity
Not Before: Mar 25 21:00:46 2026 GMT
Not After : Mar 26 21:00:46 2026 GMT
Subject: CN=45fc35ee8357109902268a83b708ee8941e73d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:8a:f2:c8:83:1b:4c:81:32:c4:84:54:40:
89:4f:77:a2:34:45:24:cf:d4:94:d4:88:62:6f:79:
38:d0:a7:b0:8d:33:22:b1:bb:b5:5d:50:33:fb:8d:
aa:04:85:33:be:46:e3:4f:cd:f7:e4:5c:09:29:86:
d0:95:03:2c:41:f7:29:00:ca:8e:78:1a:6d:ca:a6:
0f:6d:48:b4:e6:6e:69:d0:98:dc:93:67:96:6a:04:
3b:0f:96:c5:12:51:13:a1:b3:82:9d:e5:8c:ca:c0:
f9:81:96:2e:7c:93:9c:be:f7:dd:7a:40:da:48:11:
10:06:58:2d:8f:b3:36:81:5d:1d:a1:05:a3:4d:b6:
ab:31:92:9f:4f:05:89:0a:08:f8:82:d4:49:a7:89:
d4:00:9e:c4:e3:f3:8d:e5:54:62:52:69:da:96:43:
4f:5f:dc:49:da:4f:c2:8d:2e:87:b5:4b:c0:dc:5d:
37:66:a7:e9:ee:de:b1:77:1b:70:f0:32:35:5e:0a:
18:44:95:c0:ee:fb:e8:a0:7e:23:09:c8:35:db:c7:
cf:31:e7:bb:c5:7e:b8:e7:4c:e7:03:52:5c:6e:1a:
a9:fa:99:49:49:35:f6:13:6e:ad:f5:27:73:c0:84:
95:42:04:07:1d:72:f6:6c:1a:79:eb:42:30:e8:69:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FC:35:EE:83:57:10:99:02:26:8A:83:B7:08:EE:89:41:E7:3D:45
X509v3 Authority Key Identifier:
keyid:1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f4:db:f1:98:61:3a:27:dd:49:02:e6:55:5f:07:99:d7:29:
8a:f7:eb:b5:4b:7d:41:47:a1:a1:72:7c:14:42:b9:cf:71:eb:
cf:34:59:4f:37:6e:4c:f9:d3:43:85:c3:e9:7c:a1:21:b9:23:
e6:52:c6:cb:53:1a:4d:dd:d5:1d:33:75:52:a7:70:1a:af:f8:
a7:ba:9d:96:f4:b8:04:d2:8b:f5:69:f7:13:15:41:20:f2:f8:
e1:e6:88:50:6a:32:43:34:b5:1c:ba:13:59:c8:7e:5b:c6:af:
06:31:b0:0a:4b:a6:c3:45:6f:b7:35:52:81:52:31:f8:95:b6:
4f:c9:8b:ee:41:ed:f0:2d:07:9a:3b:27:e7:db:85:a9:f5:15:
31:bd:5f:ce:fa:12:1a:de:84:9f:4a:1c:0d:fa:de:5a:90:bf:
f0:ec:0f:da:ae:7b:b8:94:ae:16:ac:ee:e0:bb:76:73:ef:cc:
56:0e:a4:07:1a:c0:79:1c:22:78:7f:ef:38:9a:a0:99:60:51:
65:68:42:77:ea:c1:b3:57:ca:b8:19:0d:0b:e0:6e:53:0c:13:
78:ad:d8:45:f0:c2:60:59:90:3a:e1:bd:21:f5:82:64:67:3c:
3e:55:a9:44:05:6f:8a:03:5f:80:48:dc:c5:99:db:85:5c:9b:
c8:0a:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:45 2026 by rpki-client