Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
File: gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json)
Hash identifier: hLdZLuui+LM+A1Ax7hY3cO17JJPc+uFfXY9LbWWVqIQ=
Subject key identifier: E9:57:26:F6:AF:EC:1D:40:87:D3:42:E3:4C:5B:02:B0:27:03:C8:4E
Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
Certificate issuer: /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Certificate serial: 019D28F21934D8460CCF675D9C3C1808AF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 07:00:47 +0000
Manifest this update: Thu 26 Mar 2026 07:00:47 +0000
Manifest next update: Fri 27 Mar 2026 07:00:47 +0000
Files and hashes: 1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: WNRdSHu7rttJ31olQJWqcgugeV1/dYj7jv/mh/mlYzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:19:34:d8:46:0c:cf:67:5d:9c:3c:18:08:af:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Validity
Not Before: Mar 26 07:00:47 2026 GMT
Not After : Mar 27 07:00:47 2026 GMT
Subject: CN=e95726f6afec1d4087d342e34c5b02b02703c84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:b7:b2:92:45:bb:4a:fb:5b:a1:3c:7b:e3:
0a:67:f3:48:64:30:e0:1a:91:8c:8e:1c:c2:b6:a5:
c4:65:ed:8f:c8:a8:f9:bf:05:af:d9:0f:9d:68:26:
28:1b:b3:db:1e:5d:bf:4d:b3:cc:cb:28:95:e3:5e:
d2:85:4f:49:99:49:ce:9c:6b:06:d6:73:dc:d7:73:
46:ad:ed:52:a9:4a:10:de:35:da:be:9f:44:08:22:
f5:db:31:02:d6:53:5c:77:53:2d:70:2a:8f:2b:84:
6d:a5:29:aa:d2:ae:e0:c0:9d:4a:ef:17:55:c2:bd:
a1:de:2d:bb:63:84:78:ed:b9:c4:eb:66:5d:70:b6:
db:87:1a:7a:d0:6a:8d:94:af:6a:65:c2:8c:90:72:
1b:2c:08:72:55:a8:cd:b3:ed:d0:72:ea:a1:99:0a:
8c:fc:10:51:2e:ea:82:66:0d:0e:e7:57:8d:39:c6:
a4:aa:2e:6e:19:78:ad:12:ac:3c:7d:49:13:28:52:
ca:78:51:e8:5c:37:c0:b1:6a:ac:3b:3c:5b:0c:16:
21:05:ad:de:df:ba:78:4c:ce:68:f0:e7:9c:bf:65:
26:b2:a2:8f:55:69:79:40:73:46:53:53:ef:9f:34:
e6:8a:c9:e6:73:23:2e:c0:b0:67:18:14:b5:54:0b:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:57:26:F6:AF:EC:1D:40:87:D3:42:E3:4C:5B:02:B0:27:03:C8:4E
X509v3 Authority Key Identifier:
keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:63:4d:c5:30:a3:1a:bc:e6:ee:cd:76:76:df:ad:72:02:48:
be:58:ae:49:33:54:15:57:64:d6:09:e2:a8:b9:20:7e:69:d7:
e9:a1:c2:61:16:1d:00:64:39:83:49:68:46:2f:59:b6:a8:ea:
09:ae:5e:b8:41:7c:ea:3b:69:1c:16:da:64:08:5f:a0:f5:b1:
6b:4c:53:ac:c3:99:29:ae:93:0e:7e:d8:c1:05:20:38:40:df:
04:74:52:ef:53:ee:6e:f2:e7:fe:b3:36:99:4d:6c:22:38:20:
be:7d:10:bc:6b:cf:23:98:bf:3a:ab:cd:16:9e:ab:8e:44:92:
cd:51:ec:fb:e8:f7:40:bb:f8:d0:08:ef:1e:3f:f2:3f:ea:cd:
46:98:a5:ac:ff:99:1c:b7:ba:01:bd:5a:be:73:17:ae:24:c9:
d1:b3:4b:42:d0:e8:70:60:b7:a1:90:00:b1:0e:fd:31:1a:db:
bf:87:fc:64:0e:da:e5:9a:22:d4:f8:28:d7:14:21:b9:d8:98:
f1:69:69:db:0e:b4:dd:44:ca:8e:91:68:35:cf:e8:7c:4b:75:
0f:de:cc:cf:52:c6:24:42:b2:5f:8a:32:22:7b:97:31:14:fe:
d4:17:ac:77:ab:bf:1d:87:e7:27:9a:f4:30:eb:c0:91:ec:25:
cc:5c:8c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:49 2026 by rpki-client