Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
File: gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json)
Hash identifier: 9dtIhfqlDYJf6bfGEBxrN2M2pEfaCNdNQWB33UJQC2k=
Subject key identifier: 4E:1C:7C:79:D4:9D:09:BB:94:E6:FD:41:D2:54:C8:20:F2:91:DD:03
Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
Certificate issuer: /CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Certificate serial: 019D270486DA6632EE03B0516F4203273E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
Manifest number: 15BE
Signing time: Wed 25 Mar 2026 22:01:41 +0000
Manifest this update: Wed 25 Mar 2026 22:01:41 +0000
Manifest next update: Thu 26 Mar 2026 22:01:41 +0000
Files and hashes: 1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: CbxBNrAcF5UKdMUJjlGiLqSFHOaw9BD/FEk7M04EiSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:86:da:66:32:ee:03:b0:51:6f:42:03:27:3e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Validity
Not Before: Mar 25 22:01:41 2026 GMT
Not After : Mar 26 22:01:41 2026 GMT
Subject: CN=4e1c7c79d49d09bb94e6fd41d254c820f291dd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:e0:b0:ae:1a:b3:6a:69:54:2c:78:ff:bb:
a8:59:f4:87:ab:53:ef:4f:e0:d4:0d:f1:fe:12:ac:
50:1c:72:0d:56:d0:fd:e8:0c:6c:9a:79:60:69:62:
2d:ef:d6:92:c9:66:39:48:36:c7:22:6d:c8:cd:79:
c1:a4:1c:bb:fc:62:27:d5:3b:22:6d:44:6d:f5:53:
f4:0b:ba:68:4b:62:07:3e:74:71:09:7c:5c:1c:d1:
fb:06:5e:c7:de:cd:4c:f0:4b:c7:17:72:db:0c:f6:
b0:e1:f7:90:b5:18:52:f0:e1:6a:2c:86:f4:28:9b:
e7:c3:34:30:04:d8:bc:24:1c:f2:c5:19:02:81:33:
24:38:8c:52:b0:6d:3e:bd:7c:c3:dd:06:28:9f:ba:
ef:6b:3c:4e:c7:04:96:51:1d:e2:20:7d:af:1e:51:
41:e7:9c:2b:c1:12:66:14:4f:7d:6b:96:33:c5:af:
79:85:aa:55:21:c7:e7:49:f4:35:93:94:49:97:bd:
fa:cc:42:fa:52:e7:92:2c:35:51:52:74:0e:08:09:
00:de:76:cb:0d:33:92:90:98:d1:dd:84:91:2a:f2:
3a:e0:a6:13:0e:2c:c4:0e:53:c4:a6:93:df:56:1d:
6a:65:32:52:73:c4:36:a2:5c:30:49:41:4e:af:fd:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1C:7C:79:D4:9D:09:BB:94:E6:FD:41:D2:54:C8:20:F2:91:DD:03
X509v3 Authority Key Identifier:
keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cb:c3:94:d1:36:b3:7a:d7:9d:b1:4a:e5:54:68:35:2d:bb:
a0:db:ee:51:dd:1c:a0:84:67:7a:e0:9c:a5:d5:ae:cc:d6:e1:
d3:d8:60:08:13:7b:6a:bb:5a:e7:30:f0:6f:3f:eb:6c:8b:99:
8d:8c:8f:bf:dd:e3:46:b2:5d:5f:50:80:de:17:fe:ba:73:cd:
06:a5:f8:33:0b:74:d9:87:62:94:9d:25:d1:d8:44:0e:f7:57:
5a:3c:e7:63:49:61:9f:13:8a:e1:65:92:b9:96:5b:3f:0d:09:
8a:f1:13:99:3e:d3:fb:3f:b1:da:72:d5:10:d0:0d:bf:ce:55:
eb:b8:db:4f:3f:77:60:19:d2:46:63:06:09:ac:1e:ac:e4:59:
e4:b5:51:19:89:a7:87:e5:8d:d6:1b:90:1a:0a:1e:8d:a0:58:
0a:45:5f:b0:40:57:98:89:a4:a8:a7:9b:45:97:64:db:c5:95:
34:99:fe:1c:57:00:46:8e:98:84:8f:c6:65:f4:d6:25:8a:1c:
a3:33:2d:fd:f3:40:5c:c1:0e:38:09:b4:0a:b8:68:76:15:4e:
6b:3e:89:34:ab:c0:ee:5a:87:a2:6a:a5:ca:e3:21:97:43:4c:
60:4c:0c:fc:c9:2a:d4:35:bb:8e:ed:f2:9e:e6:c0:5e:4e:5d:
4d:31:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:35 2026 by rpki-client