Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
File: Gwm9TWooxfH75oPPKs1ei_K65MQ.mft (raw, json)
Hash identifier: KmVzTdbIdCqEkxlQyusnA9/XHRKqJRph0y4Hi0Eb8yg=
Subject key identifier: F5:76:56:D2:07:24:A1:A1:50:63:21:0D:DC:01:4A:D4:62:95:DE:54
Authority key identifier: 1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
Certificate issuer: /CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
Certificate serial: 019D28F2E4F943F647D50B2514CC8B02423E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
Manifest number: 0650
Signing time: Thu 26 Mar 2026 07:01:40 +0000
Manifest this update: Thu 26 Mar 2026 07:01:40 +0000
Manifest next update: Fri 27 Mar 2026 07:01:40 +0000
Files and hashes: 1: Gwm9TWooxfH75oPPKs1ei_K65MQ.crl (hash: EPiNdmLfOYz6yp6JOnjcihwyp4ykM+GabuIWw5CahTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:e4:f9:43:f6:47:d5:0b:25:14:cc:8b:02:42:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
Validity
Not Before: Mar 26 07:01:40 2026 GMT
Not After : Mar 27 07:01:40 2026 GMT
Subject: CN=f57656d20724a1a15063210ddc014ad46295de54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:9c:39:65:5a:b7:c3:9e:d4:5c:86:8e:1c:
85:dd:3c:8d:fb:34:14:e6:3d:40:a7:34:f1:d8:40:
f3:f1:6f:17:88:24:da:12:10:d5:d2:1d:d3:eb:59:
e1:1c:8f:f9:74:7c:d0:98:43:b4:16:5c:d8:29:58:
bc:08:33:ab:88:12:39:a0:8e:fd:c2:3b:99:4c:8a:
5a:1d:98:64:26:e9:4d:25:e9:2e:84:4a:7c:42:a7:
ce:c9:cd:ff:66:0c:43:59:7f:82:82:12:9b:2f:bc:
4c:21:f9:c7:5c:52:12:22:c0:6b:25:17:db:63:49:
ec:d8:93:a4:44:f6:a5:9a:42:27:b2:41:ef:d1:15:
50:0c:a3:00:c5:99:8f:0a:43:69:c6:7e:b2:33:a3:
a5:a5:5b:cb:0b:0b:13:00:33:25:73:13:e6:aa:f1:
c1:40:f7:d0:44:80:93:fd:5a:4b:01:98:51:48:f6:
fd:41:1a:01:55:16:97:79:0e:41:df:cd:ec:3f:6a:
b0:34:9b:ee:58:bf:ee:ea:50:2b:bc:41:57:18:d5:
bf:b1:e0:1a:77:b3:7a:8f:c5:c7:ef:68:2a:4e:bc:
84:81:05:28:e5:c8:d5:d1:af:55:80:a2:d1:3d:48:
a9:f3:6a:e0:6b:25:4a:e3:2f:f0:95:42:4e:3a:d3:
2c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:76:56:D2:07:24:A1:A1:50:63:21:0D:DC:01:4A:D4:62:95:DE:54
X509v3 Authority Key Identifier:
keyid:1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fa:3d:72:85:53:9a:8a:ba:c8:3c:81:39:79:d8:2a:c6:a2:
a8:08:3f:9d:7e:cc:8a:89:1d:a2:2f:9a:57:8b:4c:a8:6e:82:
c4:ba:1a:f5:49:a2:05:fd:5a:3d:bb:27:85:e4:e7:89:6c:94:
00:07:22:15:8c:dc:d9:8e:eb:d5:46:3d:77:76:9a:18:ca:2b:
04:3a:7f:bc:60:e1:02:80:14:e4:83:f8:60:42:74:b9:cf:c0:
b3:c3:8f:2f:e9:78:02:fb:e7:9f:ef:0e:46:e1:2c:f6:ea:d8:
65:96:75:25:25:4c:a7:fe:64:3d:c7:5d:5f:75:ae:39:ce:91:
fb:4e:1b:b4:d7:54:f3:44:86:94:48:a1:33:7f:98:b6:9d:db:
a5:df:3a:02:5a:11:45:79:2c:b3:6c:68:00:fd:60:10:20:de:
ee:ca:4b:89:29:58:55:f0:b3:c7:90:a7:cf:85:2c:11:59:f6:
6b:cb:0a:4b:f7:c7:bf:3e:01:60:56:19:0b:5a:b4:37:c1:83:
bc:dd:17:c5:5f:a5:27:c4:1f:7d:a4:61:ac:d9:79:ee:8e:c4:
8b:bb:6e:ea:fb:ea:02:af:f3:f4:c9:eb:7e:1a:ed:45:f7:ec:
06:94:56:9c:4a:b9:68:07:51:a5:6e:9a:2c:99:82:f6:f9:36:
5a:c6:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:00 2026 by rpki-client