Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier: 4qDgIWAsak+6O7M76nn4+vNrKGgLkboO99odJc/KGmI=
Subject key identifier: 8A:59:83:87:52:CB:A0:DB:6F:5B:A1:BF:78:76:D3:96:AB:A8:72:C3
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial: 019D2B4EB10A09F3984D149398E4DDADEAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 18:01:10 +0000
Manifest this update: Thu 26 Mar 2026 18:01:10 +0000
Manifest next update: Fri 27 Mar 2026 18:01:10 +0000
Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: Hfmxp7eqt2gukXu6kdwbyVh9kyaaa4/hGO3f/Y6kQtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:b1:0a:09:f3:98:4d:14:93:98:e4:dd:ad:ea:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
Validity
Not Before: Mar 26 18:01:10 2026 GMT
Not After : Mar 27 18:01:10 2026 GMT
Subject: CN=8a59838752cba0db6f5ba1bf7876d396aba872c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:f4:db:75:f4:16:07:68:33:f7:d7:b4:c1:
85:08:22:06:14:45:c2:c4:44:f8:4d:86:f4:fc:6c:
11:36:0e:73:4f:ce:67:36:bd:ae:b4:6a:78:b0:74:
25:50:11:bb:99:eb:de:5e:24:6d:3e:8e:a3:d4:39:
e2:6b:95:b1:f2:20:d6:47:d9:c3:3d:d6:3a:a3:3f:
2a:18:e8:b4:46:78:33:c6:0a:ec:aa:b0:f4:26:ba:
0c:8f:7d:68:aa:88:1c:e0:c6:b8:4a:fc:93:81:30:
f1:5b:d6:8a:3e:56:c7:1f:4f:ed:d2:1e:9f:c9:a8:
c7:d7:1b:53:9f:c6:6e:1d:b0:68:16:dc:b8:d7:cc:
46:27:68:a2:34:d2:2a:74:4e:63:12:64:24:26:a4:
80:64:cb:5f:df:e3:8d:6c:a3:f0:30:fe:16:b3:8d:
b9:47:28:f0:8c:f1:52:05:e6:e5:4b:82:5a:9c:20:
08:6b:ef:3f:8f:8b:48:a6:23:4c:5f:05:f2:94:9b:
ca:b0:a4:c0:3d:10:46:39:64:8c:19:09:34:b5:47:
56:c2:1a:ac:1f:a6:e3:08:4c:6d:fa:e0:88:e1:e2:
27:02:b6:36:c5:a7:e2:eb:db:44:93:3c:b7:ce:b7:
58:88:dd:18:d2:4c:b9:e7:b7:ba:ca:e7:2b:c6:b3:
b7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:59:83:87:52:CB:A0:DB:6F:5B:A1:BF:78:76:D3:96:AB:A8:72:C3
X509v3 Authority Key Identifier:
keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:46:a3:53:df:4a:6a:5d:d5:8e:20:dc:17:bc:c7:a3:c6:3f:
68:ea:2e:13:f1:4e:2e:4f:55:c6:b2:b5:02:bf:ce:64:cf:7f:
df:5d:b9:da:ca:9b:d0:ad:5b:f5:6f:09:d7:70:a1:c7:87:74:
bc:2d:8c:f5:8e:6a:f1:f0:48:8b:9a:63:c6:8e:b6:10:1a:ac:
b9:2e:12:01:d9:d2:1f:88:40:a3:25:fb:e8:4b:3d:74:2e:d9:
81:54:3e:83:26:d5:dd:97:82:45:15:58:ac:2e:45:4b:e1:0a:
e2:9a:f9:44:02:12:77:43:e0:bd:76:de:b6:11:f3:2b:65:1e:
8d:d9:32:d1:81:7d:ae:5c:ad:94:7e:b3:32:3b:9b:6c:ad:2c:
65:b5:b5:f3:bd:c7:40:c0:81:04:a5:42:32:6f:00:67:7a:a9:
35:30:7c:01:6c:a8:cf:81:cd:6c:58:bf:97:97:39:b9:6a:e9:
17:5e:ca:38:1a:cc:84:17:5f:d9:ff:30:2d:f5:8e:9a:61:05:
35:07:b8:3a:79:5a:f2:3d:81:14:df:42:96:24:cf:8a:87:1e:
23:a0:0b:ec:28:af:e3:cb:98:4c:0a:1d:3c:7a:43:5c:30:1b:
46:34:21:60:ac:3c:67:a9:81:1b:7c:e9:72:28:2d:94:89:a1:
97:15:79:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:18 2026 by rpki-client