Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: BsolfvptgmAP4xTorly4b9ftl4WnaV25LAYkMfwAtHc=
Subject key identifier: 33:D7:8F:C1:BC:76:CA:97:55:1F:5D:0F:5C:50:D7:DB:AB:3A:E4:2F
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 019D27DF6EEEEA34D3A4E6231AA1B6120013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 06BD
Signing time: Thu 26 Mar 2026 02:00:47 +0000
Manifest this update: Thu 26 Mar 2026 02:00:47 +0000
Manifest next update: Fri 27 Mar 2026 02:00:47 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: bRIATx2PN8Mc8nzgRvuSlTD9s7cC1UV5E3Ri99BGfkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6e:ee:ea:34:d3:a4:e6:23:1a:a1:b6:12:00:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Mar 26 02:00:47 2026 GMT
Not After : Mar 27 02:00:47 2026 GMT
Subject: CN=33d78fc1bc76ca97551f5d0f5c50d7dbab3ae42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:47:21:1f:bb:0c:2d:b6:6d:c2:8e:4c:a6:
13:61:7a:b8:02:e8:77:98:81:0e:e3:d9:b8:47:79:
e3:5f:5f:30:28:38:37:40:cd:ea:2c:a2:ee:05:cb:
5c:76:b6:01:20:a0:59:4b:2b:ff:79:2a:15:74:73:
1d:99:86:2f:0f:5f:82:d4:98:32:de:61:77:f1:8e:
d5:e1:e0:c9:bb:b4:09:d9:70:7d:49:00:e1:48:ce:
d1:c6:a8:47:55:e8:19:36:ea:01:cb:e2:54:ae:18:
12:5a:f8:b2:b0:ca:a8:e4:b9:de:7f:18:ca:1c:36:
1f:0d:4a:0d:d5:63:ac:be:fd:51:11:27:48:85:d8:
7c:ef:73:90:2d:c4:43:5d:a3:66:d0:0e:e0:c4:b5:
ef:ea:7e:28:de:28:87:f2:db:dc:50:66:88:5a:6b:
7a:00:ae:62:b9:ed:af:d4:96:56:f1:d3:e1:74:21:
da:83:8a:e4:64:0c:cf:7b:b0:a3:39:5a:02:a2:de:
d7:18:fb:17:7f:8f:4e:43:50:55:26:f3:1c:f5:91:
aa:57:69:53:d1:6b:60:4c:fb:50:23:43:e9:a1:75:
30:47:82:00:00:94:ab:50:b9:56:3a:b8:85:d9:de:
47:66:d0:32:da:2c:0e:6e:dc:78:a8:d1:fb:a4:0f:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D7:8F:C1:BC:76:CA:97:55:1F:5D:0F:5C:50:D7:DB:AB:3A:E4:2F
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f9:0b:23:ba:67:89:cb:7a:2c:f8:76:14:02:40:86:3c:ff:
0d:26:95:7d:4d:eb:13:58:ec:55:ac:7c:16:f2:db:0b:5e:6f:
f8:3a:5b:1c:04:73:32:d2:59:5f:bf:4b:14:ed:21:8d:06:ae:
fd:02:e3:e2:6c:4f:7b:b8:af:9c:f4:51:0b:c4:f2:15:92:98:
6b:56:88:89:23:a3:e8:8a:e8:77:5e:b0:35:fa:0a:bb:8d:87:
8b:ab:2a:0b:56:bb:b3:e7:b6:b6:be:05:d7:84:e9:a4:4b:25:
0d:ad:e2:49:1b:a0:4e:3c:69:66:3f:cd:cc:37:dd:8c:d9:d3:
ae:e8:08:0f:5f:b0:ca:44:6b:84:16:d1:98:d1:aa:8c:61:c2:
1a:4d:dd:20:8f:ac:9c:64:b0:f1:d4:fa:34:f4:18:5b:f4:c2:
a6:39:f9:1c:a7:6a:a8:70:09:ef:8c:fe:39:c6:ef:28:55:fb:
ec:6e:5f:89:0b:d5:a3:01:3a:18:e2:53:f0:d6:78:6d:c4:79:
d2:ce:99:51:45:08:3d:ae:fc:6c:de:6e:13:b0:51:b8:69:1f:
12:e0:75:c9:03:67:98:83:37:2b:e7:87:4a:67:1e:55:08:f1:
3a:76:44:28:fa:d2:c3:93:05:f0:c3:81:19:10:72:a0:c0:b4:
39:be:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:02 2026 by rpki-client