Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
File: gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft (raw, json)
Hash identifier: SXdiaLoRLXoEhqtvXwQ12178ZEpRhk6+v1g/9549Zek=
Subject key identifier: 9A:D1:A9:2F:F3:A1:63:EA:7E:30:9B:8E:32:FE:4A:B8:3E:26:10:39
Authority key identifier: 82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40
Certificate issuer: /CN=827313247c486fe434833c09087a00a900301840
Certificate serial: 019D29617AFA3C7684D7883EEAA11B655401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 09:02:27 +0000
Manifest this update: Thu 26 Mar 2026 09:02:27 +0000
Manifest next update: Fri 27 Mar 2026 09:02:27 +0000
Files and hashes: 1: gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl (hash: yfFBkxwulN/qk0pVzGi8tRZi5Qfp6/J5GWlluj9wP8I=)
2: tfKI27h4y6Yqd_bp6Jq3Mvuha5U.roa (hash: nvsIEu3C8vbMw8Dq30qS8gfgwYf/q4CpFRCeTjasyyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:7a:fa:3c:76:84:d7:88:3e:ea:a1:1b:65:54:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827313247c486fe434833c09087a00a900301840
Validity
Not Before: Mar 26 09:02:27 2026 GMT
Not After : Mar 27 09:02:27 2026 GMT
Subject: CN=9ad1a92ff3a163ea7e309b8e32fe4ab83e261039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:fa:82:79:09:b9:4f:cd:74:1a:1a:df:19:
6d:96:9f:2e:fa:78:39:2c:9a:44:2b:a4:c2:e8:a4:
44:b6:c8:72:cb:e5:5c:06:b8:1d:79:b7:9a:03:ac:
40:18:58:61:27:67:80:a4:1c:2a:43:68:05:0a:51:
65:ef:e7:7c:6d:57:24:40:db:26:14:17:ab:a6:1f:
8b:fc:dc:34:70:c2:45:88:f3:29:60:73:88:19:11:
a2:a1:87:f1:35:28:6b:40:2e:72:74:71:8f:11:e5:
d2:e1:6f:ff:f6:19:0c:64:a6:bc:4c:74:93:18:73:
98:ae:5f:6c:67:d4:f9:68:fd:2c:19:a5:85:58:cf:
73:45:91:1c:eb:15:d4:42:1e:4f:8e:7e:d6:c4:0c:
f9:e7:a8:21:03:de:9a:5d:e3:6f:3a:e2:34:bd:89:
e6:be:d3:d6:52:f9:db:3d:6a:f3:ea:17:27:9c:8b:
bd:d7:5a:0f:6e:fe:ee:ef:e9:87:be:58:21:a2:0f:
d7:18:a5:b3:49:89:aa:7c:8c:81:2d:f9:c6:4b:91:
60:7d:d2:7b:4b:52:86:b7:df:dd:01:c3:ce:43:7f:
9c:49:ed:db:b6:4a:7b:7f:82:22:63:a6:9b:6e:3a:
ff:f6:4b:95:d5:29:af:07:49:b6:e9:8f:61:be:bc:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D1:A9:2F:F3:A1:63:EA:7E:30:9B:8E:32:FE:4A:B8:3E:26:10:39
X509v3 Authority Key Identifier:
keyid:82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:73:13:ef:88:fc:d3:e5:37:66:c8:8e:ce:3c:5e:45:dc:45:
8d:d1:fd:aa:df:f8:42:e7:2e:cf:37:48:d6:a5:75:ec:3d:aa:
e9:18:95:c8:93:6d:7d:6b:04:03:be:01:c3:56:45:16:87:a8:
25:15:f7:33:27:72:45:91:4a:a2:dc:76:b5:2f:65:1c:a1:c2:
ff:7b:74:66:0c:7d:84:be:0b:e4:5f:e8:af:c2:cd:ae:e1:7c:
7e:99:bc:81:a1:14:41:be:d9:9a:48:bc:89:ff:b4:b8:7b:ab:
22:c7:43:a6:6c:94:5d:ea:15:fe:37:98:dd:87:46:87:a0:68:
ae:9d:df:c0:db:3a:52:51:1a:a2:02:8f:94:a5:9d:95:40:47:
42:e5:fd:26:30:ca:c5:a6:74:33:f3:13:98:fd:2e:34:46:c6:
45:1f:38:12:2a:16:9c:3b:8c:f4:9b:65:b3:5f:73:a4:93:24:
d4:0b:b4:d3:07:7b:62:90:0c:30:45:a3:ae:ba:27:22:3c:da:
45:4d:98:62:8f:63:ca:fe:43:e9:c0:ba:61:83:1c:07:b8:c1:
27:7d:84:c1:33:45:9a:85:fc:d5:7e:78:ad:29:6b:07:50:3a:
30:89:fd:93:b3:c0:8c:54:09:35:b9:63:75:ee:3a:55:41:b0:
1b:ba:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:29:48 2026 by rpki-client