Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
File: GR0Irp2FEZYMPHuEweKmZiHiReE.mft (raw, json)
Hash identifier: 6ix7GDZoKwiJDC3e4j7Bc84QxtVRodGC5bOeijeorbc=
Subject key identifier: 39:66:AE:CC:C7:36:81:B7:F6:1D:FD:70:64:63:65:51:CA:70:38:BC
Authority key identifier: 19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
Certificate issuer: /CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Certificate serial: 019D27DFD5BAF4503395C67C1034BE80E419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 02:01:13 +0000
Manifest this update: Thu 26 Mar 2026 02:01:13 +0000
Manifest next update: Fri 27 Mar 2026 02:01:13 +0000
Files and hashes: 1: GR0Irp2FEZYMPHuEweKmZiHiReE.crl (hash: NOc+3Hix6N290DlReChBH8zF8+vl9pxGBn/k+qELCpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d5:ba:f4:50:33:95:c6:7c:10:34:be:80:e4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Validity
Not Before: Mar 26 02:01:13 2026 GMT
Not After : Mar 27 02:01:13 2026 GMT
Subject: CN=3966aeccc73681b7f61dfd7064636551ca7038bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:be:cb:38:e7:ba:f0:a6:ae:ad:5f:ad:61:
00:58:69:eb:20:37:dd:2a:bd:57:8f:19:59:c1:60:
e8:a5:fa:0a:8d:e1:ae:3e:a9:78:39:c0:9a:db:b6:
d6:02:05:d9:74:40:ba:78:86:3e:9a:62:a0:f2:80:
69:7e:36:84:83:28:9d:07:20:79:8e:9a:aa:4f:f3:
e5:cd:f8:25:07:48:c7:5d:a8:ad:e7:33:80:6b:f8:
2c:cf:af:74:ce:ec:ae:7d:85:f5:06:a2:e5:15:8e:
2b:7b:50:af:58:f0:2e:a2:48:11:b4:52:1b:42:4c:
89:bc:6a:5b:80:62:c7:77:5d:24:71:67:26:65:16:
c0:49:3d:7c:41:83:7d:c3:00:4f:53:c4:4f:42:68:
38:0b:0f:84:f5:6c:0e:96:ed:19:75:70:e3:e8:d7:
42:ff:a7:c4:03:af:33:09:06:e2:e8:ec:ee:e1:9f:
04:ca:7e:c6:1e:07:48:02:10:c6:f7:b8:cc:d1:4c:
4a:dc:ab:a2:6a:c6:c2:0b:9a:42:e1:f3:57:ca:bb:
a8:c6:83:51:9a:ae:be:43:56:f0:cd:2c:43:60:2f:
6b:79:27:16:1a:10:d5:c8:6c:18:d0:4a:6c:4a:cf:
6a:09:b1:42:05:51:f2:c6:b5:db:d4:70:42:ff:41:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:66:AE:CC:C7:36:81:B7:F6:1D:FD:70:64:63:65:51:CA:70:38:BC
X509v3 Authority Key Identifier:
keyid:19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ca:29:87:9e:ca:1e:a1:f3:a5:e0:55:0b:36:38:d2:2b:42:
34:12:c3:5e:3c:d0:e2:19:62:c2:1f:ba:d8:a7:75:39:9b:57:
5a:e0:bc:fd:7e:76:90:fd:89:ea:19:ba:0f:b8:80:ce:99:4d:
13:c5:72:97:40:2f:d7:cd:82:20:78:f4:7c:c6:fe:e9:50:32:
73:73:3a:d0:39:66:d7:56:ef:56:2f:0f:d4:89:cf:76:46:8e:
9d:dd:ab:9a:a4:af:5a:90:d2:3a:f3:13:b0:b9:c0:a9:c6:1b:
6d:fa:c9:88:1b:48:b8:e5:a9:21:85:07:a8:a8:29:4e:8b:2b:
0f:86:8b:d7:5a:9d:47:30:df:43:3b:a2:e8:19:ad:42:38:89:
09:cf:b5:e5:31:c9:72:63:66:a8:17:11:0f:1c:c5:23:01:13:
09:ae:f6:90:dd:7f:20:67:8f:a7:57:5e:33:8b:b1:30:1f:d3:
16:d5:d0:c1:a7:e3:f6:60:d9:91:d8:ad:19:52:0d:cb:c5:75:
55:3c:6f:4a:55:62:7a:f5:3f:ff:a7:ee:d4:f1:70:ab:7d:5a:
1a:ab:ab:9d:0d:66:70:0f:c6:1d:38:5c:20:49:a8:ea:98:f6:
53:08:1c:64:44:d8:48:9a:b6:98:f4:f3:0f:76:12:f2:3b:1f:
ac:2f:47:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:45 2026 by rpki-client