Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
File: gSdW6ySj41K9bonR9aoISIlhpnQ.mft (raw, json)
Hash identifier: BZVcf+UmyOWat1xgZOmCut0COSH4ip/Asm4U8LStc/I=
Subject key identifier: 46:FB:49:CD:AB:B1:2E:7A:10:65:5B:B2:A7:C9:59:8A:54:0E:F6:8F
Authority key identifier: 81:27:56:EB:24:A3:E3:52:BD:6E:89:D1:F5:AA:08:48:89:61:A6:74
Certificate issuer: /CN=812756eb24a3e352bd6e89d1f5aa08488961a674
Certificate serial: 019D28F2FF017CC8BFFD51FEF5F93A72FBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
Manifest number: 0B9E
Signing time: Thu 26 Mar 2026 07:01:46 +0000
Manifest this update: Thu 26 Mar 2026 07:01:46 +0000
Manifest next update: Fri 27 Mar 2026 07:01:46 +0000
Files and hashes: 1: gSdW6ySj41K9bonR9aoISIlhpnQ.crl (hash: UTF/z2pkpU8JhnhA0r3wMEU+nLk0JDU0THA4OZRPkTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ff:01:7c:c8:bf:fd:51:fe:f5:f9:3a:72:fb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=812756eb24a3e352bd6e89d1f5aa08488961a674
Validity
Not Before: Mar 26 07:01:46 2026 GMT
Not After : Mar 27 07:01:46 2026 GMT
Subject: CN=46fb49cdabb12e7a10655bb2a7c9598a540ef68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:93:df:6c:c9:1b:7a:c0:18:88:1b:c4:92:
79:27:71:d5:bb:1f:e3:93:75:51:ad:7b:96:14:f5:
16:7d:6a:dd:09:77:45:17:50:5d:8f:2e:6d:29:f2:
8c:f0:ba:9b:6d:04:23:b5:b5:88:45:08:f1:26:a1:
96:9e:6b:47:c7:7f:85:f0:6a:3d:09:6f:7d:fe:28:
be:0d:f8:48:62:a2:91:38:5e:31:80:3d:02:70:c4:
0e:b3:4b:f4:3e:91:1d:68:e7:f1:e4:9c:d4:03:ef:
bc:5d:62:f4:14:8e:2f:c4:21:07:63:3f:8e:30:02:
78:da:c7:f6:c0:2d:6c:ec:09:01:45:1c:3e:90:4e:
66:8e:75:35:97:04:e5:04:4d:36:7e:4a:5f:4f:1a:
0b:39:1e:c6:72:e0:fa:d5:14:96:3e:c6:b8:8c:6f:
51:d6:a2:a3:5c:ca:d9:f9:9b:ac:6a:a1:6d:79:17:
13:b7:57:f9:ac:91:44:6f:49:64:8e:94:c6:cc:5d:
46:4c:1c:a4:18:a8:76:a1:b1:06:bf:0b:e4:00:61:
8c:2e:ea:6b:09:cd:2b:86:b1:f0:d2:05:1e:ca:3c:
e3:5b:72:ce:a9:e6:f4:3c:9d:07:ea:49:a2:c3:31:
db:52:4a:06:2a:e5:61:a0:7f:4d:4b:51:9a:90:76:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FB:49:CD:AB:B1:2E:7A:10:65:5B:B2:A7:C9:59:8A:54:0E:F6:8F
X509v3 Authority Key Identifier:
keyid:81:27:56:EB:24:A3:E3:52:BD:6E:89:D1:F5:AA:08:48:89:61:A6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4c:2e:56:7e:75:57:e9:9e:82:8b:8a:3d:1b:91:76:0d:02:
24:8c:f6:9d:12:4b:cb:40:4e:39:99:71:19:19:0a:4b:f6:55:
ce:15:81:69:a3:bf:80:78:4e:62:0e:53:f8:b2:20:51:96:fa:
b4:a2:93:7a:bb:a0:e2:67:5a:69:9a:04:3d:ae:9b:da:7a:e0:
50:42:39:de:08:2e:9f:ad:10:5e:b9:d7:d6:6b:68:11:fa:b6:
ac:7e:fe:4f:27:fe:de:f5:56:0c:ce:c0:ba:bc:1c:64:f3:45:
29:43:47:90:b1:2b:63:62:9c:40:b6:f3:18:0e:a8:6f:9b:63:
5e:b1:0b:f6:3c:9a:1a:be:88:2a:57:bf:ad:6a:21:2b:47:6c:
5e:1b:8f:ba:1f:e2:ac:54:6f:78:a7:ed:56:34:d4:0b:68:d6:
24:97:78:3c:b4:99:81:cf:cb:7a:cf:db:5d:63:73:54:7b:16:
20:e4:01:ec:00:06:89:8b:85:fe:b8:c6:97:40:1f:b5:72:c0:
cd:d7:e8:84:15:0b:d2:9d:83:f1:79:2e:09:a0:8d:f8:f0:7b:
30:ae:c4:58:bc:f1:ab:34:78:bf:16:23:68:a9:bf:37:38:7f:
74:c1:2b:ba:e4:0c:d2:80:20:6d:ca:fd:ec:f2:d0:14:b5:e8:
f1:bc:e2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:11:22 2026 by rpki-client