Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/db70f6-49b1-42ef-8d1a-19f32a5501a6/1/gN8JsnulUZukw6cvWt5YNjL9KbE.mft
File: gN8JsnulUZukw6cvWt5YNjL9KbE.mft (raw, json)
Hash identifier: PSH64GTDxbsgWon4HXCApCZCOFVZkdugnHcjhl7A7AI=
Subject key identifier: 82:21:F5:6F:D0:86:D8:E7:38:B7:89:10:B0:FB:24:A9:C1:12:74:3E
Authority key identifier: 80:DF:09:B2:7B:A5:51:9B:A4:C3:A7:2F:5A:DE:58:36:32:FD:29:B1
Certificate issuer: /CN=80df09b27ba5519ba4c3a72f5ade583632fd29b1
Certificate serial: 019D3307A4A6E6CAC67CE7047C243AEB7C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8JsnulUZukw6cvWt5YNjL9KbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/db70f6-49b1-42ef-8d1a-19f32a5501a6/1/gN8JsnulUZukw6cvWt5YNjL9KbE.mft
Manifest number: 68
Signing time: Sat 28 Mar 2026 06:00:31 +0000
Manifest this update: Sat 28 Mar 2026 06:00:31 +0000
Manifest next update: Sun 29 Mar 2026 06:00:31 +0000
Files and hashes: 1: gN8JsnulUZukw6cvWt5YNjL9KbE.crl (hash: x7aY+jq65GTdqXbcAB1zD65aa5Y4+QLaEdJF3bZ+Maw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/db70f6-49b1-42ef-8d1a-19f32a5501a6/1/gN8JsnulUZukw6cvWt5YNjL9KbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/db70f6-49b1-42ef-8d1a-19f32a5501a6/1/gN8JsnulUZukw6cvWt5YNjL9KbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8JsnulUZukw6cvWt5YNjL9KbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:a4:a6:e6:ca:c6:7c:e7:04:7c:24:3a:eb:7c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df09b27ba5519ba4c3a72f5ade583632fd29b1
Validity
Not Before: Mar 28 06:00:31 2026 GMT
Not After : Mar 29 06:00:31 2026 GMT
Subject: CN=8221f56fd086d8e738b78910b0fb24a9c112743e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ef:c7:93:e6:97:21:62:84:90:c6:32:ce:34:
b9:60:36:d3:58:03:f0:9a:96:ee:85:8e:c5:cc:6f:
15:33:4c:26:e7:9e:6b:59:9c:62:da:50:3b:5b:26:
17:4c:c0:7a:ef:4f:fb:7d:ab:d6:50:a0:8d:d3:9d:
57:e4:a2:e3:fc:21:58:94:a7:89:0d:ae:ee:41:09:
15:30:48:44:a1:1f:eb:2d:2f:1d:88:b6:06:cd:25:
58:6e:b6:d9:51:d3:ee:d0:b7:2a:c7:32:91:5c:31:
76:77:b4:9d:44:b0:03:aa:78:6d:64:fe:31:08:b0:
bc:7b:82:fe:5d:e3:9e:53:c4:cd:49:61:3d:1a:da:
d1:cb:4c:85:7c:00:e2:c1:15:df:d8:0d:de:9b:bb:
66:83:42:36:ed:64:09:96:d4:28:7d:02:c0:b9:84:
22:82:8e:d4:88:b2:51:f9:b1:d5:05:1d:fe:54:2d:
27:72:3e:b8:63:af:9b:5a:fb:2f:ee:75:3d:ce:41:
2f:47:eb:c7:5f:e5:af:83:1f:e0:b5:ae:92:c3:0b:
07:81:c6:d5:43:46:3d:04:57:20:0e:98:08:fd:31:
59:cb:c7:16:8e:13:e4:b0:0a:b1:93:33:64:5d:68:
d0:4c:f8:00:1e:02:26:45:ac:dd:39:82:0b:95:ae:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:21:F5:6F:D0:86:D8:E7:38:B7:89:10:B0:FB:24:A9:C1:12:74:3E
X509v3 Authority Key Identifier:
keyid:80:DF:09:B2:7B:A5:51:9B:A4:C3:A7:2F:5A:DE:58:36:32:FD:29:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8JsnulUZukw6cvWt5YNjL9KbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/db70f6-49b1-42ef-8d1a-19f32a5501a6/1/gN8JsnulUZukw6cvWt5YNjL9KbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/db70f6-49b1-42ef-8d1a-19f32a5501a6/1/gN8JsnulUZukw6cvWt5YNjL9KbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e2:f1:e4:b3:79:ab:44:3a:f7:64:d4:a0:02:aa:d0:9d:f9:
8e:3a:a3:01:69:d7:04:60:1c:c1:a4:3b:66:64:79:00:ce:07:
78:e0:07:69:d6:26:62:9f:92:91:9f:17:0d:a6:50:ab:b7:5f:
9a:e9:ed:1f:38:ce:b0:b4:fb:d4:3e:1e:f4:3e:21:e7:7e:15:
d0:59:30:eb:3a:f2:c0:8a:83:c0:2f:25:47:ff:40:be:05:1c:
78:84:c4:40:b7:16:3e:a2:88:f2:28:a5:42:8f:45:0e:ef:54:
69:1f:e0:24:28:e3:48:1e:0a:66:33:26:21:c3:60:6d:5d:c2:
66:4e:26:77:a1:6a:a3:48:5f:f1:30:a5:bd:51:e3:21:85:8d:
07:a1:d1:47:f7:39:08:81:31:0e:46:c7:5a:3c:b8:19:4a:e7:
74:cc:04:62:5c:e6:e9:b8:73:d8:20:07:b5:dd:ff:ab:86:9d:
1b:98:c6:53:64:6f:46:d6:db:e7:13:b9:f3:1a:d9:a8:df:fc:
4c:1d:d5:db:c2:94:06:bb:35:04:68:e3:88:7b:8a:11:67:18:
78:75:87:7d:f6:d3:5e:ef:f4:b1:64:01:82:16:02:d4:cd:45:
35:a6:53:75:d4:5b:40:d6:1f:7f:1e:36:c3:b0:10:6c:a0:e0:
17:ec:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:42 2026 by rpki-client