Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
File: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft (raw, json)
Hash identifier: SrwKzDEeKXJNteQGXF/vpLsVkp2zOufu0GvFGOkmVxo=
Subject key identifier: 33:94:2D:6A:17:08:03:E3:17:22:6A:63:7F:F1:0D:A0:BD:C2:DC:F6
Authority key identifier: D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
Certificate issuer: /CN=d60ce3443860a7f70d43350776909a4810a48621
Certificate serial: 019D270468B26F3DADF9332ABE2A6CB1DAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
Manifest number: 0DCB
Signing time: Wed 25 Mar 2026 22:01:33 +0000
Manifest this update: Wed 25 Mar 2026 22:01:33 +0000
Manifest next update: Thu 26 Mar 2026 22:01:33 +0000
Files and hashes: 1: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl (hash: y0e1IQ6o5gcqzw/vRaybRB6rOpHXyWYvCmDnccDwOIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:68:b2:6f:3d:ad:f9:33:2a:be:2a:6c:b1:da:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60ce3443860a7f70d43350776909a4810a48621
Validity
Not Before: Mar 25 22:01:33 2026 GMT
Not After : Mar 26 22:01:33 2026 GMT
Subject: CN=33942d6a170803e317226a637ff10da0bdc2dcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:cb:e6:a6:96:b4:32:ab:f7:7d:df:08:c6:
78:dc:e6:e2:88:fc:e4:d2:13:15:36:a4:5b:60:2b:
20:35:e3:95:b9:59:c9:1b:be:f4:ef:6f:25:bb:87:
a5:af:c3:d6:e7:80:36:63:63:88:c3:8f:37:c0:22:
8b:ce:1a:07:05:01:78:ee:26:42:ec:64:e8:a9:2d:
31:ef:ba:cf:7a:76:73:8e:5e:4b:ac:ca:14:ae:ae:
d3:e0:a4:50:83:b8:d4:70:80:c0:5a:15:96:0d:e7:
91:cb:5c:95:61:0c:3a:8a:c7:d9:fb:85:85:10:64:
24:06:d2:31:90:df:00:77:ac:4d:2b:a8:51:f8:68:
6f:b9:ea:3d:db:90:df:c3:ab:da:90:b3:92:b0:16:
ba:cb:61:8a:6c:ba:c3:3b:6c:64:fe:c2:c8:69:8f:
23:2e:c4:ab:60:c9:c1:89:de:75:29:76:74:46:98:
d8:24:04:6b:57:0a:21:81:85:9f:f1:74:ea:90:49:
c3:23:43:92:56:0d:70:fb:e6:24:b7:77:19:58:2d:
63:84:03:5e:7f:98:90:68:bc:be:25:60:56:3e:16:
33:8c:72:1a:0d:45:f7:55:3a:05:30:24:b6:20:ae:
07:11:88:02:60:a5:0d:d2:50:89:76:5e:bb:d5:e3:
4f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:94:2D:6A:17:08:03:E3:17:22:6A:63:7F:F1:0D:A0:BD:C2:DC:F6
X509v3 Authority Key Identifier:
keyid:D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1e:e5:5d:91:b7:e8:c6:5f:bd:09:e5:58:ef:65:2f:8c:0b:
4e:9c:4b:59:0e:a6:08:5b:0f:e1:8c:f5:b0:3c:ac:c9:22:38:
69:90:cc:15:fd:99:99:37:57:a8:f4:5c:04:0b:25:4c:ce:03:
fc:21:9e:f2:1f:56:98:3c:c5:e0:80:99:02:c4:4a:0b:f5:ce:
d1:7e:de:b2:b9:91:84:f6:e0:45:e1:d9:55:17:0b:3b:87:b8:
33:30:8c:62:bf:03:61:8c:69:19:3e:07:11:a7:4d:5c:40:ed:
20:67:2c:8b:36:68:b0:ae:ea:3f:3c:76:60:65:ef:09:d6:ff:
ea:d8:00:3d:6f:3d:3b:83:b5:1c:48:e4:c8:6a:34:80:80:44:
d3:cc:96:9d:3d:90:6a:4d:ae:9b:4a:f4:86:19:8d:2e:8d:38:
5f:b3:c5:ae:df:17:47:d6:70:cf:7f:80:1b:39:94:c6:1f:c6:
a7:28:68:fa:cf:08:f8:d3:8d:49:46:74:9c:71:b3:82:84:71:
f1:56:d9:81:ed:4f:54:e8:f7:40:02:1f:b2:ef:b3:40:3f:92:
c8:e2:04:1d:a1:2a:18:bf:e5:15:d2:7c:7c:cc:7b:d5:63:a2:
78:66:80:85:5b:c8:af:51:43:83:93:73:45:d7:61:bc:4c:96:
08:d3:2a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:30 2026 by rpki-client