Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier: qPH76YHU5Fezhr5jBRZGYb2ia4/26f4GNMDMSGHij3c=
Subject key identifier: 66:D1:FC:55:93:5B:13:7E:B8:16:B1:71:F5:2B:10:94:72:CF:D2:A0
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial: 019D270431A56A0726588B3E525502C27572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number: 169F
Signing time: Wed 25 Mar 2026 22:01:19 +0000
Manifest this update: Wed 25 Mar 2026 22:01:19 +0000
Manifest next update: Thu 26 Mar 2026 22:01:19 +0000
Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: AbYjLFrldJ8snBT4j+ji2/KkPDnigEedcLrfZ0JIHBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:31:a5:6a:07:26:58:8b:3e:52:55:02:c2:75:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Validity
Not Before: Mar 25 22:01:19 2026 GMT
Not After : Mar 26 22:01:19 2026 GMT
Subject: CN=66d1fc55935b137eb816b171f52b109472cfd2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:6e:db:8d:ed:31:f4:41:8e:ec:fe:54:43:
6a:eb:13:7c:61:52:4f:d3:4b:e5:c9:14:ed:2d:62:
d6:d3:91:c3:13:03:ed:a4:00:91:48:08:dd:3a:e7:
6c:a6:bc:61:ac:04:f8:a8:77:fc:e7:22:88:db:45:
18:f7:ef:5e:fe:d4:0e:e4:58:07:cf:40:36:43:cc:
3b:fc:25:c2:54:7b:c6:9c:36:49:97:df:1c:09:d4:
b6:c1:09:3b:c0:0a:42:f6:af:f3:a2:19:e9:18:1e:
76:e2:27:72:93:2b:75:8c:9e:1f:93:4b:60:56:e0:
56:47:b3:7e:47:ac:b1:70:a3:6c:09:78:36:6e:72:
fc:54:0a:7e:ce:94:a4:fd:4a:d7:37:d6:ee:b2:2e:
61:72:93:02:66:88:08:4f:13:95:97:b9:11:6b:84:
2f:92:ac:2d:a3:f0:ec:07:a3:d5:4e:44:4b:6d:56:
e5:b9:92:9a:f5:37:27:a0:e8:ba:c2:40:ea:22:7f:
49:cc:a1:bb:3c:b2:94:a5:39:3a:bf:e3:bd:5e:59:
34:cc:5d:b1:a2:d5:5a:b4:97:68:44:a3:39:e0:1a:
cc:1c:d4:ba:51:e2:cc:f7:a0:ad:27:4e:83:4d:5f:
48:2f:d2:a4:1c:f5:21:32:e5:1f:ca:e0:6d:89:a8:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D1:FC:55:93:5B:13:7E:B8:16:B1:71:F5:2B:10:94:72:CF:D2:A0
X509v3 Authority Key Identifier:
keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:42:61:9d:c9:89:18:67:91:c2:c0:15:bd:2c:97:32:d7:3b:
46:bc:08:72:44:7a:61:62:aa:a8:52:cd:72:a7:5e:17:c0:70:
49:0e:89:db:f6:9f:9e:c9:81:26:b1:9b:88:4e:ab:e0:4a:cf:
49:e6:17:d1:6f:83:48:65:84:19:df:d7:ba:38:24:de:d6:42:
4a:3e:65:09:7d:7f:66:01:06:9d:72:1e:26:d4:e8:f9:81:dd:
11:aa:e8:08:38:ad:e5:a6:8b:e0:4a:77:14:85:e6:ab:40:09:
0c:e6:88:c1:da:fc:b3:1c:5e:4d:93:91:db:45:6a:13:4e:32:
77:e5:07:3b:e7:33:43:b1:25:ef:2f:34:4e:07:d8:7b:30:06:
da:0f:ba:7f:15:6c:11:a3:41:c0:05:d2:7d:de:37:8d:7f:57:
05:68:90:7a:33:47:ce:6a:7d:68:2b:22:5e:b5:63:ae:6b:78:
df:92:2d:91:ce:e2:cc:5e:2a:6b:99:57:b9:82:2c:6b:b5:10:
3f:7f:d8:fe:b6:c8:92:b7:20:64:5a:5c:e4:da:e4:72:52:5b:
69:76:a2:8a:5f:f0:8c:a2:d1:da:42:67:27:0c:ee:aa:25:bb:
ed:a8:3a:03:39:ae:75:d9:7a:6e:94:bb:57:a4:d5:ce:da:2c:
05:d8:e5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:11 2026 by rpki-client