Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
File: gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json)
Hash identifier: J9CSdqOpQ1WMv0KQ8YL3f1o7Ow3ZYwaNGfIRHAvHbzQ=
Subject key identifier: EF:40:AA:A7:83:86:13:14:BD:2C:DD:09:15:18:A5:BB:D7:C3:7D:1E
Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
Certificate issuer: /CN=8159495b72ff015878c1314d24759b6e9147a8e0
Certificate serial: 019D27A91A7AB298F04B59724005BD6FF319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 01:01:26 +0000
Manifest this update: Thu 26 Mar 2026 01:01:26 +0000
Manifest next update: Fri 27 Mar 2026 01:01:26 +0000
Files and hashes: 1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: gSNGErgQIID1pCYy3rO5CrLTjCEIok/FfeA4PFGAbPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:1a:7a:b2:98:f0:4b:59:72:40:05:bd:6f:f3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0
Validity
Not Before: Mar 26 01:01:26 2026 GMT
Not After : Mar 27 01:01:26 2026 GMT
Subject: CN=ef40aaa783861314bd2cdd091518a5bbd7c37d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:37:73:26:90:0e:26:d8:39:93:90:93:c6:
ce:c4:50:7a:e5:8e:c2:ee:f6:59:3d:64:df:bc:99:
bb:fa:71:56:4d:ae:d9:78:61:1b:f8:6d:16:ba:70:
cb:e2:3c:61:82:a0:91:bf:36:b2:6d:8d:14:cd:b6:
2e:53:d4:09:13:c2:dd:6f:fe:fb:c1:6e:62:c7:06:
27:6d:fe:bb:97:5e:55:1a:ac:9d:16:c0:4e:c2:d3:
bc:73:c0:d3:5a:42:c8:26:e3:88:25:1a:cc:f0:61:
56:40:1c:82:c3:7d:66:02:f0:61:d4:6c:00:d1:0b:
dd:18:14:5e:e0:92:8d:84:86:f4:3b:61:01:1e:64:
b8:f5:de:af:ce:68:19:61:d5:1c:ce:9c:86:eb:a4:
50:e4:8c:e4:41:5a:11:21:b3:9d:de:10:8a:48:ee:
b3:7e:e5:77:ae:2e:43:ad:13:23:20:91:bf:9c:e0:
8f:04:bf:4f:9e:98:fd:c2:a2:e0:99:21:cf:4a:52:
ea:b7:3a:b7:dd:23:bb:63:04:7f:1d:3a:33:d1:7c:
06:54:cb:da:50:6c:be:9c:d7:e6:18:a8:d1:dd:e0:
bc:81:2e:54:2c:84:e4:45:91:dc:7c:42:17:02:2d:
ce:c8:e9:1f:cf:54:e9:61:96:ab:93:9c:93:ea:bc:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:40:AA:A7:83:86:13:14:BD:2C:DD:09:15:18:A5:BB:D7:C3:7D:1E
X509v3 Authority Key Identifier:
keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8f:3c:0d:6a:70:a2:bd:2c:2d:25:a9:70:58:f1:a1:26:75:
5d:f4:b8:86:09:e8:af:9c:6a:9f:4d:37:36:af:ec:68:5b:40:
68:d2:0b:70:cd:16:c1:8f:8a:b3:b7:77:36:af:e9:4d:02:1c:
a0:f3:29:6c:d6:26:ca:01:59:33:67:4e:11:b9:cc:ae:51:45:
1b:c8:07:d6:33:87:53:b6:8a:0a:87:c9:39:f7:f1:f3:1b:31:
83:2f:f1:e1:09:1b:a7:94:26:05:d3:c9:a9:17:e3:c3:2c:4e:
ba:c4:ac:52:01:a0:5a:34:6b:48:97:eb:f6:ad:6a:f4:84:26:
07:e2:8f:f2:05:a9:92:8e:7f:cc:f1:22:4c:c3:29:20:cc:7e:
c7:f7:e9:a6:06:04:e3:ad:a5:bb:76:13:d7:82:c7:96:38:83:
00:b3:f2:56:6c:ca:26:33:00:19:02:4b:0b:79:e0:b2:73:8e:
d9:d5:04:6b:a1:11:51:b4:63:aa:f9:58:cf:c7:67:89:1d:e9:
40:f1:e2:28:72:26:38:9c:f2:54:58:e5:a0:30:90:43:1e:f3:
88:64:22:1c:5f:8c:10:28:02:93:28:55:46:fb:d4:37:9c:ee:
5c:a5:bf:da:67:d2:a7:9e:49:67:f6:7a:f5:00:10:7a:8e:89:
95:fe:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:05 2026 by rpki-client