Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
File: gGM2o7hr9zon3dkGZn6tp1tHxJk.mft (raw, json)
Hash identifier: 6lW3BMaOA4ag9/ypdRe6dmSLFHqUbduPndQup4wHTTU=
Subject key identifier: 1C:64:8B:84:27:A4:03:CF:3F:A5:0A:BF:FF:CD:DB:96:F9:28:FE:1D
Authority key identifier: 80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
Certificate issuer: /CN=806336a3b86bf73a27ddd906667eada75b47c499
Certificate serial: 019D3375B98ACAF216003443B821AC17BF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
Manifest number: 0E29
Signing time: Sat 28 Mar 2026 08:00:46 +0000
Manifest this update: Sat 28 Mar 2026 08:00:46 +0000
Manifest next update: Sun 29 Mar 2026 08:00:46 +0000
Files and hashes: 1: gGM2o7hr9zon3dkGZn6tp1tHxJk.crl (hash: apgmZyGYF54PY1L2rm3bR0x5QA9q6mvu6S4qXLmiATo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:b9:8a:ca:f2:16:00:34:43:b8:21:ac:17:bf:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806336a3b86bf73a27ddd906667eada75b47c499
Validity
Not Before: Mar 28 08:00:46 2026 GMT
Not After : Mar 29 08:00:46 2026 GMT
Subject: CN=1c648b8427a403cf3fa50abfffcddb96f928fe1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:59:d2:75:ea:12:01:21:85:34:46:ef:75:92:
c6:5f:de:15:f1:c6:88:e4:65:b9:86:1b:31:38:13:
fa:db:d4:b9:f3:55:39:8a:5f:75:ee:86:6c:72:ca:
a5:6f:47:5e:ec:58:2c:99:64:42:17:07:1a:6f:54:
69:32:76:3b:d9:98:4b:66:4a:01:df:6e:ec:27:7a:
4c:e0:5b:4a:4e:be:13:55:9d:6d:5c:21:99:12:cf:
3f:4c:8a:49:4b:f0:36:fe:c1:84:f6:7d:47:0f:84:
c4:e4:16:5e:7c:1e:2c:28:52:dd:2f:48:c0:8c:28:
8e:3f:4b:95:d6:63:99:e0:0b:3b:c2:28:9f:7c:64:
1a:d7:0a:60:22:7c:23:e4:41:55:83:c1:63:01:e8:
00:4c:ff:1b:71:00:03:4e:6f:fa:01:c6:48:7c:fa:
d3:14:42:e7:35:d8:0e:1d:1c:77:13:d3:e4:44:5d:
7c:c7:fe:f2:cb:ea:b6:81:9a:dc:e5:08:79:21:b1:
80:41:d7:a0:64:68:13:54:f2:14:3a:cb:e0:c4:72:
60:b4:f5:93:98:d8:f9:a8:a9:f5:77:a7:41:7a:a7:
72:22:9e:0d:c3:9d:33:7a:21:54:62:2d:e6:87:ab:
b4:01:d3:7f:92:1e:64:f2:70:94:45:1a:d4:0c:d0:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:64:8B:84:27:A4:03:CF:3F:A5:0A:BF:FF:CD:DB:96:F9:28:FE:1D
X509v3 Authority Key Identifier:
keyid:80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a9:f0:aa:5e:fa:fc:a9:63:80:e5:78:fa:0a:2e:1a:4e:51:
15:19:52:9f:77:55:4d:6c:dc:7b:36:9b:97:25:a9:fe:d0:3f:
8e:c6:e3:21:38:f2:d2:dd:a1:6d:f8:10:4f:71:8c:40:f2:54:
fc:28:49:cc:57:c0:0a:e0:84:24:6d:23:d2:9d:c8:c9:58:8a:
b5:68:43:4a:23:cd:53:1a:da:a7:f2:19:86:db:84:99:ba:f0:
d3:9d:c7:9c:b5:72:d3:09:3c:fa:67:04:ee:81:68:94:b8:44:
bb:6c:1e:63:a0:31:14:6f:49:89:2a:bb:3e:95:7f:40:97:34:
5e:96:80:20:6f:da:51:3f:59:80:93:e8:7b:a1:bc:1e:31:b5:
ab:39:aa:9a:01:5b:46:3e:cf:ef:41:af:f7:47:ed:a3:04:f9:
cf:9a:b2:d5:32:1f:a9:24:d0:8d:1c:7b:c9:b2:0c:68:1f:70:
75:11:1d:67:c4:8c:2f:cc:61:a8:86:24:6f:f6:89:f5:6a:a8:
ab:f0:2a:52:73:a3:70:29:0c:da:53:ff:05:b3:6b:20:18:0a:
d9:36:40:f9:cb:ed:d1:3b:78:72:43:02:90:ee:69:d7:91:7c:
60:c7:82:2a:5d:2f:49:bb:f2:4c:de:a6:dc:ab:63:25:73:c1:
b9:14:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:14 2026 by rpki-client