Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
File: gU3w5sDcpazuCDqMcwTUXz0z1W0.mft (raw, json)
Hash identifier: tR7VWsbXF1/MxC63ygu+YTwb96rZB+PqPsgkbMVTJ8Q=
Subject key identifier: 0B:C9:30:06:A2:92:75:11:64:2C:2F:A8:87:7E:3A:B7:6A:AB:B6:F3
Authority key identifier: 81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D
Certificate issuer: /CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d
Certificate serial: 019D2703C1A1217D07FF84C2B29A212521CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
Manifest number: 0F66
Signing time: Wed 25 Mar 2026 22:00:50 +0000
Manifest this update: Wed 25 Mar 2026 22:00:50 +0000
Manifest next update: Thu 26 Mar 2026 22:00:50 +0000
Files and hashes: 1: gU3w5sDcpazuCDqMcwTUXz0z1W0.crl (hash: prGw+1IaDAv0tm0eO+yCl6bNnpnz/eP6hXtqrAdh154=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c1:a1:21:7d:07:ff:84:c2:b2:9a:21:25:21:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d
Validity
Not Before: Mar 25 22:00:50 2026 GMT
Not After : Mar 26 22:00:50 2026 GMT
Subject: CN=0bc93006a2927511642c2fa8877e3ab76aabb6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:7e:0b:56:71:8c:f9:f8:cf:64:8d:d2:06:
9d:f5:a3:b9:10:de:59:10:f6:bd:31:6b:64:7c:67:
2b:7f:dc:fd:77:86:da:cf:49:e9:ac:60:0d:dd:ed:
a7:b9:aa:f0:9e:57:49:c4:42:f8:69:cf:84:7a:32:
42:f6:71:0e:af:0e:56:6e:e7:d3:0d:da:0d:ee:86:
cf:c1:aa:a4:95:ec:54:3e:ad:3f:aa:7c:be:4d:72:
e3:72:c4:bf:82:a4:30:26:1d:c2:82:72:52:29:98:
29:5d:5f:81:32:04:e9:98:87:04:3d:89:62:f0:67:
11:c6:5f:92:2a:0d:62:ca:0b:cc:eb:a8:49:4b:a8:
7d:58:c5:7d:8c:49:9b:d6:3d:b4:91:1f:d2:be:4c:
86:e5:d9:fc:13:dc:cf:b2:2c:0c:7c:33:4f:81:6f:
23:8b:80:0d:b8:66:36:a9:59:d7:fd:76:59:34:84:
c9:f4:6e:47:09:d1:c9:e2:f7:ba:66:bc:6a:a1:f7:
00:df:48:5d:10:73:9d:a2:4e:1e:d5:6e:c9:ab:e7:
e3:d5:d7:6d:08:43:38:32:f9:7e:9d:b3:51:c2:15:
60:6c:8d:3b:50:6c:e6:6e:64:6e:20:29:ba:f2:c2:
22:78:b4:64:2d:2a:13:32:85:c6:82:68:a6:e7:71:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C9:30:06:A2:92:75:11:64:2C:2F:A8:87:7E:3A:B7:6A:AB:B6:F3
X509v3 Authority Key Identifier:
keyid:81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ce:da:46:5d:76:9b:cf:4c:38:55:1a:44:11:d8:29:34:a5:
e0:cf:dc:9b:bc:cf:37:b2:53:b3:f7:27:06:36:20:0d:d6:e7:
5e:60:66:ac:8c:47:bf:35:b1:59:d3:cd:9c:4f:36:c1:de:f7:
8b:49:b5:66:f3:2f:a8:3b:30:2a:34:7f:af:c9:0b:2f:a4:8e:
f2:88:65:ca:14:82:49:4a:da:3c:aa:f7:12:4e:df:0f:c2:73:
12:90:e0:45:a1:95:0b:b1:bf:60:1e:0a:4b:db:f9:84:bc:31:
09:16:55:e7:ac:d6:bd:ce:fb:bd:1c:54:e6:ca:fe:36:98:6d:
6c:5b:d8:c8:fe:38:6d:e3:4e:48:a2:2f:e4:bc:f6:da:e2:15:
cb:34:fb:aa:e1:a4:52:8b:5b:e9:db:69:96:88:05:d4:f7:df:
9c:a5:46:a2:c7:ab:fb:e3:03:f2:c6:34:b2:ff:8b:64:19:e4:
05:cd:06:ec:bb:14:df:30:5a:2a:22:b6:48:4e:64:9a:25:02:
fc:5f:7d:ee:0d:b2:fd:f3:85:fa:43:f9:5e:d1:05:63:ba:d3:
b3:9f:b7:72:2f:8c:3f:da:db:9a:18:02:a7:46:f3:fd:4a:c0:
bf:f8:02:96:d3:88:70:3e:0b:a9:5e:37:99:e4:26:9f:a1:6c:
9d:16:d1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:21 2026 by rpki-client