Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
File: gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft (raw, json)
Hash identifier: AJYMk6FtPHoaMoE4tEGm9dY+G8BXun8INL/FwmHbYno=
Subject key identifier: 87:67:14:1B:5C:BB:8B:C5:BA:9B:86:77:9E:76:BF:1F:A1:98:45:D1
Authority key identifier: 80:EA:CF:62:B3:4A:4E:FC:5B:2F:D5:24:E5:92:16:7C:67:44:10:1E
Certificate issuer: /CN=80eacf62b34a4efc5b2fd524e592167c6744101e
Certificate serial: 019D28165E60E50508EC6AE2A03872344454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
Manifest number: 01B2
Signing time: Thu 26 Mar 2026 03:00:47 +0000
Manifest this update: Thu 26 Mar 2026 03:00:47 +0000
Manifest next update: Fri 27 Mar 2026 03:00:47 +0000
Files and hashes: 1: gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.crl (hash: asdPBF/iozVkQ9qzrRVQIzc6QrYMqY9sup9zCdgeWoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:5e:60:e5:05:08:ec:6a:e2:a0:38:72:34:44:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80eacf62b34a4efc5b2fd524e592167c6744101e
Validity
Not Before: Mar 26 03:00:47 2026 GMT
Not After : Mar 27 03:00:47 2026 GMT
Subject: CN=8767141b5cbb8bc5ba9b86779e76bf1fa19845d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:68:22:5b:2c:28:79:e9:b9:f0:66:8e:67:
0d:ea:03:7d:cc:cc:5b:51:13:a2:ec:bc:86:02:a7:
45:69:94:0c:70:b3:c7:f6:24:fb:d0:53:f8:18:7d:
49:31:a5:a7:0e:21:a9:66:99:99:f5:68:3c:85:f0:
0c:74:de:f6:09:d6:0d:ae:0d:79:c9:ae:3b:2e:d7:
b1:06:49:71:32:7a:00:b4:40:c7:a6:66:35:ea:19:
dc:0a:db:4f:96:3b:ca:d1:3b:45:0e:81:8e:0d:ca:
f8:50:b1:09:d1:cb:e4:bf:52:db:50:4e:72:5f:9b:
80:04:dd:74:88:bb:60:23:44:4a:7c:09:e4:a9:25:
63:d3:25:ce:4d:f9:62:d7:37:89:45:69:77:dd:2a:
f5:67:ce:97:97:f7:fd:d9:4a:79:61:4a:58:70:86:
9e:15:30:be:42:6f:b2:b0:87:9f:cb:ed:3c:47:66:
b1:be:95:c7:5a:14:6f:ad:c3:dc:73:f1:76:26:20:
9e:d6:ff:ea:d2:dc:38:86:14:bf:29:7d:6d:f5:af:
45:76:53:6b:bb:71:0d:76:b4:5d:d9:44:00:04:76:
51:fc:b1:5b:ea:20:cd:43:06:5e:af:36:94:66:b7:
f9:58:6d:43:72:49:a7:bc:04:61:40:86:01:b8:ab:
67:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:67:14:1B:5C:BB:8B:C5:BA:9B:86:77:9E:76:BF:1F:A1:98:45:D1
X509v3 Authority Key Identifier:
keyid:80:EA:CF:62:B3:4A:4E:FC:5B:2F:D5:24:E5:92:16:7C:67:44:10:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f7:54:b4:ac:50:d5:d4:74:a4:fb:f4:47:cb:85:df:9e:50:
77:40:2a:78:e5:a4:b4:2a:65:04:a7:76:5e:c8:52:11:53:52:
fc:31:62:5f:51:12:d7:a2:00:e7:d8:88:89:88:9d:a9:e9:4d:
69:4b:ab:d6:09:c0:d2:6e:5a:83:19:6b:5c:6d:e8:3b:05:f9:
84:a4:93:6a:64:39:8d:d5:0f:31:2f:38:89:fc:9f:9b:a4:c6:
13:36:35:54:36:e9:2b:fb:21:b1:a5:af:1b:13:08:81:70:5b:
dd:21:73:5f:9d:ed:68:d2:03:e7:18:3b:c8:d0:b8:33:b0:e1:
7f:00:2a:6c:81:ac:42:50:7c:a6:af:4e:a2:61:ee:07:3c:3f:
dc:32:16:ca:0a:98:c0:ba:27:18:d6:97:4b:1e:aa:a1:18:cd:
be:5d:d9:fc:91:ce:f4:d0:ec:eb:66:a4:43:b4:48:11:b9:69:
c7:a7:79:2c:e1:c2:34:4a:32:0d:79:0a:e0:2b:4c:e0:a8:95:
07:1e:31:bd:10:84:9a:91:57:d4:dd:4c:66:89:53:ca:ef:af:
24:e4:f1:b1:e2:42:59:7c:a0:24:32:cd:db:28:ed:ed:e0:44:
25:28:b5:aa:06:0c:85:e7:3a:c9:07:cc:8e:f1:8b:f4:fd:5f:
d7:a7:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:53 2026 by rpki-client