Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
File: GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft (raw, json)
Hash identifier: 3Ihv8nijFAN0oXnCmDDqG+FgVXBkKBDE3Mw79kYp1hE=
Subject key identifier: DE:CD:3B:4B:E7:06:B6:B2:30:66:E6:57:E2:83:9E:3D:9C:97:A8:74
Authority key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
Certificate issuer: /CN=1925e6387b33e94069a89a5d1be68904e4090613
Certificate serial: 019D29CEE48CC5E9E9BB8DEC09DABF093822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
Manifest number: 0561
Signing time: Thu 26 Mar 2026 11:01:57 +0000
Manifest this update: Thu 26 Mar 2026 11:01:57 +0000
Manifest next update: Fri 27 Mar 2026 11:01:57 +0000
Files and hashes: 1: GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl (hash: 6Gn4GhrSa6yQut6e9jqLc2HoMnJuBW/JMCRFWgsg1FQ=)
2: ndpI9qLffpVaMGScW-JZ0lWj0Ks.roa (hash: vfmuR4iQKhTkQbNhXUi+1cOgTRg44mLCvKB92dRG9wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:e4:8c:c5:e9:e9:bb:8d:ec:09:da:bf:09:38:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1925e6387b33e94069a89a5d1be68904e4090613
Validity
Not Before: Mar 26 11:01:57 2026 GMT
Not After : Mar 27 11:01:57 2026 GMT
Subject: CN=decd3b4be706b6b23066e657e2839e3d9c97a874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:b3:c5:4f:9d:2c:43:d1:56:e3:36:16:3b:
ff:5d:55:1d:de:fb:5c:a8:04:2d:24:47:14:a8:2f:
9c:b5:10:5a:25:4f:3d:7d:76:63:1b:ac:2d:58:ff:
ed:16:b9:23:18:20:81:1e:af:f4:79:77:db:ea:e1:
2d:82:03:26:a9:2b:39:3c:93:f1:db:b3:63:75:75:
41:06:e7:09:42:14:b4:c3:24:77:eb:76:85:34:b2:
aa:51:c3:b0:31:e3:05:6f:7f:11:01:8b:46:4f:cc:
ee:41:18:81:02:9f:b4:e7:3e:e9:aa:4f:69:56:5b:
d9:9b:d7:b0:a5:73:38:a8:b5:8e:4c:80:d0:57:95:
1e:4b:99:fd:a1:a9:1c:33:0e:15:1a:b3:e7:3e:c2:
d6:01:ed:0c:ef:19:17:43:a1:3a:49:54:64:30:37:
57:5f:ef:87:8d:8f:9c:87:3e:7e:d6:4d:96:fa:63:
52:09:0e:84:ea:a5:a0:bf:94:a4:62:ce:eb:db:4d:
93:e3:c6:7b:ad:55:fe:7c:8a:67:27:df:6b:3c:56:
66:b3:f7:63:0e:cc:19:21:19:e2:e1:ad:f7:7f:4a:
dc:2e:5b:db:45:cd:82:ce:b0:75:ac:50:03:8b:91:
71:4e:02:7f:a5:4f:7a:9c:dd:72:cb:a8:69:74:d5:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CD:3B:4B:E7:06:B6:B2:30:66:E6:57:E2:83:9E:3D:9C:97:A8:74
X509v3 Authority Key Identifier:
keyid:19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:11:64:39:30:17:33:0f:9d:0f:50:9a:0f:2f:d5:d9:00:42:
51:22:7c:e8:7a:d1:f3:82:8a:32:2a:a9:3b:6d:f6:01:61:ab:
65:24:9b:4b:af:2f:c0:ce:68:26:31:2c:b5:ca:b6:7e:52:ec:
e6:fc:73:71:19:c2:97:e6:4f:b2:05:c9:d3:8f:6d:9c:6c:21:
36:1b:04:ed:17:49:ad:04:91:28:56:0b:30:f7:74:07:27:0b:
29:82:db:98:c0:5e:56:87:85:bb:e1:b0:ac:6a:3a:58:16:48:
5c:a9:a1:81:4d:11:ef:98:2e:86:61:b6:c8:bf:85:c8:96:b4:
67:bf:19:fa:8c:58:52:bb:7d:67:5a:08:9a:ac:34:24:22:f3:
bf:99:13:a6:8c:9a:8c:cd:cd:0f:32:42:73:ad:15:9e:0c:65:
63:d7:b1:c7:2d:48:ff:ab:9d:02:1d:42:79:27:6d:f7:a0:07:
73:39:36:b4:28:43:01:bd:d9:cc:e4:e9:a0:c2:be:58:b5:dc:
8e:4a:99:87:11:a7:1b:ab:d6:16:85:eb:05:d1:fa:ef:0f:c6:
fb:c0:4c:55:1b:ba:61:a0:e9:1e:6b:f3:15:46:cd:54:8a:4c:
e2:89:91:af:c6:83:c0:2c:f6:ad:f4:ff:c4:dc:1d:e6:5f:f9:
cc:50:44:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:39:38 2026 by rpki-client