Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
File: gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft (raw, json)
Hash identifier: odrvdnPLq/5HIsi0+gEuGjvYOO2a7BTHCT7pafecLoE=
Subject key identifier: 15:E2:22:54:55:25:69:1A:E2:48:6E:3D:A3:54:A9:7A:8F:00:59:5F
Authority key identifier: 80:2D:2F:85:05:E2:BA:EE:DF:7E:05:0D:27:94:2F:54:AC:6A:0A:56
Certificate issuer: /CN=802d2f8505e2baeedf7e050d27942f54ac6a0a56
Certificate serial: 019D25BA8D93B825BE7716D3A33938162A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
Manifest number: 0180
Signing time: Wed 25 Mar 2026 16:01:15 +0000
Manifest this update: Wed 25 Mar 2026 16:01:15 +0000
Manifest next update: Thu 26 Mar 2026 16:01:15 +0000
Files and hashes: 1: gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl (hash: 1+IeVbTDr2VP+Z/82MnJZ/90hIAPDrEZZjmuijWzwVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:8d:93:b8:25:be:77:16:d3:a3:39:38:16:2a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802d2f8505e2baeedf7e050d27942f54ac6a0a56
Validity
Not Before: Mar 25 16:01:15 2026 GMT
Not After : Mar 26 16:01:15 2026 GMT
Subject: CN=15e222545525691ae2486e3da354a97a8f00595f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:a5:19:59:db:ec:21:f4:16:69:34:56:f6:
5d:a7:ff:8c:0c:d7:43:c1:75:d3:91:83:89:13:42:
94:7d:4c:6d:87:21:38:33:e1:09:9d:55:43:29:57:
b6:b6:0a:62:d9:f9:e4:ee:72:ca:4c:88:65:b8:e8:
63:79:60:ee:b0:50:e0:39:37:6b:29:ae:35:b8:a5:
b2:42:c8:aa:c4:2f:24:5f:7a:47:b1:13:b4:ba:92:
f8:ad:7f:0d:0a:58:54:4b:cd:e3:e2:c7:37:b0:77:
5d:f6:6b:85:0c:a6:e0:16:59:ef:d1:3f:a9:6e:87:
22:dd:5a:93:da:f0:79:de:b1:23:7c:f0:81:df:32:
36:c6:98:97:f4:e2:18:d5:f1:ab:0f:ef:62:0e:1c:
60:cc:3d:4c:48:8f:af:ca:3f:cb:b8:b9:cf:cf:00:
4d:70:ff:77:33:53:cb:fd:b8:8f:eb:a4:95:c6:ae:
51:ec:be:b3:77:98:f3:20:68:8f:aa:f7:c9:79:3d:
05:1f:08:b2:27:56:e4:4f:65:85:ba:61:3b:dd:b1:
1f:45:0b:66:d9:ce:14:12:ac:3e:93:0b:9f:b0:64:
01:2b:ff:39:68:8a:63:1e:57:94:e7:b7:4b:07:7b:
d1:cf:86:fc:93:42:9c:d1:2f:d0:9a:62:a0:c8:8e:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E2:22:54:55:25:69:1A:E2:48:6E:3D:A3:54:A9:7A:8F:00:59:5F
X509v3 Authority Key Identifier:
keyid:80:2D:2F:85:05:E2:BA:EE:DF:7E:05:0D:27:94:2F:54:AC:6A:0A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:43:fb:cb:a2:72:2d:6f:af:f0:b0:4f:30:c2:87:42:0f:b6:
bf:81:a1:bd:f9:33:8e:a6:40:1f:76:7e:71:68:21:3e:58:fc:
61:e3:93:9d:0e:e0:46:9e:d8:63:fa:c8:26:0d:33:ef:c4:f5:
fd:dc:e3:73:f6:13:aa:c7:69:14:f4:8d:38:db:25:88:32:f6:
0b:43:7e:cd:ca:8a:60:cd:55:08:9c:75:39:6f:31:41:61:19:
60:42:af:c2:fc:ae:db:82:84:7d:63:c5:62:80:77:f4:59:a2:
8d:cd:f1:e6:1a:39:ce:75:26:cf:b9:84:07:8b:83:fa:f9:13:
70:33:4a:34:00:9d:7e:f9:57:dc:d9:6b:91:fc:f1:2e:ad:35:
8b:a6:22:d1:bb:5c:44:f4:5e:ce:5f:6a:fa:96:b6:61:f1:e2:
63:44:86:ce:e4:86:90:3f:75:9b:c7:05:b6:8d:72:75:e7:07:
79:7d:61:b9:f3:6f:ae:d2:59:3a:f9:69:d9:a1:30:ec:14:05:
ca:e7:99:b7:08:e2:1b:05:8b:65:1d:90:c1:ad:d8:1e:f8:1d:
c0:09:27:3f:78:50:37:40:ae:e7:db:15:f6:f7:54:a8:00:ee:
9a:3b:b4:cc:17:d2:0e:7b:98:5e:3c:4a:c8:e2:d0:e8:f5:23:
fa:5a:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:43 2026 by rpki-client