Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
File: gMez3pa5HtxunIXZ1aZoQZIDtfU.mft (raw, json)
Hash identifier: a/TJ+zU+yFFq6jxTsz7jp5k4am9Tvb60/X/SIF3bDHY=
Subject key identifier: 12:AC:B2:3A:7E:BB:29:CD:65:06:B3:47:F5:D5:0D:87:0B:CF:B4:C1
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Certificate issuer: /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial: 019D265FA5EA2916DC99B2D5CE67F8397FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
Manifest number: 0661
Signing time: Wed 25 Mar 2026 19:01:35 +0000
Manifest this update: Wed 25 Mar 2026 19:01:35 +0000
Manifest next update: Thu 26 Mar 2026 19:01:35 +0000
Files and hashes: 1: gMez3pa5HtxunIXZ1aZoQZIDtfU.crl (hash: KGxOETOXFYNyJl6DAEmJffamusPXWRq/kkiD6EL3rno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a5:ea:29:16:dc:99:b2:d5:ce:67:f8:39:7f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Validity
Not Before: Mar 25 19:01:35 2026 GMT
Not After : Mar 26 19:01:35 2026 GMT
Subject: CN=12acb23a7ebb29cd6506b347f5d50d870bcfb4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2d:60:7c:1b:2b:81:07:28:3d:fa:ba:be:f6:
0e:29:e8:eb:a6:13:1f:3f:f6:03:aa:27:45:05:27:
d6:1a:5e:a9:7b:75:ae:5b:2c:09:83:78:b1:75:1f:
8f:a4:e7:50:85:e3:78:96:62:c1:8c:24:7d:53:93:
48:a9:3e:08:92:df:af:03:5f:e9:4f:12:32:6f:c6:
ae:95:eb:9a:3d:48:af:2f:06:9e:1e:88:8b:fe:83:
ff:f0:b4:97:37:9d:bc:50:1a:ec:0f:44:35:85:04:
91:a5:24:cc:27:40:e4:f2:c8:91:93:e0:31:4d:4b:
be:3f:55:76:67:95:22:d1:14:02:1a:dd:d6:48:07:
2a:8b:b9:67:42:c3:22:71:c1:7d:02:3b:e4:3c:a0:
1b:31:9c:71:cd:4a:5a:04:27:00:1a:36:50:cc:7c:
ff:a2:fb:a0:56:75:24:6e:e8:c4:c6:f1:6d:9f:44:
ff:5a:9d:a1:27:2b:4f:0c:8d:5e:64:3c:4a:1a:d1:
3b:5d:a1:33:d9:f7:d1:96:24:4b:1a:c1:ff:d1:e9:
73:fc:a4:f3:bb:83:5f:15:be:9a:50:1d:44:2d:20:
9f:c4:cf:2a:9e:8b:cf:7f:dc:56:a6:bc:39:07:eb:
5d:9f:6d:fa:13:0e:6e:38:83:07:56:64:f7:57:2d:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AC:B2:3A:7E:BB:29:CD:65:06:B3:47:F5:D5:0D:87:0B:CF:B4:C1
X509v3 Authority Key Identifier:
keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9e:50:5e:5c:d6:47:14:d9:ab:dc:b7:be:14:57:03:dd:98:
29:9a:a9:f0:95:85:d6:a6:b6:12:23:33:4e:e9:ac:a4:c3:2f:
3b:f4:ba:a0:10:be:13:23:8b:ab:d0:37:00:c5:34:88:fa:ca:
2f:fa:9d:e9:51:35:d8:e7:c0:59:c7:0d:c6:9d:a6:4b:59:5e:
24:53:e9:98:e9:08:7c:ce:6d:56:15:3b:f8:7f:e3:3b:74:33:
17:d8:bc:ec:51:2c:01:0f:86:c2:20:cd:7e:3c:06:11:ec:ef:
da:d0:2e:7e:78:56:95:a5:d5:be:e3:e1:35:cb:2a:4a:ad:aa:
de:9d:01:38:56:c8:98:ac:d3:52:0d:1a:0a:0b:e1:57:56:eb:
62:86:61:94:8d:75:68:94:18:c7:0f:42:6e:ea:da:1c:e2:6a:
fd:62:9c:ed:e7:24:b5:5b:eb:ce:12:ec:79:d9:47:32:2b:02:
d2:9d:fd:dc:04:25:f1:1f:ac:ee:fe:66:b8:a0:99:55:37:c3:
7b:aa:eb:83:89:3c:a7:90:36:8a:5c:f5:14:fd:02:8c:8f:e4:
28:d5:20:4a:0d:02:72:aa:d8:1e:4a:f5:3a:4e:73:c8:4d:59:
77:8b:a1:55:f5:8b:a4:a5:96:8b:c7:61:a7:88:a7:01:1a:df:
58:20:f6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:58 2026 by rpki-client