Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
File: gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft (raw, json)
Hash identifier: 7qbREJPNrsqaOUeds7yFfqdyGn9DeCYC7KU/pky/q7g=
Subject key identifier: 58:A2:28:9F:54:E9:5B:05:C8:48:89:20:A6:C8:55:0B:61:D5:8A:AD
Authority key identifier: 82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
Certificate issuer: /CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Certificate serial: 019D27720A374DF50B221901C2731C3DAB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
Manifest number: 07F3
Signing time: Thu 26 Mar 2026 00:01:18 +0000
Manifest this update: Thu 26 Mar 2026 00:01:18 +0000
Manifest next update: Fri 27 Mar 2026 00:01:18 +0000
Files and hashes: 1: gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl (hash: a2VjNh6QDOpZ5YowfvXhRvgXI1dLCj5dzE15+E73eVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:0a:37:4d:f5:0b:22:19:01:c2:73:1c:3d:ab:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Validity
Not Before: Mar 26 00:01:18 2026 GMT
Not After : Mar 27 00:01:18 2026 GMT
Subject: CN=58a2289f54e95b05c8488920a6c8550b61d58aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:e6:2e:57:c1:73:80:90:31:8c:91:4c:f9:
15:fe:60:63:25:ac:44:3c:bc:09:12:e9:1f:84:89:
87:01:0f:ba:4e:4a:82:2a:d8:45:7b:15:cc:98:33:
e2:fd:27:f9:ca:c3:60:fd:34:1e:ef:ba:0f:f8:58:
cb:39:0c:f2:b1:4a:02:51:97:d6:7b:7e:e1:0e:b0:
ce:5d:f8:4a:3e:b8:e5:e8:43:4e:4e:89:81:0c:f9:
8d:da:d6:2c:cf:a7:12:b5:66:ff:74:ca:d6:19:4e:
b9:66:e6:12:64:ae:dc:ad:1a:a0:ee:82:f1:21:31:
2a:42:aa:ef:86:57:82:d6:48:f0:35:62:c4:0b:9b:
54:df:cb:8c:3e:64:a3:88:78:12:fe:70:bc:47:3e:
c9:c1:ab:68:9a:52:f5:1a:a4:af:7a:50:ac:f5:82:
45:a7:a1:c4:a8:7f:48:bf:e3:4f:80:96:4c:3e:3c:
04:34:97:39:83:08:fd:52:a2:f7:f8:2d:98:b5:de:
60:4e:6d:c1:20:dd:ca:e5:f4:56:02:43:d1:24:f6:
e6:ac:27:14:26:d7:54:7d:23:9a:52:c3:4e:19:ed:
b7:01:d7:ef:ed:41:4f:98:55:97:57:09:ba:3b:36:
72:9d:03:4d:7b:2d:95:01:04:7e:95:68:d7:ef:71:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A2:28:9F:54:E9:5B:05:C8:48:89:20:A6:C8:55:0B:61:D5:8A:AD
X509v3 Authority Key Identifier:
keyid:82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ad:9c:38:cf:b9:b4:c1:ef:97:b1:4b:c3:87:1d:94:db:f8:
82:ec:36:16:f7:1f:85:a1:4f:39:54:19:d0:e5:1d:3b:6e:3e:
8c:be:fd:cb:13:1b:ee:0d:bd:5b:b7:2e:be:f2:ff:ff:92:54:
6f:64:3e:9c:4e:74:ea:ba:c4:e3:0b:5d:b0:bb:40:58:64:bd:
a6:9f:23:8e:93:46:33:6b:d6:0e:55:28:33:99:6d:9f:d6:ba:
d8:92:1b:d8:52:36:bd:3d:c3:a9:3c:6a:04:91:06:e5:ac:75:
23:11:de:53:22:1a:64:6b:90:6a:2a:44:8e:45:40:73:55:ec:
b3:63:3f:67:0d:8d:28:6a:45:5a:54:d4:c1:4f:ef:11:0d:56:
61:99:49:93:21:4d:e9:04:88:ee:d8:04:31:e2:7b:78:6d:73:
83:f5:9d:27:a7:e9:7f:ef:f9:97:06:7b:be:a2:97:0a:4f:87:
e2:5b:58:67:6f:0a:d6:06:bd:66:17:2b:58:e4:c4:26:ce:b1:
71:bf:46:20:99:ac:1c:09:93:6d:e4:a2:7d:f1:2a:bf:d6:5e:
22:6f:cd:59:f5:69:98:cb:0c:9c:e8:e9:5e:d6:29:88:7a:12:
28:c7:90:6d:1e:f3:b1:26:a3:92:67:b1:96:9e:fc:0a:7c:1f:
0b:2a:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:02 2026 by rpki-client