Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json)
Hash identifier: QzlhijmEhCxVDTuQ8UBkjCBMFo4boEirTDhbAhMBiww=
Subject key identifier: 15:DE:F9:12:7D:BE:FD:1D:15:04:46:DA:A9:F2:B3:65:BB:9E:70:20
Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
Certificate issuer: /CN=8260c94351066ec06debfab2bca9dfaed407e698
Certificate serial: 019D25838CD5C0E559578429DB6808202C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
Manifest number: 0933
Signing time: Wed 25 Mar 2026 15:01:11 +0000
Manifest this update: Wed 25 Mar 2026 15:01:11 +0000
Manifest next update: Thu 26 Mar 2026 15:01:11 +0000
Files and hashes: 1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: 8+7G5+VLupxFpwRffK66mlYQdLtwBiZ2i+KeRqVbF8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:8c:d5:c0:e5:59:57:84:29:db:68:08:20:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698
Validity
Not Before: Mar 25 15:01:11 2026 GMT
Not After : Mar 26 15:01:11 2026 GMT
Subject: CN=15def9127dbefd1d150446daa9f2b365bb9e7020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:90:dd:05:e4:4b:0e:d8:00:ae:9f:33:de:
78:27:0f:d5:9a:38:3e:11:25:52:50:02:97:33:70:
49:02:a1:ea:04:e7:f0:f8:6e:9e:7e:6f:26:6c:3e:
64:32:46:d4:96:cd:37:1d:90:f3:e0:1e:5a:cc:7b:
3d:e8:22:98:7b:04:98:3f:15:86:a6:0c:5d:84:cb:
3e:1e:41:54:00:d0:0e:1d:bd:10:a7:16:3d:ce:ef:
80:b5:34:2a:84:cc:61:88:14:20:56:09:2b:8a:6d:
37:2d:21:44:b8:65:ba:13:2e:fa:14:d0:d2:c4:3d:
8a:37:c1:6c:b2:ef:47:d2:51:b0:56:dc:15:f4:92:
91:6a:cd:8b:94:24:23:64:ab:e2:07:ba:02:4e:16:
a9:5b:61:54:d0:29:30:83:61:45:ac:01:45:14:6d:
4f:cd:98:8d:cc:ac:ab:a6:09:43:a6:73:ce:28:e0:
36:33:f7:88:1b:69:da:b0:86:8c:3a:a6:10:eb:20:
21:69:3f:52:9d:ea:38:12:c2:7b:85:75:ee:71:09:
a5:4e:ca:d3:46:21:17:b3:c3:77:96:7e:df:29:bf:
5d:77:33:1d:9e:8d:e1:50:49:14:d8:b6:c2:17:52:
f8:d0:40:2e:4d:db:26:2c:fa:68:22:d5:69:c5:5b:
be:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:F9:12:7D:BE:FD:1D:15:04:46:DA:A9:F2:B3:65:BB:9E:70:20
X509v3 Authority Key Identifier:
keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0a:09:fc:85:87:c2:9d:22:c7:0e:f8:90:5f:03:bc:22:28:
e3:b0:d3:0c:e6:d0:03:d1:65:5f:1d:97:d6:20:ce:06:b0:a7:
9e:a3:70:fd:2f:aa:6c:87:ee:81:85:c7:c6:f0:d4:76:4d:77:
8c:fd:d7:bc:1d:ae:ac:fc:9e:e7:23:d4:7e:28:70:60:83:9a:
44:d8:1e:66:61:ca:f2:85:d0:4d:41:42:a3:8a:7e:13:6b:a1:
9a:c8:f7:fa:7b:50:83:3d:1f:5a:37:2c:74:cf:94:8b:02:a9:
0d:28:cf:5f:4a:f4:6b:e4:5d:f6:05:0a:e1:90:94:7f:87:a2:
c7:73:6d:9a:85:fc:78:cb:41:5a:ff:9a:6a:ff:d1:76:1e:01:
b3:a0:d4:0a:32:a8:24:12:cc:3b:5d:fb:bd:b5:21:e8:a8:54:
e5:05:06:6a:d3:b8:c2:21:26:ca:c2:a4:da:79:0c:5d:71:68:
24:37:8b:bd:f0:7c:c4:57:4d:31:b2:23:1e:13:db:8f:6a:04:
e0:8c:26:d5:70:5c:15:83:0c:49:0c:be:94:a5:55:21:2a:53:
52:de:12:26:a4:d8:7e:fe:1e:52:fb:ee:ef:84:f4:9a:15:00:
6b:1a:74:74:3f:aa:40:01:15:c1:df:f1:c0:4b:63:f7:73:10:
74:01:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:22 2026 by rpki-client