Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
File: GXXTHyIv7CWL1HYY_flMURzl4G4.mft (raw, json)
Hash identifier: 58WIDg9ITeeCCVwGunne2io4A1mLcAYEYGefH3uBKkI=
Subject key identifier: 3C:41:32:7B:75:C5:9C:B7:44:D7:67:FF:95:ED:53:1F:0D:62:99:1D
Authority key identifier: 19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
Certificate issuer: /CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Certificate serial: 019D2704B9EF45A79A4F9127AEABE5F3E285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
Manifest number: 0FC9
Signing time: Wed 25 Mar 2026 22:01:54 +0000
Manifest this update: Wed 25 Mar 2026 22:01:54 +0000
Manifest next update: Thu 26 Mar 2026 22:01:54 +0000
Files and hashes: 1: GXXTHyIv7CWL1HYY_flMURzl4G4.crl (hash: 5k+GB51niBwTgGzPbYvcFzY5dsy7D0bc6HMn5L391EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b9:ef:45:a7:9a:4f:91:27:ae:ab:e5:f3:e2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Validity
Not Before: Mar 25 22:01:54 2026 GMT
Not After : Mar 26 22:01:54 2026 GMT
Subject: CN=3c41327b75c59cb744d767ff95ed531f0d62991d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:57:02:7e:86:c4:f8:0b:22:54:6d:a3:47:
d0:4f:9c:7b:bd:74:c4:d3:1e:85:6b:b5:73:11:10:
2c:49:63:85:ff:cb:9b:fa:69:53:ff:38:8e:93:5f:
e2:45:62:c6:1b:c0:83:25:e3:56:5e:2a:5d:5d:8b:
bf:8d:f2:87:8b:e7:4b:b1:f9:66:f7:64:6b:23:5a:
56:87:08:f8:17:8b:48:ab:68:9e:ca:4f:fd:3f:ac:
d5:65:cf:75:65:16:8f:12:5f:c4:52:3a:1b:e0:6d:
af:bc:df:e5:b5:e1:d0:9c:c0:fa:7f:78:de:b0:dd:
dc:37:8b:43:92:7b:b3:8d:c5:85:1d:87:00:8d:a4:
00:80:a3:d1:f8:a4:fc:7c:fa:9c:a1:dd:5d:1b:ff:
81:dc:44:a6:0b:05:0f:e0:4b:29:44:b5:20:26:7c:
95:ff:e0:2d:f1:66:14:67:62:29:55:9a:5c:0f:86:
f5:f8:f7:8c:03:5a:d2:7f:6a:a5:94:5b:21:72:72:
0e:ea:f4:08:5e:0c:0c:62:22:8b:a5:e9:46:f6:1c:
13:52:bc:bc:46:fa:1e:00:77:00:7c:bf:29:b3:62:
29:74:8b:e3:5f:6f:26:94:70:4f:bf:87:06:50:81:
2a:ca:5c:b1:58:79:7b:95:cc:45:a1:c7:9e:00:70:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:32:7B:75:C5:9C:B7:44:D7:67:FF:95:ED:53:1F:0D:62:99:1D
X509v3 Authority Key Identifier:
keyid:19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ea:bb:b7:93:a8:d8:70:f7:71:5c:6e:b6:47:40:8d:1d:50:
ca:66:92:7b:c0:66:98:14:6e:78:4e:3a:cb:a9:3a:2c:c0:c0:
f0:18:a6:0a:e3:c6:18:48:48:8b:a5:43:51:9e:7b:6f:5b:c2:
50:46:46:78:39:4c:ae:65:08:bb:6d:55:aa:a1:ac:43:a7:c7:
79:13:88:8a:e6:83:6b:e8:4e:54:ec:af:19:db:5e:05:2a:2b:
15:28:61:b4:75:9b:3f:d9:02:9e:de:5b:22:d7:49:87:c8:28:
4b:66:05:ef:09:7c:4c:f2:05:ab:72:ba:83:f1:49:b1:59:62:
18:ee:39:49:fd:c7:be:22:13:e7:8d:0d:b9:98:0a:93:7e:70:
3a:a5:da:a9:a5:de:67:75:a3:e8:89:a2:cd:47:63:5b:5a:a2:
37:0b:8f:b1:54:ce:17:5d:b6:80:1a:e6:00:62:5e:83:c5:61:
a5:af:fb:52:1c:d6:4c:b7:1a:5e:64:ec:9d:b2:31:96:60:13:
d4:d2:bb:ec:65:c1:b1:60:1e:f6:52:5a:35:bb:30:5b:e0:ca:
20:70:93:18:a2:2b:ca:3d:50:68:d4:0a:43:73:4f:36:81:85:
d1:4f:56:9b:1b:c4:88:01:88:21:29:ca:3e:d8:0d:7a:eb:4b:
81:9b:a2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:29 2026 by rpki-client