Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
File: Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json)
Hash identifier: JT141CHwmCx9r2RbYomJAz3XOGDhP+yuQcVz1hJjn3w=
Subject key identifier: 8D:D9:7B:02:7D:FC:1B:0D:80:06:41:62:10:13:26:07:0F:61:92:8A
Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
Certificate issuer: /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Certificate serial: 019D2704C81BCB5721994ECCD1E4E36DC86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
Manifest number: 0BB2
Signing time: Wed 25 Mar 2026 22:01:57 +0000
Manifest this update: Wed 25 Mar 2026 22:01:57 +0000
Manifest next update: Thu 26 Mar 2026 22:01:57 +0000
Files and hashes: 1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: ZdM9OJ2cnCe9ISMWXUtsWU6ypaNRL3f1PO8MuU7g3UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c8:1b:cb:57:21:99:4e:cc:d1:e4:e3:6d:c8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Validity
Not Before: Mar 25 22:01:57 2026 GMT
Not After : Mar 26 22:01:57 2026 GMT
Subject: CN=8dd97b027dfc1b0d80064162101326070f61928a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:55:0a:7b:9a:3c:7c:a0:f4:39:96:e2:da:
60:ae:e3:b9:e8:89:c4:d0:ad:96:7b:71:5b:33:94:
fe:5d:fa:00:1e:5a:31:6a:40:b3:8e:17:2e:75:8c:
cc:52:71:68:16:5e:78:99:ed:c6:29:51:ff:b0:2a:
bc:f5:57:24:89:4f:b2:c7:73:07:6f:36:5c:6e:39:
e7:c5:17:61:34:ea:d4:e0:81:a4:be:70:de:50:65:
9c:7f:bd:ef:b2:79:de:fb:49:61:cd:61:d6:66:16:
bf:2f:77:ca:01:c9:74:eb:ac:d3:c6:98:a8:63:16:
4e:c1:60:40:0f:f2:d7:ed:a3:5b:f5:30:e0:fa:f0:
da:ee:10:f4:b6:64:8c:df:68:9a:02:1e:db:6d:69:
b3:7b:aa:8c:72:c3:6f:4d:81:2d:9c:2c:69:a8:45:
a8:e3:99:ac:21:f7:3f:9e:49:06:f9:58:bc:a0:53:
02:fc:d6:79:dd:a4:f3:87:77:21:13:08:f6:3f:89:
c4:fe:2b:b9:c4:d3:35:4a:fe:74:e1:9e:fa:ea:9d:
e8:68:24:60:82:79:b1:6d:04:5e:ea:5b:da:c9:92:
98:d1:62:0c:cd:58:8a:2b:46:46:22:7f:5a:9b:e8:
e2:ff:2f:89:c8:ac:2d:ab:f3:4e:4c:ce:67:af:0c:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D9:7B:02:7D:FC:1B:0D:80:06:41:62:10:13:26:07:0F:61:92:8A
X509v3 Authority Key Identifier:
keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:de:ca:8b:03:c6:53:4c:ae:2c:ba:fb:a2:16:19:ed:ee:59:
17:31:e0:7e:bf:0b:83:61:43:fb:20:df:8d:f0:8a:a2:7c:74:
38:f8:a6:65:cb:19:e4:36:51:32:49:5b:74:84:21:98:a7:d7:
f1:48:b0:79:b8:a8:0d:d8:fb:a6:38:0e:48:78:d8:ae:61:59:
4a:e6:b5:42:e0:51:44:31:19:e7:82:d7:0f:4d:3c:99:85:5b:
ef:ce:13:3b:0e:fc:6b:a1:60:59:52:72:6f:7d:a5:d3:69:f6:
96:22:fd:4f:e3:e6:9b:8e:d3:52:b3:79:e3:3d:b8:bb:3c:c3:
98:5b:48:8f:13:15:b4:bd:ab:4d:c7:fc:38:5a:ff:d5:b4:09:
03:89:f3:f1:7d:39:38:85:ce:19:22:22:54:5f:b9:a1:f9:02:
5f:09:2b:ee:0c:4b:e9:09:95:1e:29:1f:92:14:d2:16:49:44:
7a:ba:d5:63:a5:1e:70:1f:f1:c3:96:19:f7:16:f2:2a:88:ba:
f8:a7:17:9e:a4:cf:74:7e:28:d2:ae:8f:35:19:84:bb:e0:ca:
75:53:29:15:9b:b0:7d:b4:fa:c1:21:26:3f:83:64:32:11:80:
33:81:c6:d1:37:71:0c:5d:b0:83:02:10:21:7e:2d:71:3c:63:
5b:08:30:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:33 2026 by rpki-client