Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File: gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier: MDHGvXBolYOAnVyPhHtLnv5K4u4pPQVtXirhqJGeL5U=
Subject key identifier: 34:D9:EF:B3:22:53:28:8C:B7:DC:1A:21:96:20:4C:1F:7A:E3:4C:B2
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial: 019D08F9EC341905DC55B032318A6CAB6C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number: 1876
Signing time: Fri 20 Mar 2026 02:01:29 +0000
Manifest this update: Fri 20 Mar 2026 02:01:29 +0000
Manifest next update: Sat 21 Mar 2026 02:01:29 +0000
Files and hashes: 1: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: +VLZydbJsa+T6jIvBu+lWLA7jBprDZU6wEt5jYjE0qc=)
2: k1oWIl9uaPhK_7wC7TzwxBmJV5U.roa (hash: Teuvy3ArR3TwwUcbjV0tYtPi6ySgg76mgoEbmzqvJDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:f9:ec:34:19:05:dc:55:b0:32:31:8a:6c:ab:6c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Validity
Not Before: Mar 20 02:01:29 2026 GMT
Not After : Mar 21 02:01:29 2026 GMT
Subject: CN=34d9efb32253288cb7dc1a2196204c1f7ae34cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:65:7b:f9:cb:4d:2c:fb:03:0a:0e:23:a6:65:
16:af:9b:12:95:4f:ef:4f:2f:2e:ee:81:a4:cf:b4:
cf:24:fb:72:f8:25:2c:73:8a:ea:41:8d:07:56:0e:
4f:7a:94:a6:8e:c1:93:b6:fa:11:7b:36:1c:f0:f2:
0d:a0:6c:0e:16:4e:1c:0e:de:db:c0:cc:c2:44:b2:
a4:8a:cd:2e:c5:ea:53:de:97:a9:1c:24:4d:1b:c9:
a7:9a:76:b5:98:9f:24:ec:ec:1b:b1:91:15:07:74:
f2:b5:03:df:16:89:ce:78:73:d6:cc:45:f0:e2:39:
22:8a:c5:c7:f7:0c:a2:c3:f9:bb:07:7c:e9:44:77:
41:fc:9a:f8:d7:10:04:fc:ae:61:7f:71:1d:c2:c0:
a1:8f:43:26:da:1b:a7:e3:26:d5:21:64:f0:87:16:
fd:a9:de:55:33:66:5e:4f:7b:e8:6c:7a:ef:d4:9f:
98:39:ed:87:83:79:03:aa:fb:58:9d:ce:92:72:1e:
eb:2b:7c:c3:25:2c:9b:88:88:44:3d:4e:c3:a8:f2:
a4:89:c1:4d:58:8c:e0:23:09:ed:42:69:6b:0a:a0:
63:b7:9b:10:8f:c9:03:66:45:a0:e1:e8:61:89:c5:
f2:1a:0b:79:5e:36:49:0b:00:e4:79:2f:a2:ca:11:
13:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D9:EF:B3:22:53:28:8C:B7:DC:1A:21:96:20:4C:1F:7A:E3:4C:B2
X509v3 Authority Key Identifier:
keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c3:07:6e:4b:ee:e1:31:82:6a:82:38:84:fc:d1:61:e5:4e:
6a:27:17:f4:cd:ee:c1:5e:cd:b9:90:32:c7:f9:bc:91:41:0b:
f7:3c:a6:dc:51:d8:bd:b0:49:c3:9e:90:17:d5:c1:ea:7a:ae:
5a:1a:1c:67:1d:fb:6c:e5:d7:fe:90:3b:93:cd:8a:0c:19:88:
f1:e6:0b:fb:28:30:00:12:6c:b4:37:87:9f:8b:f6:73:05:a5:
81:62:0a:4e:07:d9:ca:ac:e8:be:62:95:88:89:03:46:61:36:
6e:45:71:2b:a9:e0:5a:0e:42:47:c7:79:77:43:b5:24:99:d7:
75:ad:4b:60:11:bb:05:40:dc:7d:57:49:1b:3a:6e:82:a6:3d:
4e:be:f5:e8:f2:8c:7c:58:0d:57:6a:b3:bb:1a:7d:2f:21:76:
34:c0:7b:de:72:cc:ad:bb:87:95:76:92:fd:68:3b:91:38:63:
6d:17:27:51:50:9a:be:4d:43:72:e6:83:02:76:1d:95:1d:bb:
17:96:03:a7:13:c9:b8:f8:e6:23:96:68:fc:e0:db:80:e5:71:
7f:a9:21:73:c3:00:d2:29:05:ae:13:91:0e:b4:f5:b0:e7:a1:
b4:05:7b:b2:98:f9:c6:6b:e3:08:65:74:78:a3:43:eb:33:9f:
e9:36:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 10:07:35 2026 by rpki-client