Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier: t9UXE78G25/yZvsMtGaEkmBrYmNM04YCfs+iplGMvOQ=
Subject key identifier: C5:65:FC:B3:9E:34:0C:A7:4F:85:9E:EA:06:EC:BA:60:0A:99:29:25
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial: 019D38662BB0370A3CBF3A7C98A31D4E856C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number: 181F
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: xGHytDnSsCnqY9/enh9ztTDv9fHhV7fE8vda0ZyHYvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2b:b0:37:0a:3c:bf:3a:7c:98:a3:1d:4e:85:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=c565fcb39e340ca74f859eea06ecba600a992925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7f:3c:89:d0:9e:82:97:70:5e:1e:20:52:ad:
55:5b:0f:1c:92:c4:e0:af:ad:3d:6d:3b:2f:2c:c5:
ec:a2:e2:9e:59:da:75:cf:a7:6a:77:dd:1a:6c:a5:
71:d6:f0:95:3f:5f:dd:a8:82:46:79:5d:53:76:46:
bb:bb:6d:84:d3:2d:8d:1d:36:0f:35:bd:c5:2d:79:
7f:7b:54:c9:e8:af:e5:f0:fb:36:e7:f3:d6:2f:04:
0e:db:80:a1:ab:af:71:5e:49:74:c0:12:57:cd:6e:
a1:42:75:d7:6c:23:eb:50:b8:11:43:7a:5d:5a:14:
4d:b8:c3:1b:7b:80:20:f1:9d:d9:49:7c:fd:d9:59:
cb:b9:f6:a6:dd:b8:26:a2:05:d0:55:4b:2e:cb:61:
8a:44:e2:89:9a:f7:a3:d2:a1:1f:8d:69:1e:e5:ac:
8f:9c:b8:b4:e0:31:17:db:96:27:1e:03:ed:59:0e:
f3:67:b9:1f:84:8b:bc:9b:1a:97:c6:42:2f:2c:4c:
bc:ee:30:65:de:86:60:9e:bf:bc:2d:87:9d:c8:b6:
ce:34:bf:75:0e:c9:4a:18:89:4c:dc:df:22:b2:11:
77:44:22:f7:37:ef:40:62:20:3d:5e:c1:4a:88:2b:
14:7f:3f:99:ec:09:6a:e6:a0:82:e5:80:5b:c3:ad:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:65:FC:B3:9E:34:0C:A7:4F:85:9E:EA:06:EC:BA:60:0A:99:29:25
X509v3 Authority Key Identifier:
keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:93:cd:0d:67:2e:5b:58:de:e8:de:b7:72:3a:96:d8:bc:eb:
27:3b:30:05:0b:0d:5e:ab:8a:63:7a:7b:f9:4e:4f:cf:15:a7:
c3:f1:b3:c7:06:95:18:aa:34:49:ac:58:4b:f3:ff:8f:11:ee:
e6:9c:14:e5:d1:ee:1e:40:49:95:e0:d7:a9:9a:e1:86:91:40:
ee:f6:a4:b8:53:6d:2b:db:a4:3b:62:6f:79:96:a2:9c:9a:7b:
fa:8e:30:20:e3:f0:eb:8a:e0:ae:e4:f6:4a:68:b1:0c:88:93:
ab:da:36:ca:30:cf:dd:35:84:f5:a7:22:1f:57:33:ce:3e:03:
0e:ff:f7:c2:b5:87:d7:f2:26:43:e2:a0:41:93:75:87:56:a9:
4b:58:16:92:89:1d:47:4c:75:95:6f:50:9b:4f:4a:d0:c8:f9:
f5:4f:fb:b5:ea:bc:0c:09:65:80:0e:d9:c3:e6:0e:cb:fb:f4:
62:2d:06:95:fd:01:b1:4a:19:16:9f:7f:3b:ec:44:da:ae:a3:
35:13:30:74:d3:96:39:45:30:c4:ca:c1:ba:ce:fe:69:01:47:
e9:dd:d6:39:f4:32:d7:c1:43:4a:d1:cf:00:49:c3:8d:5b:ec:
be:33:25:08:b7:59:58:58:49:e0:42:c3:08:43:33:74:f4:91:
dd:31:58:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:56 2026 by rpki-client