Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
File: gTpCg40uRe1drUEUYG2XKaZQHSM.mft (raw, json)
Hash identifier: 6ldQrjSdxNlmCfYN7hjSr+O4gSjniEan+9Gg17JQanA=
Subject key identifier: A6:68:70:AE:BA:E5:D8:F1:65:C2:89:38:FC:00:EE:9B:88:86:28:4A
Authority key identifier: 81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
Certificate issuer: /CN=813a42838d2e45ed5dad4114606d9729a6501d23
Certificate serial: 019D38D2C92DEBC9546102AD61053E668DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
Manifest number: 10EE
Signing time: Sun 29 Mar 2026 09:00:31 +0000
Manifest this update: Sun 29 Mar 2026 09:00:31 +0000
Manifest next update: Mon 30 Mar 2026 09:00:31 +0000
Files and hashes: 1: gTpCg40uRe1drUEUYG2XKaZQHSM.crl (hash: qIqRSB2HHIRl3pAVT4Qxchfc12RQstSAHXvaNZyzRas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c9:2d:eb:c9:54:61:02:ad:61:05:3e:66:8d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813a42838d2e45ed5dad4114606d9729a6501d23
Validity
Not Before: Mar 29 09:00:31 2026 GMT
Not After : Mar 30 09:00:31 2026 GMT
Subject: CN=a66870aebae5d8f165c28938fc00ee9b8886284a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:a2:8e:f9:39:fa:07:3c:1d:0e:91:de:14:
18:95:25:6d:7d:52:7e:01:38:0b:46:c5:a2:03:a5:
3a:74:e7:a2:fb:52:c2:ab:d3:fa:a0:af:80:ab:e5:
1c:2b:ac:85:b2:45:a5:41:62:a8:e1:d0:11:16:cd:
eb:4c:62:f4:53:a7:a2:d7:25:ba:a0:47:db:b1:e7:
00:ed:ad:c8:e9:fc:b7:0d:3d:5e:34:96:57:18:11:
bd:ad:69:60:b0:c4:fc:e0:59:01:22:dc:df:b4:b4:
7b:32:9e:1d:68:77:ac:7d:3e:5a:e0:94:77:b2:b6:
bc:ff:b7:0b:a2:9d:12:71:1e:ad:bb:6c:58:26:9f:
26:63:4f:df:80:b3:c5:ec:67:b1:b5:9f:3e:ff:78:
85:bb:f7:8b:06:eb:31:3f:35:70:cf:60:07:d5:47:
62:47:2e:a1:74:05:01:b2:e3:c3:97:18:49:65:11:
fc:87:1e:86:8a:d0:83:b9:1a:aa:6b:e7:6d:84:3a:
31:a8:6c:6a:69:74:ac:f0:c8:af:ee:a5:20:d7:84:
81:dc:ec:a7:3f:e9:24:18:81:42:e7:ca:2e:b5:23:
eb:32:2f:63:47:da:01:02:36:7f:be:e5:d9:2b:01:
27:6c:5f:ff:c5:e0:33:c5:eb:62:de:c4:72:05:e9:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:68:70:AE:BA:E5:D8:F1:65:C2:89:38:FC:00:EE:9B:88:86:28:4A
X509v3 Authority Key Identifier:
keyid:81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4a:fd:6c:23:f8:55:27:c4:6f:97:2e:b0:d8:a6:58:48:a9:
83:b5:98:e1:ed:66:86:e4:b5:58:37:95:75:ef:5f:8a:74:63:
68:c5:1d:cf:bf:42:c5:ca:43:32:b0:12:19:b1:5d:99:90:c2:
4b:64:35:bb:fa:9f:ae:85:c4:c8:76:b1:55:47:d0:48:f7:24:
b4:41:b3:e0:4c:27:1d:55:27:6b:cf:b8:71:6c:4f:0c:22:31:
17:d1:e4:ff:29:d4:7a:ec:81:c0:0e:c9:50:17:3c:59:bc:19:
7e:9b:cd:b7:ab:dc:b8:0b:33:df:bc:f2:c1:74:c2:9f:7f:db:
eb:50:83:5c:ce:bf:f3:b4:e6:4d:61:b7:33:ad:8f:6c:9c:27:
b1:c7:96:59:f8:b4:1a:29:38:74:ac:f6:c1:45:fa:7e:4d:1d:
f8:d7:60:f7:ad:fb:44:aa:18:a5:24:de:8c:10:48:93:5a:5e:
6d:d5:af:b7:d4:5c:11:a7:66:7c:e4:8c:3e:46:d1:8b:2c:2e:
5d:0e:1f:b5:6f:15:0f:f6:1f:81:4e:91:4d:22:6a:f7:ab:64:
94:09:68:b7:0a:ee:e7:cb:0c:11:54:3b:30:00:59:1d:e6:83:
01:69:40:fc:7a:bf:58:ce:e8:a4:b2:22:51:1f:da:53:c2:75:
40:55:98:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:04 2026 by rpki-client