Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier: cE7wXwYy6IH8G4X+29CPSzuoPSMshIDabpwT2v1RoDw=
Subject key identifier: 67:D1:4D:49:4B:18:04:3E:69:50:2B:59:83:93:B6:17:23:09:E0:0B
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer: /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial: 019D37527111ACD784F03B87BD1BE5554C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:00:42 +0000
Manifest this update: Sun 29 Mar 2026 02:00:42 +0000
Manifest next update: Mon 30 Mar 2026 02:00:42 +0000
Files and hashes: 1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: 77ntURcvP7i842yatGa5UNTEudBxvhC/zgJiIqw3q/0=)
2: R5kKLGujwVyN11kdJlzsqOL8oRw.roa (hash: cDKxoErZto4JESswwKsE0Hav5uBoVZS9w/0qja84b7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:71:11:ac:d7:84:f0:3b:87:bd:1b:e5:55:4c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Validity
Not Before: Mar 29 02:00:42 2026 GMT
Not After : Mar 30 02:00:42 2026 GMT
Subject: CN=67d14d494b18043e69502b598393b6172309e00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:f7:23:0d:30:4b:74:9d:16:26:8f:ae:d1:
1f:0f:a5:bf:98:8c:fb:f5:f4:b5:ef:52:5d:3c:ad:
24:1e:53:9f:ae:a4:10:2b:73:3e:b4:15:24:ee:9d:
bd:5b:53:cb:f0:bf:29:c9:ed:5e:a6:81:91:18:b2:
42:86:ea:c8:a6:41:9d:ad:14:09:ab:c3:6d:9e:68:
9b:d0:d4:81:78:08:ce:fe:ce:a5:c8:64:e9:c8:81:
bc:7c:58:13:b9:e0:39:f6:a8:42:c7:ea:cb:6b:7a:
74:66:16:c7:87:aa:66:b7:6e:2b:1d:93:f5:53:60:
b8:a3:5f:51:3b:6f:59:01:28:72:6c:56:e9:e8:29:
d1:12:fa:da:a1:ec:82:02:85:76:0a:7b:81:37:86:
67:65:5e:23:eb:8f:d2:7a:4c:ac:6c:c3:89:b3:e6:
28:bd:da:42:63:7c:6e:93:96:07:f5:ae:04:a2:cf:
45:81:ac:1b:76:5a:68:b7:bb:e0:d5:78:d2:25:41:
f3:85:4e:cf:61:c0:61:d8:ef:88:bf:12:16:50:61:
ae:3f:c4:99:32:d0:14:e5:8e:97:5a:34:33:e0:74:
43:e6:5d:ed:0f:eb:c4:aa:38:f6:a5:e2:b5:33:37:
3d:3c:23:3c:24:58:14:20:79:d8:54:84:fb:45:c7:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D1:4D:49:4B:18:04:3E:69:50:2B:59:83:93:B6:17:23:09:E0:0B
X509v3 Authority Key Identifier:
keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:00:73:e1:d4:4e:81:72:b8:06:69:e6:74:ca:08:98:7e:84:
4c:0b:25:c3:af:de:8d:d4:c7:3c:98:97:fa:2e:31:b4:0b:6b:
1f:90:98:bf:46:84:fd:aa:64:82:38:d9:6b:85:03:d4:2e:dd:
b3:d1:e5:a5:d1:2d:16:b3:99:d5:f4:db:f8:ec:b3:31:d2:3d:
37:94:bf:63:f3:cf:46:d8:3e:c2:97:01:23:83:6f:13:c7:d5:
a6:40:f5:08:03:67:27:66:02:8f:1c:e0:2b:ea:27:29:bd:e4:
51:97:8b:ce:61:9b:08:f1:53:7f:b8:c5:0a:3a:5c:5e:03:1e:
bb:f9:40:b3:27:29:d2:b0:c6:73:f8:8b:b1:52:3f:d2:f9:5c:
44:52:8b:58:2b:d5:c5:3e:24:01:68:c1:b9:4d:a1:f9:fb:ca:
f9:c8:78:9f:51:de:47:14:72:b7:53:bd:e9:55:55:74:7a:86:
57:75:d8:9a:e5:e4:99:74:b8:82:fb:26:a7:b5:6a:f4:9d:cc:
6d:df:9c:7a:e2:10:be:7b:2b:0e:bb:ac:d8:32:01:e3:0b:fb:
3f:6b:b8:db:da:1d:cb:55:30:9d:a7:ca:93:46:94:0c:c7:c9:
68:c2:47:6f:de:25:3d:59:1f:31:99:f7:c8:db:9a:f0:f3:03:
c5:ad:a5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:10 2026 by rpki-client