Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
File: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft (raw, json)
Hash identifier: PC0q5lNc6Lhdcp1BKdYZWKDz4ioPu3bJmZlMj1BFlAw=
Subject key identifier: 81:B9:EC:97:C6:B8:F6:CA:63:DD:8F:D1:73:E2:39:03:4E:F8:55:3A
Authority key identifier: 82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
Certificate issuer: /CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Certificate serial: 019D37C01264F6254BBFE617CEED08D56CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
Manifest number: 1316
Signing time: Sun 29 Mar 2026 04:00:27 +0000
Manifest this update: Sun 29 Mar 2026 04:00:27 +0000
Manifest next update: Mon 30 Mar 2026 04:00:27 +0000
Files and hashes: 1: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl (hash: ESDODgMI8T6BEb7m2fed6ppoVpx4S6f5Xb1BjvEOI6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:12:64:f6:25:4b:bf:e6:17:ce:ed:08:d5:6c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Validity
Not Before: Mar 29 04:00:27 2026 GMT
Not After : Mar 30 04:00:27 2026 GMT
Subject: CN=81b9ec97c6b8f6ca63dd8fd173e239034ef8553a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:62:ff:f2:bb:3b:30:9a:c4:e1:3b:c8:84:
f9:c1:4e:b9:2e:80:69:3a:87:c8:27:ce:df:61:1c:
11:b1:cc:99:ad:51:2a:14:53:27:c6:b3:8b:55:5e:
32:2f:ba:74:84:92:dc:62:d3:cc:0f:9f:f3:44:ce:
8a:e5:15:a2:54:8b:8b:e0:06:6d:76:fa:f6:24:81:
1c:bc:0c:22:93:ed:2e:41:2a:71:e2:d1:82:8b:f9:
4f:d1:cf:b3:0d:31:de:c7:59:b1:f1:50:87:81:c2:
c4:15:b8:c3:8a:6b:8a:6c:81:88:5f:e5:7d:71:1f:
a0:8c:65:95:3c:be:80:c3:ee:6a:34:c9:9c:3a:f1:
57:a1:3a:a3:f9:90:4d:01:7a:4c:4f:38:1c:a6:92:
17:91:43:04:61:30:14:b4:32:e5:c2:da:4a:67:d5:
d6:24:4c:04:da:83:c5:8c:dd:50:81:83:20:fd:48:
ed:92:a5:55:49:ae:d5:70:67:7f:bd:13:f1:e3:b0:
30:a4:10:5c:5f:68:d4:2a:80:2d:bc:33:e1:0a:6e:
56:e3:c8:d8:4e:de:a7:9d:3b:14:ad:e7:7e:20:21:
0b:31:89:73:78:a6:a4:e1:4d:70:6a:54:58:01:e8:
5b:7d:90:34:f9:0b:ad:64:6d:a6:49:29:53:32:cd:
9f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B9:EC:97:C6:B8:F6:CA:63:DD:8F:D1:73:E2:39:03:4E:F8:55:3A
X509v3 Authority Key Identifier:
keyid:82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3f:15:83:d9:85:9c:0c:dd:73:7a:47:be:8a:2d:d1:32:a4:
87:0b:55:4b:c4:12:1e:43:e2:ed:cf:f6:9f:b6:07:e5:21:c2:
fb:b1:35:37:c1:10:cb:ba:4c:5c:77:f7:27:cc:b3:ab:6f:ee:
ec:b2:be:93:01:31:c8:35:ec:c6:75:c1:14:e7:a6:9e:2e:49:
92:67:97:f8:d5:5f:58:92:27:92:4e:79:d1:be:ab:cd:f6:ae:
8f:64:96:a8:ae:a1:66:25:2e:5a:03:50:8e:0d:32:a9:06:67:
94:8b:e1:25:1f:df:8f:b3:de:a6:fa:23:b5:14:3c:cc:dd:c5:
eb:80:81:98:3b:32:87:26:23:78:77:25:b0:48:bf:94:72:f4:
61:79:9b:e8:6f:cf:c4:ae:03:61:2c:72:51:57:b1:5d:69:2f:
fa:23:5b:d7:80:a3:39:d3:10:c9:41:6a:5e:d6:1f:f4:e3:6a:
fb:79:43:d7:b8:ff:56:38:50:e1:2b:37:31:c2:0c:81:05:4d:
0a:1d:64:76:25:36:4b:e3:3f:ee:e1:33:9d:9c:eb:3a:c2:74:
f0:d2:e0:4e:a3:06:2e:25:b7:dc:2d:38:ba:b1:4c:a5:84:a0:
2b:0c:43:f4:bf:fc:03:7c:7d:8b:ce:8b:e1:07:25:8d:f8:49:
9b:a5:93:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:57 2026 by rpki-client