Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File: GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier: eaUoyo1KlK56kr1By+mNWbF6QcPl50b08tvopyHlm4k=
Subject key identifier: 83:AE:B1:8E:45:49:B8:A6:D5:AF:C5:4B:A8:89:04:BB:F2:7E:C0:39
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer: /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial: 019D3909C02A32E5314C1702CE688FEC5EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number: 15CE
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: RKuScij2z1eTjQPsTCG89jfZRVQGD5tGhj+xMlWN1PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c0:2a:32:e5:31:4c:17:02:ce:68:8f:ec:5e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=83aeb18e4549b8a6d5afc54ba88904bbf27ec039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:03:f9:18:39:f9:fb:18:e3:88:38:50:dd:
53:84:99:e7:99:64:8e:79:a0:ce:90:e6:45:92:f1:
fa:d5:35:cc:29:36:f4:27:45:d7:5e:9a:a5:be:60:
9d:3e:59:1e:3b:d1:66:e4:7a:f2:0a:d5:8c:0e:18:
ad:b2:9f:b4:90:25:7d:32:71:b4:d3:4b:36:9c:5d:
57:19:31:d8:b0:9e:2e:2f:c8:ac:bb:2e:95:8c:9b:
c7:25:b2:b1:be:e1:be:fb:0d:1c:0b:68:56:42:0e:
96:51:07:4c:db:7d:db:94:71:7e:65:2f:97:bc:ac:
1a:a8:71:80:8e:76:0e:49:a9:da:c3:c2:79:f9:84:
40:fe:8d:51:83:33:80:99:e5:73:68:c4:29:a4:5c:
f3:75:e6:3f:38:d9:93:9d:35:1f:34:0d:ea:6c:9d:
06:11:db:86:9b:b6:60:e8:2d:a7:99:c8:80:31:af:
b0:91:89:e1:24:8b:df:14:40:82:b9:8d:d9:de:8d:
2d:22:b4:b8:a8:e4:5c:4c:c9:7d:58:e0:32:73:2d:
1a:7e:d7:1c:27:0a:ee:2b:96:3a:43:35:23:9a:34:
4c:26:f1:2d:0b:f6:63:9c:45:ee:da:78:d6:88:56:
76:8f:c5:aa:08:00:5e:77:8b:37:87:55:ee:58:09:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AE:B1:8E:45:49:B8:A6:D5:AF:C5:4B:A8:89:04:BB:F2:7E:C0:39
X509v3 Authority Key Identifier:
keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4f:89:01:06:5e:28:40:c8:b0:c9:9e:3b:ac:1c:23:ab:fd:
24:84:33:49:79:42:f5:8f:a6:80:51:8e:4f:a8:42:b3:b1:1f:
80:53:b5:9d:79:dd:15:17:a8:26:30:8c:d2:51:06:e3:fa:72:
73:fc:d3:33:dd:a9:ea:92:d5:a3:6e:42:28:2d:da:1e:6b:20:
93:fa:c6:58:e9:17:c9:ad:0d:64:bd:dd:11:00:23:c9:f4:99:
63:79:44:42:d8:14:d7:07:1c:71:24:75:6e:a5:87:15:28:87:
fb:68:d1:cd:97:8f:4f:f6:04:c0:4e:e7:31:a8:8a:1b:59:cc:
e2:6d:f2:6c:f2:8d:97:a8:c5:97:ab:9a:16:7c:65:a9:8e:04:
d5:f0:15:40:bc:7f:22:6e:c8:93:72:e3:b7:b0:a2:03:19:fd:
37:47:87:d0:44:c8:23:51:97:40:7c:14:94:b2:ed:3f:f2:0a:
cb:c8:25:53:9a:fc:08:e9:db:42:94:18:2f:4c:e9:86:5f:ab:
9c:a3:83:46:17:5d:6d:a3:05:87:a4:38:51:f5:ff:9e:cc:7b:
c7:d9:57:4b:ca:7b:93:3d:78:7a:99:54:ce:a4:f5:3d:25:57:
ee:9c:8f:8d:31:6f:8c:45:9a:11:5b:59:f9:21:03:dc:91:24:
d7:31:2c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:04 2026 by rpki-client