Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File: gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier: +URjrcJRnnh9gPU5EC0SJhKHFQk3pL9LCnPskI/GTNY=
Subject key identifier: 5A:3A:53:A8:7E:7B:DB:F2:45:3B:2A:3D:1B:EA:2A:91:81:25:66:68
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer: /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial: 019D389C5BC3FD3BB5ED2FFBC6406242E37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number: 09D6
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: Iexzw769/jtNbkquFB/ZbnDaRjGnwlNONnzorAxzkm8=)
2: qG_zm-_87cXSw0_LhJiatFGZjco.roa (hash: 845weVVX02y1u2NuqLxhj3PGe6p4QBfV9nv+gr8bpog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5b:c3:fd:3b:b5:ed:2f:fb:c6:40:62:42:e3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=5a3a53a87e7bdbf2453b2a3d1bea2a9181256668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:e4:3c:12:35:5d:4a:8c:0d:fb:8f:d6:7f:
67:a0:71:50:ea:40:83:52:82:fd:dc:04:6f:76:67:
48:81:c4:c8:e2:f8:b1:2c:cf:d0:9c:02:a7:5c:aa:
e5:e0:a8:4f:2d:b4:63:08:4c:72:4c:ad:95:7f:e0:
8c:49:b1:f8:24:e8:2b:20:09:9e:6c:fe:42:8d:02:
0b:34:ef:09:96:3c:3c:17:0b:7c:cd:9e:c9:cc:48:
68:87:cd:73:8b:36:0d:31:1e:18:09:16:9b:93:cb:
96:e5:b6:76:ec:ad:f7:88:45:b6:07:69:2f:ed:af:
aa:b9:5b:c5:16:78:e8:a2:00:13:2f:2f:1c:a2:e7:
18:20:f4:2a:cc:d6:7c:ec:db:63:10:0f:a4:a5:a7:
e4:52:d9:ab:d8:67:40:b2:b5:50:28:fa:63:2e:dd:
4c:64:a2:14:c9:bb:1c:84:3e:4d:6c:3b:c9:7e:49:
fb:c3:81:9a:2c:fe:b4:dd:b9:d1:77:62:48:94:24:
8f:7f:5c:8d:1c:3a:39:a3:de:03:4f:94:6d:ee:09:
1b:05:9a:30:c7:53:bd:d7:ae:1a:db:c9:7d:d2:67:
cd:29:b1:d5:5d:5e:c2:ff:d9:60:62:12:e4:b3:5a:
59:2d:2c:80:a1:22:17:49:58:c4:ac:9d:e1:0e:88:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:53:A8:7E:7B:DB:F2:45:3B:2A:3D:1B:EA:2A:91:81:25:66:68
X509v3 Authority Key Identifier:
keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bf:ec:e0:ad:2e:91:55:60:3a:42:a2:76:7b:ce:62:c6:5d:
01:f9:78:85:c9:80:7d:3b:8b:2d:0e:d1:f8:6d:b4:5b:a1:02:
64:6b:b9:7a:c9:21:22:2b:11:93:18:29:61:ad:74:b2:9b:bd:
50:d4:86:75:bc:2c:59:91:3c:14:2e:b8:ac:bb:79:35:3a:8f:
d2:83:d4:b7:dc:7f:c7:9b:28:5a:d2:d7:e1:dd:f4:50:fc:5d:
0c:aa:7a:64:30:e1:28:81:c8:24:2d:e4:c7:d9:a2:a1:d4:f1:
15:5e:25:60:19:58:8f:4c:86:49:58:95:2a:9c:d9:6a:07:41:
d6:c5:25:d1:61:32:8e:14:53:57:95:e0:ce:bd:81:89:2e:ea:
a1:59:7e:20:d5:81:d3:49:6d:cd:7c:81:b1:c3:fd:ec:7f:80:
6c:a7:20:9c:c0:ee:e0:a2:2a:d3:9d:0f:3e:0e:7a:b2:f4:bd:
c7:ef:ac:34:f6:13:eb:11:87:74:87:b7:96:71:a1:6f:d2:e0:
bb:44:82:a8:7b:90:5a:64:5a:07:bf:bd:68:84:e2:d6:d4:19:
48:ac:d1:b5:b7:8a:36:97:91:5e:98:7c:0e:f9:df:38:ea:a5:
b8:4b:2c:5f:49:6b:ea:01:b2:db:8a:26:7c:99:27:c4:19:7d:
f5:8d:98:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:01 2026 by rpki-client