Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
File: GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json)
Hash identifier: nYl7kImanCoG6s+INabK+VSQx6Bv6sGnSi593yZbjOk=
Subject key identifier: A3:23:33:79:C2:70:B0:D4:52:48:2A:40:AF:C3:FC:D4:41:ED:DB:BC
Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
Certificate issuer: /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Certificate serial: 019D38D306ACE6CEF6A653551BDCB155ACC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
Manifest number: 0FED
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: Jl7+5YPrw196SfvdAGLYaasrECZurhxiA0vz91K/Bt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:06:ac:e6:ce:f6:a6:53:55:1b:dc:b1:55:ac:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=a3233379c270b0d452482a40afc3fcd441eddbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:01:4a:55:e4:21:bc:ae:2a:9f:6c:4f:3d:
dd:9e:b1:72:3c:ee:10:ab:d6:ad:b2:eb:fe:4d:00:
f5:66:a3:93:c2:aa:ca:31:c8:08:26:85:dc:40:ee:
0f:56:de:5d:39:5a:f2:f7:b7:97:17:ff:84:1b:35:
b1:1e:13:7e:cd:2a:75:26:fc:e2:0d:1c:ac:83:0c:
ce:3a:b5:91:4a:95:51:14:00:bb:0b:60:9e:96:18:
f8:f6:5b:57:fc:53:28:19:f4:49:6b:c2:b2:11:7d:
7d:e4:00:04:c8:bd:72:0a:2a:8b:9f:f2:ab:e0:3d:
0d:b6:66:b3:63:46:d0:ad:de:6a:6c:5c:12:7d:b7:
2d:e7:d3:c5:15:65:d0:74:1e:d8:bd:22:c9:8a:bc:
e8:7c:08:dd:62:2e:ca:35:36:c9:78:b6:a0:cc:6e:
0c:24:35:2e:33:1c:d9:47:ee:dc:b7:d8:00:33:54:
45:e7:43:3b:07:30:5d:87:69:9b:c0:6d:b4:2a:9e:
d3:67:25:dd:4c:a8:31:a1:93:93:43:25:60:d3:0e:
37:d9:c6:34:84:7f:43:96:b1:ef:00:93:92:45:11:
3a:db:3c:84:7a:8f:09:5d:e1:24:1e:08:19:4c:7c:
9e:f4:d5:c8:12:0e:9a:a6:de:e2:4a:18:da:6f:a6:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:23:33:79:C2:70:B0:D4:52:48:2A:40:AF:C3:FC:D4:41:ED:DB:BC
X509v3 Authority Key Identifier:
keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ee:e7:7a:92:2f:86:57:4f:d8:6e:92:e7:a6:96:c8:df:12:
11:fe:6d:fa:ff:4a:f0:ce:56:15:3d:de:77:0d:28:7f:eb:d3:
13:98:79:31:4c:f9:f9:88:c8:67:1b:8c:bc:4e:16:0c:a0:25:
ce:33:e7:6d:75:25:a3:ae:8e:a8:e4:2c:47:35:0e:e5:7e:a0:
fc:fb:ac:49:65:af:52:1e:0f:73:b3:58:1c:ae:56:57:9f:95:
b9:e9:13:8a:4d:45:10:4d:75:d4:b8:84:c5:3f:2f:be:6e:89:
da:bb:3b:d6:81:a0:5d:ac:37:3f:e5:9d:08:a3:88:7e:c2:e7:
28:28:2b:c4:eb:12:b1:6f:9c:5f:95:68:46:9e:df:cc:cf:ec:
02:ea:bd:9e:3a:b7:b2:7a:97:a3:6e:82:7a:c1:f7:e7:cb:d6:
8b:6f:9e:22:72:03:0f:d6:11:b7:90:05:1d:f3:57:df:ae:57:
f5:43:25:5e:87:3c:74:74:84:c1:72:39:66:ee:67:60:54:c8:
8c:a8:37:99:f2:df:49:61:ba:27:9f:0f:18:bd:af:94:90:59:
a2:54:40:68:6d:0b:0a:c4:58:e2:c9:96:6a:9d:3d:97:9b:05:
d7:4f:2b:e6:b8:f3:d7:ae:ab:16:d1:16:ad:32:cf:e0:bf:b5:
fe:17:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:38 2026 by rpki-client