Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File: GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier: /W6hR58RJ2P7Ga8bJkIIyUyy8SnkQeHm3jXz332XStU=
Subject key identifier: C0:6E:A7:F0:06:A7:97:E6:45:67:CA:88:86:06:AF:82:43:FE:14:62
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer: /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial: 019D3940BA479A7EFC58D15DA18120149BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number: 15C8
Signing time: Sun 29 Mar 2026 11:00:36 +0000
Manifest this update: Sun 29 Mar 2026 11:00:36 +0000
Manifest next update: Mon 30 Mar 2026 11:00:36 +0000
Files and hashes: 1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: Tgnk5l3ETciOIQpZYp2EMY8LePHUVdI9PGBx/sXfB6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ba:47:9a:7e:fc:58:d1:5d:a1:81:20:14:9b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Validity
Not Before: Mar 29 11:00:36 2026 GMT
Not After : Mar 30 11:00:36 2026 GMT
Subject: CN=c06ea7f006a797e64567ca888606af8243fe1462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:e6:42:41:12:4e:22:55:6a:29:f9:67:77:
76:c1:5f:02:16:37:db:13:27:0c:cf:c9:6f:b9:cc:
5e:50:3c:27:79:48:21:e0:b7:41:bc:56:09:12:99:
31:ab:28:96:b0:08:6b:08:43:8c:98:fd:2e:d4:63:
cb:81:05:df:e6:6f:62:31:a7:61:a1:12:79:0e:bc:
a6:d6:f2:eb:43:80:cc:83:99:ab:9a:36:0f:f9:e5:
70:eb:d1:97:31:b5:a6:c8:e9:be:57:73:bd:53:fa:
10:6c:b9:02:7d:bb:32:f5:42:3f:96:46:89:7f:d0:
72:63:ef:17:5a:d6:34:fd:35:d6:17:8c:fd:7e:d4:
25:dc:77:c7:9e:74:e9:c0:02:37:c3:3a:dd:e1:cf:
f9:0e:47:e2:d2:2a:31:62:13:76:72:dc:14:1e:94:
92:71:fe:a1:10:df:29:13:ae:08:e1:c1:1b:e9:de:
4d:7f:8a:37:4d:e3:11:12:89:7e:28:ae:5d:0c:5b:
f9:a6:ca:47:ff:ea:9d:30:63:a7:72:71:f5:e9:51:
43:72:e3:49:43:d5:77:64:05:85:7b:53:d6:61:18:
a1:0f:8f:93:4d:9e:67:e0:e6:2c:b3:61:85:3e:a2:
a1:f6:07:36:e5:94:64:23:38:b7:bf:de:4d:32:bd:
33:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6E:A7:F0:06:A7:97:E6:45:67:CA:88:86:06:AF:82:43:FE:14:62
X509v3 Authority Key Identifier:
keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5a:a0:f0:6f:20:0c:6d:64:c9:c4:29:55:f2:72:0f:04:5f:
4a:b6:66:4f:64:76:0d:95:9c:8a:8d:d0:02:0d:ce:ee:be:df:
57:9a:19:2a:2f:c4:35:fe:31:07:6e:e8:c9:74:fb:fd:69:d9:
bf:ae:11:26:ca:12:57:63:65:c3:50:be:24:08:3e:1d:eb:b6:
9c:fd:81:aa:e5:fb:50:ae:c2:40:cd:5f:b8:f2:b0:da:2c:64:
53:44:74:32:7b:f2:8d:2d:43:74:60:3f:7b:d1:37:7b:20:f7:
44:5a:d2:05:47:0d:76:de:1a:40:fb:18:4f:20:df:ea:d5:91:
75:a6:11:a6:48:f5:8c:47:cf:d9:be:bb:ca:e3:f4:32:09:39:
3b:6d:8e:03:ba:fa:70:14:7a:ee:c3:ac:6b:5e:f6:b7:70:51:
12:01:5d:f1:5e:3c:46:89:44:65:01:47:32:9e:c5:04:e3:46:
5c:58:69:09:d5:b8:46:91:95:a4:77:28:e3:42:56:ae:f6:ba:
b2:08:e9:91:96:72:74:ce:4d:d6:71:9f:6e:11:6e:08:09:dc:
c6:f6:26:cf:65:e9:8d:50:d5:5a:69:c5:d8:59:14:1b:0e:a9:
cc:98:8a:e3:b9:8f:2a:f6:5f:29:8f:7b:db:a8:9d:23:c3:12:
80:d4:36:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:44 2026 by rpki-client