Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: qjgxoYc/ntYh8mOuPpSVg2fiAYwjXYppEXB5e542kMA=
Subject key identifier: DA:3E:02:53:B5:D5:A4:F0:7C:C6:2A:F4:33:B3:01:6E:F0:CD:43:C9
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 019D382DD0F5D187DF9E923EB19A3D47CE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:19 +0000
Manifest this update: Sun 29 Mar 2026 06:00:19 +0000
Manifest next update: Mon 30 Mar 2026 06:00:19 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: t7Wc5z+8AYL4EUswfPGVxuvrOY7COZ9dj24/98emp7c=)
2: I5h_-n6q20lsOaRJZ1RaRmHMf8U.roa (hash: zer7O7oW6HZhNmqlr1aPUcsYOzbLm/tHkE6ZSX4C2TU=)
3: QiybHyZYXADSID7uWkeeef6I9FM.roa (hash: nffxcFthp0YuUEIfa7lK0CY+6Pk1YEGmytbZGeUzOYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d0:f5:d1:87:df:9e:92:3e:b1:9a:3d:47:ce:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Mar 29 06:00:19 2026 GMT
Not After : Mar 30 06:00:19 2026 GMT
Subject: CN=da3e0253b5d5a4f07cc62af433b3016ef0cd43c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:e9:70:da:7d:61:46:08:61:75:7c:15:df:
d7:0d:c5:c5:90:95:53:b3:31:07:d6:11:b5:59:26:
ee:40:c6:be:18:1f:52:55:65:e2:d5:a6:1d:2d:66:
41:fb:37:19:09:0f:d5:85:01:f4:f6:67:76:87:32:
46:34:ac:ef:56:0f:de:90:4d:26:eb:80:67:76:d9:
28:2f:ea:e9:23:90:f4:ef:5e:9e:67:b6:8a:af:02:
99:31:57:d0:43:f9:35:9e:2c:71:b9:0f:5b:15:29:
8e:12:d3:52:e7:45:d8:4d:99:91:f8:68:4a:fc:c9:
65:b8:73:6c:84:2d:59:11:b3:b3:34:41:97:38:de:
e1:67:87:e9:01:0e:9e:fa:2b:d2:d7:fe:5d:da:e6:
ac:b7:c0:d7:95:40:fb:e6:07:7b:33:9d:bb:00:c6:
86:50:15:22:c6:c3:39:d0:8d:95:03:bf:66:fb:de:
4d:ed:b8:6d:d2:20:8b:1b:56:bd:93:6d:56:c3:73:
1f:10:43:8f:8a:41:39:01:45:2d:a6:a6:37:c7:3e:
00:cd:dc:9c:82:ba:ce:31:e1:ad:d2:57:f1:f8:75:
1a:01:95:ab:b8:d6:4d:0c:fa:b7:d5:04:1e:cd:00:
aa:42:fb:46:56:f2:72:e3:6e:20:6f:19:9d:31:d6:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3E:02:53:B5:D5:A4:F0:7C:C6:2A:F4:33:B3:01:6E:F0:CD:43:C9
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9e:ff:76:bf:51:8a:2a:f1:4c:78:e9:29:57:97:d5:66:d6:
45:d8:6b:99:bf:ff:c0:6a:20:40:25:31:05:6d:7d:d9:5b:8e:
96:57:60:dd:71:30:1e:f4:ce:f9:0a:83:ef:a5:46:e8:f2:46:
b0:e5:40:21:04:e1:f4:13:21:6d:75:85:32:52:55:1f:ff:9d:
49:60:4f:6f:04:cd:28:21:0b:19:ee:ed:33:b4:93:c7:fd:26:
68:b8:53:1a:88:cf:1c:73:86:a9:9b:c6:bb:79:fd:3e:ae:6d:
af:52:e8:4f:b2:f8:82:08:5c:70:4f:78:54:bf:8b:43:3a:6d:
9a:0b:d7:70:57:60:6d:cb:ea:2d:c1:60:75:3d:77:4a:61:3e:
fb:3f:6d:96:79:f1:0b:b2:a6:e3:a6:5f:11:27:25:d1:35:49:
34:70:b9:61:b3:2e:94:50:fc:ce:3e:55:66:e8:65:d9:cb:30:
80:cd:62:66:95:dd:f7:de:bd:80:04:0e:85:a1:86:80:80:48:
b9:82:51:20:a0:33:f9:4f:6b:68:d4:d4:56:3d:90:c4:af:a7:
a7:87:2e:46:73:25:b9:96:64:3c:11:0f:b0:04:47:f8:7e:10:
44:92:51:57:20:11:43:6f:37:f1:84:50:ab:0c:4a:15:29:62:
a8:0a:56:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:23 2026 by rpki-client