Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
File: Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft (raw, json)
Hash identifier: 8ZcUyGRxaGPr9LG/9WlwrBegS7wZEHeXjpj50IudXPo=
Subject key identifier: 1A:23:39:07:B2:15:78:C1:48:32:B9:B3:F0:18:9E:E9:A7:64:E0:68
Authority key identifier: 1A:F7:9B:F8:AA:B6:BE:01:49:D8:DB:5C:8A:0C:ED:BC:95:70:F1:6E
Certificate issuer: /CN=1af79bf8aab6be0149d8db5c8a0cedbc9570f16e
Certificate serial: 019D37F75C7D54E6572AE2233ADA34D1FACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
Manifest number: 0375
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl (hash: VcvpkTJlh6A3xzZTpO91RjfL46HK2+ku9LmYBZv8TV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5c:7d:54:e6:57:2a:e2:23:3a:da:34:d1:fa:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af79bf8aab6be0149d8db5c8a0cedbc9570f16e
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=1a233907b21578c14832b9b3f0189ee9a764e068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b8:19:27:74:62:e2:88:41:ff:b1:02:73:04:
ae:1d:ee:3a:b3:22:52:e5:e5:93:9f:12:75:69:3b:
dc:23:24:71:ae:37:ed:1d:8c:64:b0:a5:81:7d:23:
e5:41:87:05:25:7a:3b:71:c6:d3:26:cd:77:c8:50:
23:0a:ee:5c:54:f0:bf:f5:9b:fd:11:d0:84:1b:71:
14:a4:ce:50:2d:f0:95:a9:10:78:4c:95:69:2c:62:
e2:4f:88:dc:fb:85:96:0b:98:fa:fb:7b:74:14:a4:
03:ae:e7:d2:74:e9:9f:ce:a0:51:32:e6:61:72:a8:
e3:c4:2b:f5:86:84:18:04:4b:74:44:51:9b:ae:db:
1d:46:31:4b:37:bc:df:cb:a0:5e:6d:d1:05:78:c4:
09:d8:1b:05:b6:a9:63:be:39:b7:9b:5b:ea:88:0b:
c7:ae:a8:87:f2:3c:58:fb:20:75:7c:dd:ef:d7:4a:
6b:1c:07:d0:a4:35:92:72:99:ac:0a:bc:b6:92:f4:
13:c3:b6:d0:8f:fb:96:bb:27:c7:90:c4:51:40:ba:
36:80:c4:6c:54:eb:6d:8c:d7:73:63:9c:6d:0e:f5:
43:cb:6c:ca:10:16:fd:f6:18:88:3c:c9:6f:e5:95:
70:2d:63:eb:2b:a7:25:e0:6b:ec:11:9d:cc:c8:72:
8b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:23:39:07:B2:15:78:C1:48:32:B9:B3:F0:18:9E:E9:A7:64:E0:68
X509v3 Authority Key Identifier:
keyid:1A:F7:9B:F8:AA:B6:BE:01:49:D8:DB:5C:8A:0C:ED:BC:95:70:F1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:23:01:2b:da:7a:f5:89:c0:4d:55:ae:0c:84:62:71:84:d7:
53:29:99:4f:42:e9:39:0e:12:4a:c8:27:0b:e4:b8:3a:a3:ef:
97:12:b6:3d:e5:37:92:07:d3:ab:53:6e:ed:96:b3:39:14:70:
ff:f0:c2:e1:3f:bb:02:be:98:2f:83:20:bb:94:a9:5e:74:07:
81:cd:8e:92:aa:b7:fd:b3:11:31:b5:fb:d4:69:80:ee:25:41:
9c:ec:63:57:8c:3e:56:82:36:6f:ef:53:69:45:d3:fa:c4:e1:
6a:7c:90:41:4c:48:f0:52:b6:ea:23:d6:75:7a:5a:d9:ed:d8:
3a:0a:06:60:fd:7b:a9:a9:40:91:19:62:0f:d8:e5:9c:4e:26:
3d:52:9c:3b:23:1c:e9:5d:bd:48:33:84:6c:9a:c9:a5:0f:2b:
dd:4e:08:8e:e7:01:ee:ff:15:4c:b0:2a:a7:e7:09:64:ee:6d:
81:9e:26:45:d0:01:72:d5:00:9e:3c:12:5a:23:0c:4d:17:e2:
fc:9e:bc:e2:5e:ad:35:f8:27:ee:e8:17:52:63:4c:b6:45:66:
1b:b8:12:de:c1:03:0d:59:a0:49:66:9c:a2:fa:b8:b6:fa:42:
e5:d5:f2:a6:be:4e:10:e0:8d:41:51:15:b3:21:72:cd:b5:a9:
fe:c3:8c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:07 2026 by rpki-client