Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
File: GyN3Poe34e0LVeFQuncWsYJbPiY.mft (raw, json)
Hash identifier: wCk+mba9Ce1HEysRw9l1MUSgEcz5Q/njkplMhS/fS+0=
Subject key identifier: 26:7F:9A:51:27:01:45:DF:5D:23:9E:BA:DF:EE:F1:57:66:1D:5E:CF
Authority key identifier: 1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26
Certificate issuer: /CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26
Certificate serial: 019D38662E747200156F5C220B52D22EBF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
Manifest number: 15CD
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: GyN3Poe34e0LVeFQuncWsYJbPiY.crl (hash: dptRaLUIPjGAauz3HFw5DKEhnAPJ9wx1DW3YZFLmeVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2e:74:72:00:15:6f:5c:22:0b:52:d2:2e:bf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=267f9a51270145df5d239ebadfeef157661d5ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:4a:b4:2a:57:4f:8d:0d:ef:ae:7c:2c:42:
e8:ec:1e:ed:84:c3:cb:0f:da:2a:af:6d:0c:0d:99:
6f:55:ed:18:6b:f2:33:c8:61:f1:23:e2:96:cc:92:
e4:93:51:ae:e5:47:20:1b:0a:a2:45:30:0b:d9:4e:
9a:e7:c0:59:5b:18:67:47:b9:bd:e7:3b:03:d9:39:
3c:63:3d:fe:6f:7e:20:81:95:af:4c:6b:bf:c6:e3:
4c:c4:13:6e:79:c1:1f:c8:2e:3a:56:bf:d7:f4:83:
04:91:f3:89:d0:9c:9d:90:3b:f3:ed:3a:7c:17:9c:
0f:99:57:ac:88:8d:08:ef:c0:58:66:31:80:cf:11:
ec:ea:0c:7d:84:12:45:04:10:20:8a:b3:08:84:51:
c2:68:a9:bb:03:de:4b:10:3f:0b:79:92:f9:0f:61:
22:aa:4c:78:54:87:cb:d4:7b:4f:a8:d6:bc:1f:3e:
34:49:fc:2f:23:ba:ce:fa:e0:5e:d4:ee:32:4e:25:
76:c9:0d:09:c0:e0:90:b8:f3:cf:79:55:1c:05:b0:
e0:ba:dd:bd:63:61:8a:76:e0:d9:16:39:80:39:5d:
b3:4d:ac:1f:9a:b2:63:12:bb:c9:08:cd:61:56:32:
3d:87:04:60:b3:a4:fa:8b:86:b2:83:9e:e3:d8:c5:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7F:9A:51:27:01:45:DF:5D:23:9E:BA:DF:EE:F1:57:66:1D:5E:CF
X509v3 Authority Key Identifier:
keyid:1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f7:f9:ae:48:b3:18:f4:50:10:26:58:57:e5:99:c3:da:1a:
7a:9a:72:c2:ae:fa:ce:a9:76:f9:fe:01:81:ca:18:36:e8:15:
72:58:33:29:4d:a7:6e:11:24:aa:4d:f1:de:a4:fd:5b:35:f1:
a8:dd:b1:e8:da:42:35:3e:ec:71:21:a7:e8:9f:3e:60:b9:f5:
07:65:57:ca:fa:e5:bb:38:47:7d:a7:54:5b:23:ba:18:bc:6b:
ff:46:99:cb:d6:56:c2:8c:67:c6:06:f8:75:5c:dd:94:42:62:
9e:c3:a6:57:ce:82:5d:0b:9c:26:50:30:4c:62:d7:3c:4e:a4:
bb:62:ac:a3:72:06:33:29:9a:a8:3a:20:1d:c7:ad:9a:ca:91:
42:0f:f9:3c:ab:b6:01:de:43:69:a3:a1:6f:8b:41:5d:39:6c:
7c:8a:54:dd:fa:57:73:12:9d:01:2e:d0:21:48:24:5d:3a:e8:
8c:1b:07:ed:f3:75:2c:cd:48:2f:3e:5a:50:65:50:3a:40:61:
75:3d:fd:c6:6f:8c:9f:84:4e:04:83:48:b1:7a:eb:4e:70:a2:
c5:e7:57:36:7d:47:fb:3e:9c:51:e2:44:32:82:38:34:00:63:
c1:de:b3:d4:51:dc:cd:3d:3b:68:1b:7d:0d:73:c1:fb:d3:c6:
db:69:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:44 2026 by rpki-client