
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/290956-7394-466d-93b6-a186b9946a3e/1/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.mft
File: gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.mft (raw, json)
Hash identifier: 7Bwy1eVCVRJIyb2AHb/PBZrSOwYImCoAY7g/GCYvYY4=
Subject key identifier: 93:9C:8F:4E:52:C1:75:78:9F:6D:59:68:BB:51:71:73:7A:62:1C:8B
Authority key identifier: 80:A0:81:42:3C:63:42:C9:71:2E:BA:6D:D9:8E:D7:A1:AC:5A:E8:17
Certificate issuer: /CN=80a081423c6342c9712eba6dd98ed7a1ac5ae817
Certificate serial: 019D389BFD88710DC6A1CC481090F1809F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/290956-7394-466d-93b6-a186b9946a3e/1/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.mft
Manifest number: 7E
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.crl (hash: iEJw3c89Y7t9yiEuq8x1p254oisSJfw4r25IRCTwEzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/290956-7394-466d-93b6-a186b9946a3e/1/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/290956-7394-466d-93b6-a186b9946a3e/1/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fd:88:71:0d:c6:a1:cc:48:10:90:f1:80:9f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a081423c6342c9712eba6dd98ed7a1ac5ae817
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=939c8f4e52c175789f6d5968bb5171737a621c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:d8:12:80:9b:61:b1:fc:0f:35:6e:dd:90:
08:b5:5e:c1:7d:9e:fe:ab:e0:9d:9f:5f:03:de:7f:
e8:30:9d:ca:9c:f2:b5:9e:fa:99:0d:42:96:29:65:
bc:9c:79:b1:a9:23:46:93:87:a4:8a:4c:0b:b2:4a:
17:59:70:12:7e:8f:76:38:55:26:7a:71:bd:82:de:
38:91:27:d6:90:fc:40:e9:5d:32:1c:de:a4:67:a2:
76:e5:83:4a:c2:42:af:0c:27:1e:b1:c8:f0:7b:60:
82:88:65:1a:04:46:cf:29:51:d3:42:28:5b:5d:9b:
be:1f:aa:0f:72:f0:2c:ed:d4:f6:49:a6:02:e8:f5:
07:53:31:85:1e:9a:0c:67:29:d9:99:3f:a1:b4:ba:
f1:41:ee:2c:57:11:0e:c5:5c:7e:d9:a6:ec:21:d3:
a5:c5:24:9a:3d:dd:6a:00:42:f7:86:9b:27:5b:7b:
77:51:1c:e0:f8:37:71:06:ed:53:9c:c2:e4:8d:6d:
49:dc:26:76:78:75:e5:91:50:e2:d7:40:23:bc:05:
6b:58:e2:32:a5:99:c1:7c:38:94:cc:80:ad:f3:c3:
36:0a:b4:3f:53:13:d3:c5:a7:3d:e7:01:b9:44:ee:
e0:37:7a:e9:59:27:c9:f6:b3:4c:c8:00:7c:81:79:
07:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9C:8F:4E:52:C1:75:78:9F:6D:59:68:BB:51:71:73:7A:62:1C:8B
X509v3 Authority Key Identifier:
keyid:80:A0:81:42:3C:63:42:C9:71:2E:BA:6D:D9:8E:D7:A1:AC:5A:E8:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/290956-7394-466d-93b6-a186b9946a3e/1/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/290956-7394-466d-93b6-a186b9946a3e/1/gKCBQjxjQslxLrpt2Y7Xoaxa6Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8c:38:25:a7:58:f4:bb:ce:5e:0d:62:ac:5e:c1:c3:69:89:
2c:91:14:58:4b:63:c1:9a:ff:49:58:b6:df:73:94:54:d8:3f:
4f:24:c7:d2:a8:cc:de:9b:d5:81:3d:98:b0:f8:1a:12:73:38:
85:90:a3:ed:ed:7d:3e:50:c2:9b:30:ee:97:1f:98:ea:1c:d2:
34:1a:c5:a8:45:4b:bb:7e:39:08:d4:ed:39:80:89:dc:54:b8:
56:7f:c7:b0:a8:68:3f:d6:7d:c6:f3:aa:9f:e7:7f:b4:6c:74:
75:9f:67:35:e0:a0:0f:16:c0:a2:74:cb:0c:69:28:0d:cf:a7:
bf:af:f7:27:aa:2e:0d:f1:dc:fc:2c:6d:b6:b3:7d:e9:fc:46:
a6:df:cc:ca:e2:b1:8a:32:35:40:7c:3a:c2:e0:dd:2d:3b:86:
65:5b:3c:e3:71:6d:80:10:06:b2:c5:11:29:5c:4b:ee:d0:ee:
ec:a3:02:0d:b7:ca:9e:20:6b:d4:c1:5c:ae:25:26:14:d2:0a:
5f:3c:07:2d:94:b9:21:d1:5d:8d:c5:75:3e:0b:76:0f:21:a5:
34:39:e9:0d:2c:d5:24:52:86:46:d5:b3:ce:16:d3:ad:8f:4c:
96:74:3f:d1:0f:4c:be:98:be:b1:16:3c:b6:ab:bf:6e:ce:c7:
a7:34:0e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:05 2026 by rpki-client