Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
File: gRsX62FjiTMhtH5K9_pWsBxfN7U.mft (raw, json)
Hash identifier: x30SO+BhxRT4ORCy5RlVLdxUYfJNgS4sPuBfg/aoTm8=
Subject key identifier: 3D:D4:22:C6:35:63:A8:41:AB:9B:56:DA:3A:05:F4:3A:F6:D3:33:3D
Authority key identifier: 81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5
Certificate issuer: /CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
Certificate serial: 019D375266C2FF5B0A1021044F997BDBFA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 02:00:40 +0000
Manifest this update: Sun 29 Mar 2026 02:00:40 +0000
Manifest next update: Mon 30 Mar 2026 02:00:40 +0000
Files and hashes: 1: gRsX62FjiTMhtH5K9_pWsBxfN7U.crl (hash: Z0NWj6rym8L43C6jBjAB9GvjJBDn4bOibYMBGfaKD4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:66:c2:ff:5b:0a:10:21:04:4f:99:7b:db:fa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
Validity
Not Before: Mar 29 02:00:40 2026 GMT
Not After : Mar 30 02:00:40 2026 GMT
Subject: CN=3dd422c63563a841ab9b56da3a05f43af6d3333d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:f2:df:01:2d:b8:01:bf:ce:7b:42:6d:0d:
c2:86:d2:00:ab:4d:92:a9:41:b1:91:d9:9e:ac:59:
cf:1d:24:db:c7:a4:ab:62:9b:21:48:e5:7d:0c:b7:
d3:30:00:14:33:30:e1:df:59:15:4c:c6:43:fe:cd:
55:ba:4a:a2:b4:cf:04:bd:1d:95:30:e0:87:b3:07:
a4:72:21:6b:8d:02:6c:19:45:f8:69:0d:e2:d0:56:
65:cd:c1:88:d2:3f:08:63:73:f1:59:ce:f2:35:d1:
f5:3f:98:cd:d7:8d:21:50:b3:0d:99:54:8c:1f:58:
b6:dc:69:78:a4:4c:5f:8b:ed:e7:87:63:16:7f:4c:
f2:18:3c:0b:36:e9:98:93:34:5f:41:ca:b3:e3:96:
73:b3:65:3d:fb:49:6e:a3:15:6d:6c:ae:35:59:fd:
40:18:15:d7:ff:48:64:5c:14:0d:24:b8:a8:56:ed:
ae:9b:7d:c6:24:ce:ad:3c:87:e3:1c:ae:29:78:9e:
24:24:b1:34:ce:0c:cf:58:1c:03:b8:6d:32:44:4f:
33:39:2f:21:fe:8c:61:6c:5a:eb:b9:1c:01:e2:02:
29:4d:f4:fc:84:a5:03:4e:b1:b3:49:35:de:69:82:
76:93:31:0f:12:01:b8:53:80:01:33:62:21:52:11:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D4:22:C6:35:63:A8:41:AB:9B:56:DA:3A:05:F4:3A:F6:D3:33:3D
X509v3 Authority Key Identifier:
keyid:81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:91:4d:da:00:13:7d:eb:02:c7:af:1e:ab:70:04:e6:d6:ca:
0d:e1:88:f9:af:2b:cc:7c:fa:32:3a:f4:94:d1:72:03:cc:64:
79:c2:0b:9d:04:e5:fe:ec:c5:93:ca:0c:c4:be:74:cc:54:1b:
79:0e:59:9c:bb:2b:fc:c1:6d:2b:38:5c:ac:f1:b5:7f:47:71:
48:66:e4:ec:59:2e:8f:b0:29:41:3c:16:ac:15:b4:bf:67:b3:
05:59:c6:62:2d:26:4a:22:40:01:d8:1f:e6:79:c8:d6:53:df:
42:a8:f8:e1:89:2b:1b:74:ff:b3:3e:3c:95:3d:69:24:62:71:
74:55:19:fe:78:89:e5:87:84:97:76:13:08:cd:29:2a:84:ab:
2b:39:3d:9d:cd:b1:64:10:03:f8:a0:2a:e4:17:f3:4f:c4:d5:
1c:5e:c6:a2:0b:d0:37:71:42:5b:7b:c1:f9:3f:86:3a:71:70:
45:49:ef:99:01:05:c6:fb:07:bd:ea:40:bd:04:c7:b9:f5:8d:
4b:6c:59:4d:4c:eb:8e:f0:af:58:c8:3a:36:8c:48:09:d4:57:
60:ef:51:1f:c0:83:82:ba:35:5b:68:48:58:44:ed:10:ba:e2:
5c:ca:aa:05:18:28:41:3c:bc:58:9e:42:05:6d:5c:c6:fd:42:
df:49:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:18 2026 by rpki-client