Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: 3IYY1kzraM7d8c8GmvGU/1eXJnqYBEj25n/+4F8n0D4=
Subject key identifier: 0E:73:A3:57:8F:A3:0E:AF:69:63:44:96:BE:11:09:19:ED:37:82:7A
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 019D37893228F2F9B72941DFAB948582B979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 03:00:31 +0000
Manifest this update: Sun 29 Mar 2026 03:00:31 +0000
Manifest next update: Mon 30 Mar 2026 03:00:31 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: 0HRUIJSGTQnnIfb4iXGS1yq05taqg2E/uqkvih1tbN0=)
2: _LIMNGBB_bM1l_RNh7Jn1ke8Z1Q.roa (hash: Y1Vdc4Bk2253+dyiXjTYX2rbKWMSURyUVb6exyc6X4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:32:28:f2:f9:b7:29:41:df:ab:94:85:82:b9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Mar 29 03:00:31 2026 GMT
Not After : Mar 30 03:00:31 2026 GMT
Subject: CN=0e73a3578fa30eaf69634496be110919ed37827a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:d0:2f:b3:53:5a:98:11:e1:1c:37:48:ce:
01:cb:1d:8d:03:d0:78:5e:71:2c:e4:32:83:1e:27:
61:a1:45:bc:bc:5a:ee:f8:dc:a1:81:a4:ea:52:55:
59:a6:9c:16:80:87:7f:e1:6f:c8:fb:4d:76:7f:81:
e8:2f:14:74:df:ba:84:9e:b4:30:0c:55:a7:6e:0d:
85:2e:12:9b:5c:01:90:05:21:ab:8e:af:29:9b:d6:
02:de:28:79:3e:13:53:24:cb:a1:9e:fb:8e:9e:ce:
09:83:40:70:9f:24:69:a4:f3:e3:87:a9:26:06:ec:
85:92:a0:1e:0b:5b:18:e5:06:fe:6b:f1:0a:a3:2e:
d5:d0:35:4d:75:9c:d8:57:38:a5:dc:55:0d:78:56:
af:bd:30:cb:ec:fa:92:3e:5c:95:24:9d:b1:fc:24:
e6:c3:1f:12:de:60:61:16:fe:f7:84:e1:32:c3:e7:
90:32:4e:80:6d:7d:ff:e8:ad:cc:97:36:b2:52:97:
47:e8:63:8b:fa:53:d7:fb:56:36:c2:ab:55:54:49:
60:12:38:4c:d9:55:77:97:61:8f:5c:a5:c2:9c:4d:
64:97:a2:80:52:fa:83:6e:90:5f:fc:66:ed:6d:75:
28:2c:f9:c8:57:b5:ec:69:0b:a0:86:f3:6b:b7:50:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:73:A3:57:8F:A3:0E:AF:69:63:44:96:BE:11:09:19:ED:37:82:7A
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:50:26:dc:a8:23:98:cb:a1:a1:00:24:12:8b:13:91:b8:0e:
de:2a:9f:fb:d9:42:2c:7a:58:a2:fa:34:33:f3:e1:da:f1:ec:
45:b2:cb:d5:b6:b4:a0:f7:64:fb:33:6c:9d:7c:15:8c:5a:3a:
74:26:0a:47:6a:fe:21:a4:55:3c:81:12:63:1b:07:fb:25:90:
0b:20:8f:a5:c8:72:0a:21:df:e3:36:44:0f:0f:bb:61:b2:db:
e7:77:f8:21:b8:42:ad:95:4a:fc:e7:91:8f:0d:82:ca:4f:1d:
c9:6e:1d:be:ee:f4:01:2d:35:93:9c:d6:31:0d:3c:fb:b5:35:
8a:6d:a3:f3:66:9b:1f:e9:6f:fd:d0:8b:99:a7:11:30:71:1c:
16:a1:35:19:78:65:f1:9f:de:0e:5a:c0:76:71:4f:78:de:54:
a2:d6:55:3c:2b:37:0a:51:33:ed:19:50:e3:05:9f:ea:e5:b0:
10:40:c7:f6:d4:b1:c1:bb:56:61:45:c8:dd:69:e0:1b:62:19:
6a:05:b7:33:1c:68:17:31:3e:c8:b8:87:63:4d:20:9f:54:e9:
8c:e9:ba:45:fa:4c:95:04:1c:c8:0f:5c:b6:71:ca:21:07:1b:
dc:ca:ff:fd:f1:0f:0f:23:ca:ee:d3:2e:64:bf:2f:95:b9:87:
c7:08:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:34 2026 by rpki-client