Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: WIeiaRJmrOL3qGgnjSJkOLAITjKRyJXMPICrfItQPek=
Subject key identifier: C4:A6:67:AC:9F:DF:EC:F5:65:C7:ED:DA:0E:AF:06:EC:C3:8A:AA:BD
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 019D4168A19B6ADB5225AB9981D4FA8B4453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 0A12
Signing time: Tue 31 Mar 2026 01:01:09 +0000
Manifest this update: Tue 31 Mar 2026 01:01:09 +0000
Manifest next update: Wed 01 Apr 2026 01:01:09 +0000
Files and hashes: 1: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: GJqBSPgD/xhgxF9tG7K3nFUNCGBl15pZUu/sjYwhI0c=)
2: ImbkEEuw8ciW4XZvQnskEOeml3A.roa (hash: s2ZZTRU19ZLlzKll7MUSBOLRlZD19z6bClWZADEJ0vA=)
3: xTy14ClaR4Rvu9WN2hIEK42ff6w.roa (hash: MWs9WTWsQLed5Ou31CqMyRYBYZdgWbH79vbLFld2S5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:41:68:a1:9b:6a:db:52:25:ab:99:81:d4:fa:8b:44:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: Mar 31 01:01:09 2026 GMT
Not After : Apr 1 01:01:09 2026 GMT
Subject: CN=c4a667ac9fdfecf565c7edda0eaf06ecc38aaabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:3a:54:65:a8:d1:91:c9:9c:37:12:b1:77:
2b:52:5f:16:79:6b:a2:31:57:1c:c9:77:b1:a2:74:
57:9e:d0:dc:ff:cf:39:05:87:08:23:41:e3:a0:c2:
75:4a:6d:24:63:2b:e6:ea:6e:42:97:ca:f1:e3:10:
d1:f5:24:1d:18:6a:7a:3e:1d:69:cb:32:63:41:b0:
72:c0:64:8c:6a:59:15:51:8c:53:fd:8c:22:c6:68:
cd:1d:c3:6e:98:76:7a:77:f1:32:78:be:36:5d:6c:
fc:83:43:15:ed:07:93:a1:46:2c:da:8c:27:21:31:
eb:c8:84:96:27:54:a2:5d:8a:f7:53:6c:0f:c0:3f:
d9:a1:86:95:f2:c2:5c:f2:49:d7:ba:38:55:bc:22:
51:3d:25:50:f2:81:f1:77:f7:f1:fb:fc:e3:6b:f1:
9d:22:c1:3f:ee:b9:cd:52:d8:d6:6e:8b:91:20:3e:
a2:67:07:98:33:c6:2c:9c:c7:0b:4d:89:48:23:81:
42:95:41:89:8a:c4:e8:46:93:6a:d0:70:af:a8:81:
9c:00:35:dd:b6:d8:66:f6:85:ce:0a:de:fc:f2:cf:
4d:8c:55:73:90:a2:c5:90:ad:ef:66:be:f3:b4:d7:
76:11:f0:43:ac:0c:be:0d:f4:22:d1:49:c8:18:b0:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A6:67:AC:9F:DF:EC:F5:65:C7:ED:DA:0E:AF:06:EC:C3:8A:AA:BD
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d7:34:35:e7:20:ef:de:24:86:40:ae:d0:4b:1c:51:3b:2d:
dc:15:c9:f1:38:e5:bd:c5:af:5d:c0:2e:33:bb:5c:2c:5f:35:
9e:58:bf:58:6a:aa:ef:53:82:a7:61:50:89:79:49:c3:f8:44:
f8:f3:52:d0:2f:28:fa:e9:61:5d:b3:b6:41:d2:10:76:3b:15:
55:0a:b5:07:0d:da:46:79:fc:13:bb:6f:d2:f8:87:5b:56:46:
db:cc:86:63:2f:9a:75:0e:05:db:29:a1:73:61:4c:32:81:d5:
b9:9c:2f:d2:72:a8:b5:79:7c:a5:6e:9c:9c:bd:aa:d8:12:ba:
5d:92:08:87:5f:b3:50:50:0b:29:db:4d:5e:bd:76:75:e8:23:
6a:a1:7c:a0:75:56:73:73:dc:35:d2:17:f9:d9:74:e5:68:8b:
af:63:ab:ee:93:da:5b:69:8a:f4:ec:49:11:ac:d9:b5:52:0a:
95:33:22:9e:99:dd:f5:46:10:87:87:5d:ca:9f:0a:78:c4:97:
e0:26:0a:ea:10:aa:22:18:54:61:5b:2f:2a:dd:2f:e9:dc:05:
b2:36:7a:fb:36:a1:e1:be:fd:22:6b:8d:88:61:98:98:40:e8:
5a:48:77:99:69:95:49:c9:47:14:dd:ff:88:be:07:5d:56:56:
f5:ad:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 08:05:13 2026 by rpki-client