Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
File: GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json)
Hash identifier: nuzzFTBgnS7GfOOgszfj8Fkv5SNVFU9Bv87FrbLWkNU=
Subject key identifier: 1F:40:FD:FD:9B:2D:4C:9C:B5:E4:E3:DA:BA:98:68:61:E5:53:F7:61
Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
Certificate issuer: /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Certificate serial: 019D38D2BBC6D9A5CDBDBFCCF008527EA25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
Manifest number: 177E
Signing time: Sun 29 Mar 2026 09:00:27 +0000
Manifest this update: Sun 29 Mar 2026 09:00:27 +0000
Manifest next update: Mon 30 Mar 2026 09:00:27 +0000
Files and hashes: 1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: Gj8jKRSwvBIZe9qfc5iWNZMH4Pqc05H8xDe0BRpq29I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:bb:c6:d9:a5:cd:bd:bf:cc:f0:08:52:7e:a2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Validity
Not Before: Mar 29 09:00:27 2026 GMT
Not After : Mar 30 09:00:27 2026 GMT
Subject: CN=1f40fdfd9b2d4c9cb5e4e3daba986861e553f761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:e4:8c:68:f8:23:c6:85:f5:0f:7e:15:3c:
0f:80:d2:34:b6:50:51:07:39:72:ab:20:64:6d:03:
72:36:77:83:27:6a:bf:33:85:fa:dd:13:8f:c6:12:
4d:1b:b4:76:3d:25:de:2b:3c:d0:0b:3c:ab:5d:71:
c5:13:9e:8b:78:1a:20:94:4d:21:4c:ab:65:ed:56:
4d:20:bf:2f:2b:11:1b:5a:70:fa:d4:9b:f3:c6:05:
26:28:e0:53:76:11:3c:a1:32:b7:d8:65:2f:76:1d:
24:66:a6:d5:3f:6a:d0:15:b9:26:5c:dd:97:e8:6b:
7a:a8:45:97:33:19:bb:a8:60:1c:a8:6d:cc:e2:51:
1d:40:8c:17:8c:04:0e:fa:10:be:39:ea:2b:3b:b5:
2c:f3:84:e7:dc:20:08:1f:60:43:b8:44:82:21:c7:
12:73:18:74:ae:bc:af:bc:28:d2:49:ef:1a:f5:df:
11:6c:3e:53:1f:56:ee:40:2f:40:bd:a9:eb:c4:a7:
05:90:74:ae:54:72:42:8d:58:17:76:0c:0c:da:ff:
08:29:74:9f:5b:87:71:87:90:59:fa:95:fd:55:69:
5e:d8:16:d9:14:97:ee:28:93:cf:6b:30:9d:29:12:
16:6d:72:e8:be:94:3f:ec:bf:ef:92:86:6d:91:e8:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:40:FD:FD:9B:2D:4C:9C:B5:E4:E3:DA:BA:98:68:61:E5:53:F7:61
X509v3 Authority Key Identifier:
keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:97:72:b3:40:2e:83:52:de:fa:dd:3f:d4:2a:a4:f0:51:61:
45:22:3e:cb:ca:48:a8:cb:ed:58:7c:10:a1:87:bb:4d:dd:2c:
2d:f0:f6:51:e7:8d:17:d5:3d:99:df:c8:3e:42:b2:3c:03:4a:
9e:d6:68:91:9f:03:94:5d:39:73:27:6e:6a:fd:14:f9:b5:fb:
86:ae:dc:03:fb:d9:e5:53:cc:13:73:72:a2:82:65:48:82:d6:
48:b7:74:fe:db:3c:75:07:bc:f9:78:ba:3f:65:ad:40:cf:f9:
1b:5b:d5:c5:93:19:ad:7d:e5:c7:c1:ca:6d:0f:b2:20:34:d2:
77:68:0a:11:82:93:94:84:8b:c1:d9:ea:fd:59:ec:dd:86:80:
90:52:dc:47:12:df:81:ac:6a:c1:c1:ee:76:96:69:d3:07:99:
67:7a:42:ec:0f:83:43:fa:d6:a8:c1:e6:ac:d8:19:a3:22:5d:
b9:21:90:08:02:6a:c3:d3:a9:b0:f2:9f:89:9e:1e:40:d4:09:
a8:dd:12:88:ec:5a:88:b8:2d:d8:ee:73:e3:37:85:3b:a0:c0:
90:98:cc:2c:6e:09:4d:83:58:f7:b3:2f:e6:d5:d4:44:56:6f:
c0:a8:5d:ec:32:de:8d:2e:75:4d:3b:c9:64:ff:bb:9c:61:24:
b1:d2:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:52 2026 by rpki-client