Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
File: gcGu10qtBrG4XFumd5wWH0pSs8Q.mft (raw, json)
Hash identifier: VAh8tL6SdgWCuB5JhrKmeUs+8SvgygpXKoskLBRWXTc=
Subject key identifier: 16:FA:8C:C9:20:81:6D:92:3D:72:F8:3C:E8:00:59:2E:A1:B5:22:17
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Certificate issuer: /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial: 019D389BEBA861497B96773967B0A1084388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: gcGu10qtBrG4XFumd5wWH0pSs8Q.crl (hash: cXn75GDA1cq/es+s0rlDXOZez1XnAhHU50FnkLX3MQ4=)
2: pA1ePqI7SD5ojrPp_XCatoiq2zo.roa (hash: CAWXsP1JZ/KW0NUUE6ss0n5HsqgH1Gk+g+22Bws1Rqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:eb:a8:61:49:7b:96:77:39:67:b0:a1:08:43:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=16fa8cc920816d923d72f83ce800592ea1b52217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3f:22:4b:ac:ce:ed:c2:22:90:32:91:d8:2d:
90:5c:0d:c7:fa:9e:56:04:54:83:c4:0a:51:45:d0:
ef:91:67:39:17:7e:8e:5b:bb:61:19:04:91:eb:0d:
dd:7b:bd:87:0c:ba:d4:55:95:0c:b5:e3:02:50:1b:
e6:9b:8b:96:86:f2:60:cf:66:f6:d8:8d:7a:bf:41:
f3:db:6e:fb:1b:37:11:ce:41:a2:a4:2e:f6:4e:aa:
f1:70:35:e9:aa:fa:24:f9:cb:0d:89:30:07:6b:4a:
f0:43:a1:5a:71:59:92:15:24:18:e9:4d:18:19:e5:
ab:31:74:dd:27:36:15:69:f9:69:49:ca:01:ec:82:
08:2c:2f:ae:87:8a:bc:c6:7d:41:f3:2a:46:15:a2:
1c:10:a9:ec:b4:b9:4e:b8:ab:9a:ec:f1:3a:17:5e:
f3:8e:e6:8e:21:9c:14:21:5e:80:eb:84:1e:af:7e:
05:d0:07:41:5f:f3:35:df:5d:79:3f:26:d3:4c:ab:
06:18:77:6e:90:30:78:ec:51:0f:ad:13:3b:43:59:
f8:69:3c:f0:d7:0a:1d:6b:b3:1c:67:a3:6e:91:f9:
0b:62:4a:4d:ea:a6:e9:7d:33:02:c3:cd:ac:e4:0d:
73:bc:e1:c1:b6:62:5a:eb:1f:48:9f:c6:59:74:4a:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FA:8C:C9:20:81:6D:92:3D:72:F8:3C:E8:00:59:2E:A1:B5:22:17
X509v3 Authority Key Identifier:
keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ae:d2:f9:2f:4f:fb:a5:07:6b:16:b8:9b:62:bd:29:73:33:
44:e2:73:a6:39:8d:56:df:9f:57:3d:1a:1f:b1:70:07:5b:59:
bf:9a:9e:7a:3f:72:34:7a:ca:5d:49:45:8e:d5:f9:03:b9:b3:
45:30:34:bd:6b:f1:63:e5:8f:3f:be:73:8c:bc:dd:66:59:e0:
9f:3d:50:3f:8f:60:c6:cf:14:b0:0f:2d:c6:32:ac:76:71:2d:
2a:d2:14:b4:0d:42:e3:f0:76:60:12:fd:8f:f7:e7:25:d9:ab:
1a:97:42:db:88:f1:29:7d:b9:44:d0:60:de:d9:30:5a:b3:f3:
c6:82:f1:66:10:8d:61:fe:85:7f:7f:6c:d4:5e:cd:67:a6:b6:
58:9c:71:ac:83:eb:22:f2:3a:58:7b:64:60:12:59:45:f2:b9:
cc:74:da:9d:d6:19:84:50:15:25:c5:71:00:5e:ce:b4:24:28:
33:0e:c6:af:eb:e1:96:65:53:26:8f:51:43:83:79:09:7d:8c:
5b:99:27:9c:e5:67:cb:84:aa:4a:4f:7f:b6:63:12:99:8d:9e:
e2:0e:af:4a:4b:bf:56:bd:49:2d:78:bd:dd:b1:e3:46:18:2d:
08:17:58:94:77:82:0b:3f:29:22:42:34:d9:97:da:88:64:37:
ad:c3:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:32 2026 by rpki-client