Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
File: gCVbZMlsAQvaN98j2JJo6OR0jdM.mft (raw, json)
Hash identifier: IUJv46JF1emjRPe6qJGizlqw7e4owKVbM63heq7kV+0=
Subject key identifier: D4:81:5F:42:D9:62:26:0A:48:D0:2B:FF:CD:9E:19:99:73:2B:08:D3
Authority key identifier: 80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
Certificate issuer: /CN=80255b64c96c010bda37df23d89268e8e4748dd3
Certificate serial: 019D3941A0CFAA2F1CE5B86EFEA1BCC7AC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
Manifest number: 0A76
Signing time: Sun 29 Mar 2026 11:01:35 +0000
Manifest this update: Sun 29 Mar 2026 11:01:35 +0000
Manifest next update: Mon 30 Mar 2026 11:01:35 +0000
Files and hashes: 1: gCVbZMlsAQvaN98j2JJo6OR0jdM.crl (hash: TThSI1UHFMJwEBB5pqGAO+tOPdG283OoeKZ8SZ75fZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a0:cf:aa:2f:1c:e5:b8:6e:fe:a1:bc:c7:ac:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80255b64c96c010bda37df23d89268e8e4748dd3
Validity
Not Before: Mar 29 11:01:35 2026 GMT
Not After : Mar 30 11:01:35 2026 GMT
Subject: CN=d4815f42d962260a48d02bffcd9e1999732b08d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:e9:73:a7:32:d7:2c:94:31:64:c2:49:bc:
06:17:bd:0f:f7:fe:fe:82:7c:d5:77:df:1b:27:44:
7f:e8:82:88:46:fd:c1:0e:82:60:48:32:72:12:9d:
46:29:b9:a9:8f:33:1a:a6:fb:74:cf:0d:4b:3a:bb:
94:c0:78:f4:85:01:c4:fe:c2:d3:ee:17:e8:7b:fa:
57:da:1d:b7:86:d6:9a:9f:78:c2:df:23:08:b6:8b:
b5:be:14:ed:55:f3:a6:02:2e:d8:4b:68:ef:7c:78:
74:5b:2e:92:d8:6d:b3:81:8b:6c:11:12:82:b4:1e:
8b:02:c7:41:52:70:13:8f:8d:7d:e1:3b:c1:a6:cf:
68:27:05:6c:22:68:5d:5b:87:db:7c:a1:62:4f:d7:
33:9f:ea:a1:6d:49:02:8e:06:00:13:09:0d:11:48:
4f:54:9f:c0:6b:cd:e2:ea:34:1d:fd:7e:f5:8c:73:
b0:a2:38:96:5c:1d:8c:88:7f:44:10:a2:5b:eb:44:
b6:21:39:9f:31:c4:87:22:fa:0d:67:2a:35:05:cf:
59:a2:7d:b1:37:4c:f6:4b:6a:96:a2:e6:fe:a9:9a:
98:e1:7d:af:79:99:3d:cf:9e:71:f0:42:3d:25:90:
d4:b2:f7:02:3f:d8:a7:d7:b2:6a:c3:cc:e9:5f:13:
b1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:81:5F:42:D9:62:26:0A:48:D0:2B:FF:CD:9E:19:99:73:2B:08:D3
X509v3 Authority Key Identifier:
keyid:80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1a:57:75:8c:9e:c0:7b:ec:2b:3e:b4:f3:3b:a3:8f:7f:75:
6e:f4:bf:d6:b8:c6:a8:61:3c:0b:81:4e:8b:4e:bf:0a:8e:90:
4f:c9:14:0d:67:1e:fb:14:1d:9d:ea:03:69:7b:8f:0d:b3:0e:
cb:80:db:50:5d:7d:5d:e6:07:66:93:d2:b8:77:65:cf:cd:c7:
9c:27:53:8b:85:b3:fd:19:9b:e4:95:2e:85:bf:9c:77:fc:b6:
5f:4c:f7:20:5d:27:f6:57:cc:e6:f8:af:e4:cf:52:3d:8c:24:
5a:7f:f2:f4:6c:5b:89:19:56:c6:55:3e:90:be:38:7b:2b:16:
47:93:14:c1:66:89:31:52:d9:7a:ff:f0:89:e2:d0:9e:cd:f7:
e6:44:d7:78:38:dc:59:c6:75:04:f4:36:6b:c6:a5:7c:95:0d:
8a:d7:8a:ba:9f:3c:cb:c4:0a:bf:1b:fa:05:6e:fd:fb:f5:79:
59:a7:67:8b:45:f0:39:d1:54:7c:b1:49:5f:d9:55:67:60:11:
4a:fe:0a:d0:dd:66:ff:de:27:56:90:c7:08:21:b3:cf:2a:84:
e8:e8:69:07:ae:a7:b9:37:56:3b:c2:56:df:0a:cb:fc:0f:5e:
af:0a:f0:2b:37:8b:0a:15:cb:16:73:31:a2:14:ee:6d:9b:aa:
3a:f0:a9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:24 2026 by rpki-client