Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft
File: GXCiYyB54Yue9nKBkqOTaqvisiQ.mft (raw, json)
Hash identifier: uNTlWNhd+syerIRnswKAb3ciFlWjD2tkkdFO4i0z+gg=
Subject key identifier: 5D:E4:D4:71:1B:10:C9:8F:0D:ED:6D:FB:47:5F:29:C0:A5:42:B9:4E
Authority key identifier: 19:70:A2:63:20:79:E1:8B:9E:F6:72:81:92:A3:93:6A:AB:E2:B2:24
Certificate issuer: /CN=1970a2632079e18b9ef6728192a3936aabe2b224
Certificate serial: 019D37891F181EAA529F8ACCEB1A85D30FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft
Manifest number: 01F7
Signing time: Sun 29 Mar 2026 03:00:26 +0000
Manifest this update: Sun 29 Mar 2026 03:00:26 +0000
Manifest next update: Mon 30 Mar 2026 03:00:26 +0000
Files and hashes: 1: 7VN2Neo_y_Tol7TBSLwpsPhccXY.roa (hash: qraDq8x5bn5vlRmkxS4EEo43RlJ5J0hejrRkLUzLWYU=)
2: GXCiYyB54Yue9nKBkqOTaqvisiQ.crl (hash: H271x5h1Rl7ooPd+scESVAKsLqEQd+nIM3J6hZ7ipk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1f:18:1e:aa:52:9f:8a:cc:eb:1a:85:d3:0f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1970a2632079e18b9ef6728192a3936aabe2b224
Validity
Not Before: Mar 29 03:00:26 2026 GMT
Not After : Mar 30 03:00:26 2026 GMT
Subject: CN=5de4d4711b10c98f0ded6dfb475f29c0a542b94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:69:24:72:8b:3e:2d:9d:ba:bc:3a:ae:2a:fb:
87:e3:da:f7:a9:34:6b:38:d2:d4:eb:57:29:b1:a4:
fc:7c:9d:a5:ad:2b:3e:a0:33:bf:73:a3:8a:cf:71:
7c:1f:27:67:da:ba:a8:17:70:6d:49:b5:aa:a6:05:
a0:6a:9d:82:5a:c3:2d:4f:12:2c:c2:98:71:d4:80:
f9:10:ff:58:0e:fb:58:1f:8c:8d:f4:95:c9:ec:cd:
6e:d8:46:4d:ad:8f:93:03:f8:44:e3:16:28:86:bf:
e8:a0:0a:d9:dd:b3:db:49:f4:b8:7c:c7:51:97:c9:
8b:b8:70:b5:a2:1f:9a:6a:31:db:b8:f0:c0:70:e3:
1a:5c:6c:c4:d6:62:ad:ef:76:63:7c:07:1d:12:66:
5e:b2:8b:a8:b4:b7:b3:6b:18:e9:52:f3:6a:ff:9f:
c8:c2:e0:82:2f:73:d9:da:e2:01:58:f6:f3:13:78:
31:fd:fd:49:50:45:24:33:b7:3b:63:c5:b5:52:57:
ce:ce:26:c8:54:83:2e:2c:b4:b3:4d:d4:0b:a4:84:
92:6d:5b:c5:89:bc:f5:4d:86:39:c4:71:a5:49:2b:
ce:dd:53:62:a9:15:c8:a4:89:ee:a1:0e:e6:6e:2f:
a6:fd:5b:82:ae:5e:7f:eb:3d:14:cc:b9:2f:bd:99:
2a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E4:D4:71:1B:10:C9:8F:0D:ED:6D:FB:47:5F:29:C0:A5:42:B9:4E
X509v3 Authority Key Identifier:
keyid:19:70:A2:63:20:79:E1:8B:9E:F6:72:81:92:A3:93:6A:AB:E2:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:36:e8:6a:19:08:8e:20:ed:c3:90:21:45:2b:d0:e6:f6:f4:
76:98:01:9a:f1:52:ea:4d:7c:64:71:8a:4f:dc:4d:32:9a:88:
a9:35:d0:9e:3e:ca:87:fb:91:f3:84:ec:59:ac:be:c1:ea:78:
d2:9d:f0:72:df:78:45:6b:ae:e2:92:a8:a2:19:a7:a6:76:39:
c0:6b:13:f1:b7:00:ef:b2:ad:0e:98:f8:6d:b0:90:75:22:bf:
af:ba:23:eb:8c:0d:4e:ac:7a:61:ff:7b:87:2a:14:a3:5a:ca:
84:01:35:7b:d7:d0:32:ee:3f:5f:b6:58:36:07:94:25:86:ec:
35:c1:b0:47:04:61:cb:77:59:07:73:8f:62:87:ec:e6:6e:b0:
ed:e0:f7:86:29:b7:25:b7:74:b5:b2:27:3d:42:10:4c:87:09:
6e:c4:3d:97:8c:3c:16:d7:76:ed:44:ca:40:e4:11:12:83:12:
40:ee:58:09:ed:fe:ac:b1:38:b6:68:86:09:c1:a2:3b:e9:ef:
d5:a3:42:05:5e:e4:74:50:8e:d7:1c:4f:32:9d:6a:47:f4:b5:
11:94:7c:34:2f:07:47:9e:02:2c:87:ed:a1:64:7e:5c:89:91:
ca:b4:34:d3:57:85:dd:58:aa:0f:b2:71:38:a6:0c:05:a1:56:
51:76:72:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:20 2026 by rpki-client