Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
File: gjptycYnXW8k-Z3kFmCcYihYlt8.mft (raw, json)
Hash identifier: MGVI8D4He3trUqHPmv6JHE75+YFVcoeUg+gLawkq4DQ=
Subject key identifier: 43:01:DC:16:21:19:E3:9A:05:89:CD:FD:48:FD:C1:89:84:ED:C6:83
Authority key identifier: 82:3A:6D:C9:C6:27:5D:6F:24:F9:9D:E4:16:60:9C:62:28:58:96:DF
Certificate issuer: /CN=823a6dc9c6275d6f24f99de416609c62285896df
Certificate serial: 019D3909E33D310F097CB4B63AE7CDDC69AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjptycYnXW8k-Z3kFmCcYihYlt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
Manifest number: 0237
Signing time: Sun 29 Mar 2026 10:00:42 +0000
Manifest this update: Sun 29 Mar 2026 10:00:42 +0000
Manifest next update: Mon 30 Mar 2026 10:00:42 +0000
Files and hashes: 1: gjptycYnXW8k-Z3kFmCcYihYlt8.crl (hash: JYMp6F+wpZWvBimXJdtRXrq+0QvFky1ATsLdJLJBzME=)
2: lBVSgQweE1BJqbhkRvpQwbZbTyA.roa (hash: Rgz6GrVznV5GBRhmPL2LXDP9SY/swRAmcv24DHg10RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gjptycYnXW8k-Z3kFmCcYihYlt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e3:3d:31:0f:09:7c:b4:b6:3a:e7:cd:dc:69:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823a6dc9c6275d6f24f99de416609c62285896df
Validity
Not Before: Mar 29 10:00:42 2026 GMT
Not After : Mar 30 10:00:42 2026 GMT
Subject: CN=4301dc162119e39a0589cdfd48fdc18984edc683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:6d:f3:d7:00:45:ad:ce:ab:89:d1:c5:16:
21:a1:e2:ca:9f:4b:0a:f6:3c:3d:1b:1e:ce:73:54:
9a:f0:39:3b:38:15:20:33:51:d1:92:0f:ec:1d:2c:
17:71:d5:24:10:41:fb:90:10:7a:20:d7:05:d0:34:
3b:2c:07:22:44:71:cd:38:03:f5:66:e8:b4:d3:3b:
44:dd:89:32:cf:03:20:ec:a4:71:60:fc:7d:f0:a8:
5e:56:2f:2c:86:c0:e2:94:4f:df:96:f8:14:2c:e6:
e5:c8:3d:aa:ed:2b:a0:69:b3:0b:cc:73:fa:0e:93:
19:72:e5:bf:e0:c6:ce:5d:e7:41:b0:d9:a3:dd:bd:
96:3c:97:92:fb:2c:13:c5:d3:a4:43:e2:2c:d9:d7:
20:07:58:6f:5a:c2:0d:8c:92:e6:38:d3:b6:a2:d2:
14:fe:b4:b1:83:63:1c:ab:ab:c8:9f:3e:09:6a:f4:
93:77:c3:e6:b7:12:d9:22:20:53:2c:0f:c7:78:59:
b8:d8:bc:56:4d:1b:7c:19:dc:fb:6d:9c:00:0d:00:
a1:8e:8c:80:dd:b8:cd:fc:ab:56:7d:4f:4b:5f:a6:
67:2c:ff:fa:47:7a:9e:70:18:40:40:f0:e2:de:d3:
f3:2d:f2:1a:2a:0d:4f:64:e1:3c:6b:84:32:63:bc:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:01:DC:16:21:19:E3:9A:05:89:CD:FD:48:FD:C1:89:84:ED:C6:83
X509v3 Authority Key Identifier:
keyid:82:3A:6D:C9:C6:27:5D:6F:24:F9:9D:E4:16:60:9C:62:28:58:96:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjptycYnXW8k-Z3kFmCcYihYlt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1e:26:7b:4d:a0:65:23:43:7a:4c:79:c1:af:26:a1:04:57:
ff:a1:66:fa:86:7a:73:5d:e7:51:e4:dc:cd:9c:d9:8d:e3:7b:
4e:c6:8f:c3:6f:48:93:41:df:57:52:24:83:51:0c:be:d0:c6:
4c:2e:6e:8d:54:65:7f:64:c3:64:34:be:8b:ef:19:cc:a7:8d:
64:13:5b:67:86:c8:e1:46:fb:32:a0:36:89:67:17:25:9a:12:
a3:52:57:b8:60:7a:b1:2c:e2:97:30:f3:1b:21:6f:c4:fe:43:
e4:7b:7f:de:e6:03:0f:37:4b:cd:fe:aa:6c:34:3a:c2:bd:07:
c4:86:03:af:d9:10:ca:b1:11:50:af:af:56:88:29:da:eb:bb:
31:49:4f:50:0c:6f:22:8c:91:68:66:54:8a:de:de:52:5a:52:
83:cc:a0:4f:87:a7:19:94:c4:6d:ca:af:83:8e:bf:83:cd:3b:
cf:a0:1b:f5:c3:a5:73:c0:f1:02:b0:ae:c5:12:94:42:59:b9:
71:49:ae:ae:9d:70:d3:ed:3f:b1:b2:c1:1f:52:e3:ad:c4:f6:
38:53:f2:0a:ad:da:78:54:8c:6b:9b:ac:50:a5:c6:52:a6:41:
3b:7a:f7:8e:2f:12:93:7c:bb:b0:ec:31:a1:61:7a:b8:bd:bc:
41:a4:a0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:56 2026 by rpki-client