Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
File: Gc3YIGweNSxQZeSBeX73evDD3o0.mft (raw, json)
Hash identifier: q5OqYGnz48HKnrTuC4W4Jtyxaq3i+IqJHvH2FffP6VI=
Subject key identifier: 9D:2A:4B:E0:C1:03:B6:4D:D8:DD:B7:9F:35:43:C9:B3:55:FC:B1:92
Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
Certificate issuer: /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Certificate serial: 019D3A8A6DC4F205B1593C7CC0F8DBA0D43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
Manifest number: 0F49
Signing time: Sun 29 Mar 2026 17:00:43 +0000
Manifest this update: Sun 29 Mar 2026 17:00:43 +0000
Manifest next update: Mon 30 Mar 2026 17:00:43 +0000
Files and hashes: 1: Gc3YIGweNSxQZeSBeX73evDD3o0.crl (hash: //jmSj/j7nmAIcMGYhRmTFaTJrTi2eNhMBf4pUVft4M=)
2: sp-Kqf98KN1iyLF2W6AhnnuykzA.roa (hash: qPT9DHFhN6PJl4gV8TB/JKAE/xFcxdHvLjxUuJyemNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:6d:c4:f2:05:b1:59:3c:7c:c0:f8:db:a0:d4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Validity
Not Before: Mar 29 17:00:43 2026 GMT
Not After : Mar 30 17:00:43 2026 GMT
Subject: CN=9d2a4be0c103b64dd8ddb79f3543c9b355fcb192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:01:46:db:2e:b3:e0:fc:08:6a:6c:2a:39:
4f:2f:b2:2d:fe:d2:44:10:58:65:23:45:32:ae:1d:
c4:59:08:4a:06:57:3d:9d:24:81:c4:7e:ea:e4:e9:
e9:e3:2a:eb:82:a7:75:12:e8:ec:e9:de:a7:a1:99:
03:93:34:fb:54:e4:a7:9a:7e:1a:4d:7c:dd:6d:1b:
76:53:18:8e:71:6c:eb:51:b2:fc:3b:50:41:8a:e9:
be:9a:59:93:71:84:bc:4e:60:99:ce:ac:66:50:b8:
cc:dd:72:cd:f2:06:2c:91:70:4e:89:8b:a9:ad:b2:
66:d6:ea:fc:69:d9:7c:95:b4:8c:6f:22:e1:2a:48:
fd:2e:6d:ac:04:8f:4f:86:41:1f:ed:d8:43:7b:39:
15:97:20:96:f6:1c:00:4d:14:9d:8f:5e:0a:d4:4a:
b7:32:22:69:8f:bf:41:84:0b:c1:1c:d1:06:59:6e:
28:52:a8:40:dc:f6:f6:00:1c:b4:1e:9c:29:74:7c:
ee:b4:ba:5c:b7:41:d6:ae:68:f9:8d:a7:43:e4:df:
f6:dc:3c:b0:03:d8:88:17:f8:59:90:d8:af:56:6f:
f8:42:01:7a:ee:da:a5:b7:6a:49:4b:f1:1e:1b:9f:
f3:88:0b:0e:bb:25:02:bc:7a:72:fb:14:1b:7c:59:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2A:4B:E0:C1:03:B6:4D:D8:DD:B7:9F:35:43:C9:B3:55:FC:B1:92
X509v3 Authority Key Identifier:
keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a7:30:5d:11:90:9c:66:27:13:cd:5b:7f:99:aa:76:25:22:
52:f4:1c:4a:e7:b3:03:22:a0:36:9c:0b:05:45:1d:b7:01:57:
fa:f9:81:06:94:65:83:25:f3:d5:b3:f9:1a:e7:98:cc:50:61:
3c:35:1a:1d:a9:7c:4a:2c:1f:3b:8b:e3:68:ab:b5:69:df:c4:
49:87:a2:31:60:1b:48:b7:24:eb:d2:f7:db:65:a5:a9:a5:47:
d1:96:44:6b:61:58:58:cc:41:9b:15:6c:03:2c:79:3e:ff:66:
f4:f9:3d:eb:07:03:30:0b:a2:79:4c:a6:87:56:94:81:15:5c:
6c:d9:f1:82:a5:37:05:43:4e:83:21:d2:9c:d0:7f:82:65:3b:
50:f2:99:ab:a6:6e:94:45:51:be:95:99:56:55:4d:50:b0:14:
0e:bd:79:3c:f4:a4:a3:61:52:a3:d8:1a:1b:91:3a:25:c5:1a:
45:27:82:c5:e3:29:53:30:20:5d:f1:96:7d:61:34:d5:02:70:
0b:ee:d5:74:52:51:73:81:90:2a:44:14:20:37:48:0e:de:bf:
a7:78:6d:49:10:2a:45:9e:00:7a:f2:28:5e:b0:e5:03:44:2a:
0f:f2:39:f4:21:19:da:8d:3f:d6:f3:0a:24:11:b0:16:5e:c6:
b0:69:52:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:46:16 2026 by rpki-client