Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
File: GdZfozzls_e9tJfl_KUJ1_wDxpM.mft (raw, json)
Hash identifier: 8MTHvL0DzorXKiIFmdL955YQIOfc60JWuFBucoqKrHo=
Subject key identifier: F0:F8:4A:5E:09:BF:B1:7E:E5:DD:9F:C1:BB:90:CA:B6:92:B6:57:30
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Certificate issuer: /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial: 019D3940C63A7A9AEB539EBE6D28B2A09908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:39 +0000
Manifest this update: Sun 29 Mar 2026 11:00:39 +0000
Manifest next update: Mon 30 Mar 2026 11:00:39 +0000
Files and hashes: 1: 3V9wiUwvfamuLVADXY0C4Wev7bI.roa (hash: l+RFmyKJ2p1Pn5PCTCrdi1at5JyBh4SapJ5re9I2vYw=)
2: GdZfozzls_e9tJfl_KUJ1_wDxpM.crl (hash: f7Az34pVC1JcoI44rTs5iBsFd7U+Z9qpYem3sInCQnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c6:3a:7a:9a:eb:53:9e:be:6d:28:b2:a0:99:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Validity
Not Before: Mar 29 11:00:39 2026 GMT
Not After : Mar 30 11:00:39 2026 GMT
Subject: CN=f0f84a5e09bfb17ee5dd9fc1bb90cab692b65730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:08:24:01:00:b8:14:d1:24:d1:34:ff:14:
d1:d5:bf:03:a0:f2:c3:84:7a:ad:a9:49:6a:25:ae:
19:52:2b:5e:12:f9:7d:39:34:3a:a7:96:9e:7b:58:
bf:07:0e:78:50:b9:e5:98:58:17:79:99:7b:20:24:
27:1b:45:c3:a1:fc:b3:4b:8a:09:a8:d8:62:f4:41:
59:a5:a9:6f:d5:71:a6:95:b5:8c:7b:2c:e5:b1:64:
79:48:4a:6b:7f:2c:ca:35:7a:4e:80:39:3a:a2:ae:
4c:a3:3f:df:01:0b:1d:65:10:b8:20:6a:1e:ff:4d:
de:40:39:98:fe:02:4a:d0:71:e5:36:5f:fc:c0:39:
9f:f3:54:91:8c:40:45:89:7b:14:71:af:27:79:b6:
9a:dc:f3:18:76:e2:99:9f:29:ae:a6:95:8b:87:ba:
47:31:77:74:b1:ea:35:e1:e4:21:70:95:6e:93:00:
7e:09:65:53:8b:8a:86:bd:0b:fd:52:49:6c:85:fb:
ec:ca:e0:60:ab:4e:8f:7e:64:ed:b4:26:ac:01:d2:
c4:90:fe:7d:52:3c:3b:ae:4c:b9:08:c5:ce:cc:22:
7d:2a:67:56:61:c9:2a:a6:a0:35:d8:9c:61:06:0c:
6f:2c:51:1c:11:de:da:f1:2e:61:b7:33:91:9c:0e:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F8:4A:5E:09:BF:B1:7E:E5:DD:9F:C1:BB:90:CA:B6:92:B6:57:30
X509v3 Authority Key Identifier:
keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:61:e6:39:a9:68:66:40:a9:e2:eb:98:94:da:a9:66:d9:36:
ce:c5:4f:2c:a5:b2:cc:a0:71:55:aa:04:c7:fe:d5:3f:6f:de:
2e:cd:71:23:cd:1c:a9:b4:44:54:f6:41:a9:4f:55:79:40:cf:
a6:72:86:b4:93:4a:37:41:6e:04:36:d9:d2:d0:84:ee:47:cb:
16:ba:5a:15:99:0d:8b:08:86:e3:ee:8b:6c:58:de:e4:c6:17:
67:f5:fa:9f:33:75:c8:66:b2:37:f7:88:b9:a2:ec:7e:bb:53:
ef:93:e6:a6:2d:d5:92:33:8e:9d:f6:53:4a:cf:2a:ab:3d:e6:
0c:c4:2d:ba:64:fe:e3:f6:82:54:30:21:42:4f:5d:5f:aa:a7:
65:35:04:ac:88:53:e5:df:67:68:ea:f8:eb:71:6e:31:51:d5:
5f:17:96:b8:f9:c9:3b:20:ea:d1:55:10:27:7a:65:e3:94:0c:
9c:15:0e:73:20:ef:93:cb:58:40:d3:42:57:31:9f:2c:4c:9e:
7a:13:46:73:d0:e1:2d:46:7c:85:c7:4f:44:9e:a4:3d:d0:f0:
de:77:52:53:cf:6e:f7:18:d7:24:16:88:ca:b0:c7:3d:8e:7a:
fa:fb:2f:e3:4c:5b:fb:8a:53:fa:fd:af:9a:0c:40:44:23:8f:
c4:b1:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:32 2026 by rpki-client