Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
File: GsBs8snpV1N0OXNPBYSoIEp7gxE.mft (raw, json)
Hash identifier: btNyOPUJKpbWiGeBFrZZfhfTRf1H/dps4hDjH7eDZH4=
Subject key identifier: 95:93:6E:C4:6E:D7:72:23:D0:7D:03:7D:31:6C:78:69:BC:99:93:A2
Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
Certificate issuer: /CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Certificate serial: 019D37F6F480B1C1D5E6503C53550234E42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 05:00:24 +0000
Manifest this update: Sun 29 Mar 2026 05:00:24 +0000
Manifest next update: Mon 30 Mar 2026 05:00:24 +0000
Files and hashes: 1: GsBs8snpV1N0OXNPBYSoIEp7gxE.crl (hash: Y22Hf2nZVyibHSBoDIxuxZX2OPD3XsQRNePMQ4823X8=)
2: MyfIZj1W2obkPAZygzM9dP9m28U.roa (hash: aXvgs0DUulnqjwtB1M6qdRCY8cRgdrm+A6xw7bBtVwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f4:80:b1:c1:d5:e6:50:3c:53:55:02:34:e4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Validity
Not Before: Mar 29 05:00:24 2026 GMT
Not After : Mar 30 05:00:24 2026 GMT
Subject: CN=95936ec46ed77223d07d037d316c7869bc9993a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:1d:19:85:d0:d1:16:d9:89:a4:a7:c9:47:
90:80:80:a4:b1:72:a1:62:e9:c8:d2:81:9d:24:f6:
c6:41:96:d8:09:9f:35:8e:3b:bb:79:ed:c2:05:58:
c1:cb:f0:ff:7f:2a:32:2c:88:61:e9:b9:9f:2f:49:
90:fc:aa:92:e4:e7:3a:9f:14:ae:96:52:37:28:08:
7a:bc:fe:a2:73:33:17:e6:92:de:fe:82:58:74:c1:
a4:b7:56:cc:d8:3d:45:87:40:f5:9c:85:74:40:cb:
f5:16:9b:20:45:64:ba:17:5e:90:1f:9a:97:4f:fe:
b3:2e:ae:e1:cd:d4:11:b1:54:24:c0:9a:85:99:c6:
9e:4f:96:3e:9f:e2:ae:2d:f5:1e:79:13:c0:36:c7:
20:94:02:f1:c3:74:ea:fa:e3:94:53:7c:e0:c0:fb:
b6:db:6e:da:8b:12:6d:ac:a7:59:bc:62:45:05:97:
6e:13:50:ea:6b:67:2f:64:2f:61:f3:3e:58:20:d8:
ba:60:dd:fa:c7:d2:c8:41:53:c7:90:92:d8:27:86:
c3:6e:84:83:ec:ab:0a:09:15:3f:51:f0:bd:0e:0b:
34:92:5f:25:f8:dc:2e:af:69:e8:b4:41:c8:65:fb:
e4:55:dc:e1:1d:31:f3:09:ab:70:7d:0e:30:e8:b7:
59:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:6E:C4:6E:D7:72:23:D0:7D:03:7D:31:6C:78:69:BC:99:93:A2
X509v3 Authority Key Identifier:
keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f9:2e:c1:7c:c5:18:45:da:1a:32:c7:ed:99:39:9e:d8:eb:
33:5c:73:bf:cb:14:e3:80:f8:4c:67:2e:bd:ee:f5:de:d4:4d:
d4:0f:c4:ce:d5:52:e4:b6:e2:e8:02:6d:83:e7:f7:b4:91:15:
de:a8:85:23:c9:06:03:b3:b0:69:74:fd:6f:06:bc:35:61:40:
3e:04:0b:1c:49:48:89:a3:7f:dd:75:1c:75:f7:48:e3:ec:2b:
75:68:ec:5a:c1:e8:74:3e:f6:53:85:f9:63:0f:bd:8a:38:41:
7f:22:81:7e:41:73:3c:0d:15:ad:4a:b6:6d:da:06:03:48:4a:
b5:d6:d1:4f:c1:b4:26:63:26:90:48:5b:53:1d:45:c5:4d:04:
44:2e:51:39:ec:c6:c3:5b:b2:0a:99:e9:4f:f7:47:15:68:fa:
bd:45:6f:fa:46:a8:bd:d7:57:79:ee:0d:dd:04:95:2f:ce:fa:
e0:74:0c:db:b1:44:5f:40:b5:3a:33:d8:72:21:a0:e9:a6:90:
2f:fb:d8:c8:07:0e:f6:eb:e1:4b:09:7b:37:0c:8b:ef:17:36:
70:67:87:f4:ff:df:5c:83:fe:60:b9:da:7b:9b:7a:0c:c9:4c:
b5:96:03:d6:7c:4d:19:89:c3:52:15:bc:59:28:38:3e:ed:90:
f3:0b:26:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:15:20 2026 by rpki-client