Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: bN/ZuR4IEjMGMBvsjUX9uGrG7xIDiB6Vf+7z/BT+bBc=
Subject key identifier: 93:29:AB:1E:7A:02:ED:73:61:9C:DB:C6:1B:8F:4E:CF:43:A4:8C:F6
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 019D3977CF7A17B01944B075216CF6C94EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 12:00:46 +0000
Manifest this update: Sun 29 Mar 2026 12:00:46 +0000
Manifest next update: Mon 30 Mar 2026 12:00:46 +0000
Files and hashes: 1: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: 4NxiLNBfUbYkhLhokVpyv0FVYMEdmJEwPS50498mUMY=)
2: iuITZHgDGqsS4DJrT4QfGRfLmXE.roa (hash: fVRfv2or89WX0xzZk/shtCx6ccH1MSfEUDt1qC4R8eo=)
3: xXSGrl92krsM_urkQdlEmjIAToI.roa (hash: wQLg7nZor+SidlIxB4lToP07634dxcVXfhFUBua4qFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:cf:7a:17:b0:19:44:b0:75:21:6c:f6:c9:4e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Mar 29 12:00:46 2026 GMT
Not After : Mar 30 12:00:46 2026 GMT
Subject: CN=9329ab1e7a02ed73619cdbc61b8f4ecf43a48cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:0e:35:d3:f7:96:cc:fa:10:e6:da:49:b5:
56:6b:fa:57:b1:fe:09:4c:27:52:49:23:06:42:db:
19:1c:69:cd:af:50:d9:3d:37:47:a3:8a:af:19:84:
fe:54:5a:85:f0:71:40:ee:0b:05:c9:d3:69:57:83:
a4:4a:85:b9:cb:8b:d8:cf:16:2f:b0:ec:b2:5f:1f:
1b:8f:26:c9:37:8b:61:18:92:77:95:40:3b:f6:dc:
14:d1:0b:e0:46:13:d3:8c:7e:61:1a:5d:e7:8b:79:
f6:b8:be:57:6c:82:0a:16:45:c9:5e:83:ff:14:b2:
1f:94:44:dd:f5:a8:a6:30:03:c2:ef:6c:e0:bc:84:
d6:8c:d6:89:73:8d:48:2d:fb:c1:2b:f1:cc:4b:40:
07:49:1e:8f:b3:56:a0:0e:91:d3:06:47:61:ab:35:
26:15:7b:6e:d4:e0:c5:ac:56:08:42:e7:bf:e4:15:
64:81:8b:45:04:df:1a:1e:11:40:2f:3c:90:b1:9b:
d6:5e:64:45:19:0f:85:bf:30:4e:ef:a8:2a:de:e6:
ae:21:ce:25:15:72:36:04:5b:a8:68:1c:ce:87:1f:
f2:49:5f:a1:78:90:ce:98:63:28:9d:75:f6:88:3d:
1f:ee:51:63:11:f9:8e:43:91:1b:a3:e7:6d:52:1e:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:29:AB:1E:7A:02:ED:73:61:9C:DB:C6:1B:8F:4E:CF:43:A4:8C:F6
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2b:3b:4c:e0:c2:8d:b2:35:34:17:9f:56:af:89:cf:98:a9:
c6:ad:7f:32:3b:fc:43:43:50:d9:08:c6:7e:24:72:ca:b3:65:
f6:bc:ce:35:95:f5:f4:91:1f:26:fa:71:a6:45:ca:e1:d6:e7:
d2:db:7e:32:9d:24:d1:7f:f7:36:d0:47:0b:7f:ec:54:2b:5a:
50:36:38:74:84:8c:a8:37:3d:a1:aa:ae:9a:70:91:f3:c7:9f:
ab:cb:a2:db:bd:dc:03:4d:67:3a:06:87:a0:eb:2b:7d:bb:c4:
f1:4a:7c:b4:5c:98:a3:10:fe:91:f3:5c:cb:05:22:e4:d9:79:
86:16:3b:4a:e5:57:63:a5:9b:a5:01:89:db:e8:65:20:e3:7a:
63:a4:47:ab:b9:8e:03:7b:9d:9a:b2:74:7c:1f:1f:78:e7:41:
69:80:50:55:6b:27:dc:9e:69:62:fc:9a:2c:96:f6:ce:63:c6:
d0:bd:7e:75:1f:42:96:0f:1b:bf:fc:8b:88:a3:a5:dc:24:f0:
df:e5:45:07:1a:da:8a:bf:c3:07:92:6c:78:f2:75:df:2b:59:
40:f0:24:2b:ca:8c:47:35:d8:c9:dd:2a:8b:7a:c7:1b:56:79:
ef:2d:64:d9:92:3e:0e:6b:32:a1:1b:38:80:e5:d9:76:da:8a:
5b:f3:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:47 2026 by rpki-client