Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
File: _gC3BmlCNy_EjPLmHMdRjb8UuvM.mft (raw, json)
Hash identifier: 57FoD0cZeA84JLcAwUSCb6bSi5YNB18s/bUvhQ518kU=
Subject key identifier: 05:1A:39:49:A8:73:01:86:53:20:55:08:71:C7:77:AC:69:CA:5A:5A
Authority key identifier: FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3
Certificate issuer: /CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
Certificate serial: 019D3865FA516FB7B86B47E8A548B30552A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
Manifest number: 037B
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: _gC3BmlCNy_EjPLmHMdRjb8UuvM.crl (hash: Ui8GQt2np6ian0DaOy+k4i4yogeccsNLSBSyVWAtiG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fa:51:6f:b7:b8:6b:47:e8:a5:48:b3:05:52:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=051a3949a87301865320550871c777ac69ca5a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:72:c2:ec:ee:8d:34:73:68:49:c5:71:1e:
ba:7e:e7:a7:df:62:15:99:0a:8f:39:58:90:81:ec:
e2:8a:00:bf:cf:c5:0b:be:7b:bb:be:ba:e7:0a:b2:
03:63:b4:5b:12:2f:55:4f:d6:71:75:ac:69:51:36:
90:ce:e2:eb:d7:c9:3a:a8:11:84:7a:70:a3:c2:79:
d3:4e:98:bc:fb:ec:62:0c:d0:64:04:80:41:54:da:
17:60:5d:5b:0b:bd:2e:16:b4:e1:98:2f:25:cb:d8:
c8:36:89:01:17:92:29:0c:20:c0:aa:a7:9b:b6:f3:
50:be:a5:00:9d:93:fb:51:6a:fe:17:70:f8:66:13:
3f:96:73:14:d4:cd:82:02:ea:b2:02:36:90:58:86:
31:23:05:a6:37:2d:84:7b:6f:77:72:d6:85:e7:e5:
ad:c3:0f:2b:c4:b2:47:cb:5a:e4:34:60:dd:eb:14:
d9:c7:ac:ba:40:79:ff:e0:aa:9e:08:d1:7d:f9:7f:
38:23:b7:c0:5a:9b:c6:3b:d3:20:a0:3e:a2:36:0a:
ca:8f:3a:76:32:18:0a:71:57:35:0e:1e:e0:16:7d:
30:6a:93:d8:ff:23:5a:50:47:8c:b2:c5:d2:88:e6:
b3:7c:19:0e:e8:e9:36:6f:39:71:13:08:32:d3:db:
5b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1A:39:49:A8:73:01:86:53:20:55:08:71:C7:77:AC:69:CA:5A:5A
X509v3 Authority Key Identifier:
keyid:FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c4:ab:a4:a2:1b:56:2c:e2:ee:79:e2:26:42:b3:34:50:d1:
d8:0f:e5:16:a9:cd:23:f4:e7:93:7d:91:e4:73:6c:a0:ca:e5:
e4:1a:eb:1d:c9:a5:05:54:aa:9d:e5:5c:33:fc:72:fb:ea:40:
09:4b:11:89:8a:75:a3:43:b8:dd:87:e2:e7:a9:0b:73:86:3e:
98:bd:c1:f3:f0:f2:67:a8:f7:1c:e3:8c:4c:62:80:eb:30:96:
45:00:7e:0e:ca:18:45:f3:19:28:7d:98:1b:3e:28:83:ac:30:
ba:28:6e:6b:1b:70:a2:11:3c:c7:dd:66:79:27:30:92:d4:1d:
ec:6a:14:2f:ea:27:13:b5:4e:57:f1:fc:da:ab:5c:39:08:8f:
e3:01:ff:70:20:6c:4e:5c:0b:bb:0a:cc:10:45:72:08:be:e5:
00:57:1a:ba:e9:1e:3a:1b:42:b8:4f:33:ff:b0:0b:a3:37:1f:
c2:16:01:7d:c7:4b:b8:39:fa:c1:ce:7a:e1:fc:53:c5:31:1b:
a2:31:c7:eb:b0:f0:e7:3c:9c:f3:87:4c:0d:64:f2:b3:3f:ef:
55:0d:69:29:2c:a1:ea:eb:ce:d0:c2:31:ed:72:5e:90:6d:0b:
5a:03:2a:97:16:2c:17:fd:ad:fa:1e:40:4f:bb:27:36:5f:ee:
e5:5f:6e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:45 2026 by rpki-client