Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier: m66pndF0PeJMEaZgcmX5vfcCxaVMy6MGU+H2Uu8l0L8=
Subject key identifier: 37:4E:06:BE:7F:EB:7E:C5:CF:32:18:25:DA:62:DE:28:B7:3C:E5:8E
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial: 019D38D37FE9CE86FF4010B3444A332F1C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 09:01:17 +0000
Manifest this update: Sun 29 Mar 2026 09:01:17 +0000
Manifest next update: Mon 30 Mar 2026 09:01:17 +0000
Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: i1RE13BXaKz00Zen0HRnzTpPNTt5m3WYH8vPucjZJFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7f:e9:ce:86:ff:40:10:b3:44:4a:33:2f:1c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
Validity
Not Before: Mar 29 09:01:17 2026 GMT
Not After : Mar 30 09:01:17 2026 GMT
Subject: CN=374e06be7feb7ec5cf321825da62de28b73ce58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:f6:c4:ad:a1:75:5b:76:29:f0:71:28:4c:
89:73:d6:9f:40:93:f2:1f:75:3f:6f:65:4d:e5:f5:
cc:17:7a:fa:e2:8f:8e:9a:87:3e:53:9e:74:2a:a8:
54:71:16:c2:f5:b4:b2:92:ff:54:b3:81:0b:aa:b1:
24:6c:1b:f5:e7:7c:55:31:8a:a1:e4:2e:ce:dc:d0:
c3:61:46:2b:c3:51:24:93:3b:ba:36:5d:d6:f7:32:
52:31:15:b5:7a:2d:78:60:d2:ce:ea:52:b3:13:e5:
a6:63:ad:cd:d7:d7:a5:3d:3c:c1:e4:0d:43:73:45:
e0:1d:aa:b9:17:88:be:16:51:48:06:bc:da:61:18:
94:47:2e:d7:83:3a:21:22:d1:0e:a7:ed:2b:f8:38:
e6:26:9c:dd:62:d0:f4:7c:f6:b7:6e:18:38:63:28:
4b:85:10:fb:11:97:a6:8d:16:e1:19:05:16:49:59:
4d:8c:f4:5d:56:6c:6a:22:b6:be:8e:44:a5:2d:06:
df:ed:c5:61:94:8a:7d:7c:0f:c7:46:8e:84:a4:ac:
54:67:94:64:98:05:8c:4c:f4:80:2a:19:78:3d:28:
6b:2d:48:5b:ab:94:4c:f1:84:94:3d:41:86:a2:9c:
1c:a9:1e:68:6c:74:e9:5e:0a:10:5a:ce:99:6f:80:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:06:BE:7F:EB:7E:C5:CF:32:18:25:DA:62:DE:28:B7:3C:E5:8E
X509v3 Authority Key Identifier:
keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:40:f0:61:97:e6:4c:37:3b:09:42:4c:54:b0:87:df:4e:70:
cb:9b:6d:a5:f6:8f:a8:52:3d:8b:b9:c0:af:4f:3e:ec:68:b2:
c2:c9:46:5c:be:be:2b:9b:f9:46:b2:04:e0:b9:23:8f:89:22:
8b:5f:59:00:67:98:0b:e6:1a:ca:e9:e6:81:7b:9f:db:18:9f:
06:20:3c:20:5f:2f:a7:8e:96:0b:ae:2c:7c:ee:22:34:97:5e:
ea:d3:e2:1a:8a:8e:4a:db:ae:1d:40:58:4f:0d:1a:44:3b:6e:
a1:fc:42:85:e9:68:17:da:cd:75:53:11:d1:73:6d:87:18:6f:
f0:a4:30:40:8f:e9:01:0b:8c:07:35:e0:b2:3b:d6:ba:9c:ac:
03:56:be:4e:d8:f2:d5:1c:58:99:28:55:b7:5e:4b:ee:70:77:
1b:03:62:fd:5d:0e:cb:af:cc:1b:3d:a5:98:f6:03:65:35:4b:
48:d0:48:b2:4a:4f:7e:a3:55:ad:66:59:f7:84:63:f4:9b:d8:
77:e1:6d:72:19:ad:32:68:a0:8a:8d:88:4c:53:d8:68:21:29:
3c:ed:bb:9c:6e:42:8a:d8:c3:21:12:e1:4a:86:93:25:1e:92:
5f:89:2b:e3:57:72:e5:f6:50:9a:92:b5:16:da:bd:d6:0b:c4:
2b:96:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:51 2026 by rpki-client