Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: KB/WXVJyH1saihFzb1CLPIOJdrmCszUEuI4Fzv0YasQ=
Subject key identifier: 93:4F:4D:CF:EA:45:A8:E8:5B:43:3A:2B:29:FD:B7:A8:BA:46:A3:F8
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 019D3752B963C13DBE9DE2BD011999ADCE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 06C5
Signing time: Sun 29 Mar 2026 02:01:01 +0000
Manifest this update: Sun 29 Mar 2026 02:01:01 +0000
Manifest next update: Mon 30 Mar 2026 02:01:01 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: GV9p/ISb+kYkSnyCtqcenBYrMkDAQtGv6ISZSwNK7+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b9:63:c1:3d:be:9d:e2:bd:01:19:99:ad:ce:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Mar 29 02:01:01 2026 GMT
Not After : Mar 30 02:01:01 2026 GMT
Subject: CN=934f4dcfea45a8e85b433a2b29fdb7a8ba46a3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:b4:a6:5b:44:c4:3f:5d:36:2a:cb:fb:a0:
c5:51:7d:9a:06:b9:ea:e0:c9:20:41:7a:0c:53:cc:
e1:53:68:1a:f0:3b:b5:09:4d:ef:8f:29:f4:4b:54:
f2:a6:91:79:5a:59:76:3a:7e:68:fe:01:52:b0:0d:
f3:f4:1d:48:de:ad:f0:5e:b2:cd:18:73:bc:b0:c0:
e7:9d:57:88:9b:9a:3a:a4:3d:40:33:f1:f8:40:3f:
ff:ae:88:77:50:bc:fb:9d:9d:c3:70:a0:56:d8:4f:
22:3c:22:be:43:d5:d7:a6:03:98:f4:e3:a9:8d:2b:
a6:92:56:b2:b8:fc:31:da:3c:17:06:67:f3:7d:8e:
cf:ed:83:25:95:6a:a8:8e:3e:29:9a:8a:74:b0:ac:
3c:4c:72:5c:e5:fc:97:db:72:f7:cf:1d:4c:42:fe:
42:2e:43:f9:a7:18:ac:02:d1:33:fc:f3:36:52:f3:
99:53:b2:e7:4b:c2:0d:44:3c:d7:55:b8:b3:ed:88:
bf:08:31:e7:49:46:f3:ea:3c:b9:60:bc:4c:36:d5:
46:10:7c:45:ce:a2:f0:c0:77:fc:44:f5:c6:85:8b:
2d:fb:f1:8a:4e:3e:76:1a:68:44:a1:6c:4a:a5:13:
e9:1a:4d:49:f5:3f:cd:9f:3a:4f:f7:c4:dc:18:bc:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4F:4D:CF:EA:45:A8:E8:5B:43:3A:2B:29:FD:B7:A8:BA:46:A3:F8
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:70:55:9c:d0:ba:b9:56:67:1b:5b:26:a9:19:14:24:3e:9e:
c0:d9:c2:a4:5a:fb:94:f5:b6:bf:c0:f3:95:82:9e:16:6c:d8:
07:3d:26:7b:df:37:e4:a1:87:77:ee:3f:e0:e6:80:51:c4:ab:
eb:9f:ff:5d:82:0c:15:8b:4a:cf:f6:0d:3e:ed:75:64:bc:ac:
fb:3c:a5:32:0a:4e:71:7f:20:2d:32:3e:ca:5e:c1:53:88:d4:
66:2e:4d:c1:e1:b8:d1:8a:9c:ad:a2:b1:1b:3c:85:ad:d6:89:
6b:43:0c:03:2a:85:82:93:5e:f8:94:93:84:35:15:b2:54:26:
26:0a:dd:a1:4f:13:64:04:99:0b:07:d5:4e:74:00:e4:68:82:
70:18:bc:6e:30:3a:f0:9c:f2:16:09:a9:28:b8:67:9c:37:e0:
5f:c5:ad:9d:d3:93:0e:00:34:bd:4b:15:c0:68:9c:12:b9:7a:
ea:45:4d:dd:15:4e:ba:a5:75:18:c5:cb:c8:73:11:14:a6:63:
23:89:f8:67:74:88:7d:f4:0d:37:b4:c8:61:e7:29:cf:af:7e:
c2:09:57:94:52:cd:f6:73:53:5d:14:a3:9f:c7:27:29:90:89:
b0:7e:9f:9b:84:5e:84:fe:a0:20:f1:e3:af:a9:75:41:fe:34:
f0:9c:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:40 2026 by rpki-client