Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File: Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier: MFImDO5qDHOmpRRlPiL+BJsIwmt0ZYDMUdwwBob3VnU=
Subject key identifier: 7E:46:17:83:C6:4C:CC:57:3E:10:16:AB:8B:A9:B7:FE:11:BA:13:22
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer: /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial: 019D389C3EC589A23AA7AE7ABDD10EB447AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 08:00:56 +0000
Manifest this update: Sun 29 Mar 2026 08:00:56 +0000
Manifest next update: Mon 30 Mar 2026 08:00:56 +0000
Files and hashes: 1: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: Iv9+RAuaO29YpmGLM2E4UREDYiWV5PVFZdkpMW+AD1A=)
2: ZohyHfqFv67z4908u3_QeIT8zVw.roa (hash: F/BjQl+7N2tQfUywKhEzc2DzriEJ3gerXgEGzUTdIDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3e:c5:89:a2:3a:a7:ae:7a:bd:d1:0e:b4:47:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
Validity
Not Before: Mar 29 08:00:56 2026 GMT
Not After : Mar 30 08:00:56 2026 GMT
Subject: CN=7e461783c64ccc573e1016ab8ba9b7fe11ba1322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:78:e9:62:cc:11:78:f8:4e:a1:9d:2e:f7:
12:ca:c2:77:9b:b6:76:d2:99:d5:00:f7:71:7a:67:
97:5d:55:f0:a5:07:ab:fd:8f:85:5f:ee:21:cb:0e:
63:d3:15:01:80:52:90:45:05:d4:ec:25:9b:cf:73:
c0:35:cf:68:87:91:15:2d:46:14:78:1b:83:f2:41:
81:f9:ae:75:c1:c9:34:e1:92:3e:30:c7:d7:0e:4a:
63:ee:34:30:fc:91:17:65:ca:d2:67:8b:e7:5f:ad:
e0:a9:9a:88:97:25:54:ff:b5:6a:ec:64:f5:e2:ae:
c1:58:c7:58:d0:05:0e:28:09:a2:40:3c:1d:74:56:
08:b5:89:1c:5d:94:e9:2d:f1:17:9c:1f:45:b2:08:
3c:39:79:46:30:f1:7a:63:26:37:53:0c:13:82:f4:
d3:41:9f:87:3f:b0:5f:96:e6:a4:62:6d:a0:d8:51:
0d:5c:42:64:4c:02:69:5b:0f:f6:d4:f8:e7:35:b2:
90:64:12:8c:1f:c0:08:0a:1e:12:6a:57:d1:e2:a0:
16:3e:74:84:c9:35:e0:5a:f8:d0:aa:9e:b6:14:c7:
07:62:41:4a:12:0b:c6:31:19:4c:fe:b8:01:02:07:
57:fb:ba:33:3a:2f:92:ed:89:b5:f9:fd:83:65:32:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:46:17:83:C6:4C:CC:57:3E:10:16:AB:8B:A9:B7:FE:11:BA:13:22
X509v3 Authority Key Identifier:
keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9d:56:4f:02:d1:76:54:f0:89:86:26:b5:fa:11:bc:5b:42:
94:82:f1:36:f9:8c:cc:e4:b9:0d:a6:ab:3d:62:22:63:b0:b2:
61:90:f2:aa:57:22:7f:0a:06:8f:38:44:18:12:1a:35:5c:84:
d0:09:57:16:b1:b9:8c:0e:43:d9:73:4b:6f:55:bd:f9:21:7e:
e4:ac:48:46:34:11:32:be:c9:b2:90:9c:6a:8a:d6:b5:fb:ff:
be:a1:64:8d:44:3c:1d:91:4c:5f:d0:94:83:c2:70:04:10:1c:
77:1b:41:70:14:72:c9:c7:33:74:ae:d8:6e:7f:13:db:5c:aa:
7f:95:be:eb:02:77:c1:9c:0d:0d:1c:31:d5:75:26:0a:d3:72:
a8:0c:f1:1b:02:27:a0:da:9e:e7:9a:b1:da:84:f5:cd:fd:64:
ff:bd:55:ec:92:cf:74:45:0c:4e:2c:21:c0:16:17:3d:a7:1e:
69:94:87:08:0b:05:1a:1a:f5:73:9b:56:ae:50:18:c9:47:51:
e7:51:97:ec:0e:04:42:8d:13:8b:1e:f8:46:96:5d:10:6e:57:
a1:ae:96:ec:c7:fc:4a:97:33:8e:0f:37:7a:a2:b5:8e:59:26:
ec:f8:9d:eb:39:9b:f0:dc:75:7a:33:6c:f1:a9:20:1f:40:e9:
5a:38:4c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:09 2026 by rpki-client