Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/db70f6-49b1-42ef-8d1a-19f32a5501a6/1/gN8JsnulUZukw6cvWt5YNjL9KbE.mft
File: gN8JsnulUZukw6cvWt5YNjL9KbE.mft (raw, json)
Hash identifier: ZmqS38IjnofeIzRTSPPwIe47wK2NSBkPTnwNvUuoSnI=
Subject key identifier: F1:22:31:65:F8:23:37:EA:FA:30:EA:8B:CF:2D:F8:CE:80:C3:BF:0A
Authority key identifier: 80:DF:09:B2:7B:A5:51:9B:A4:C3:A7:2F:5A:DE:58:36:32:FD:29:B1
Certificate issuer: /CN=80df09b27ba5519ba4c3a72f5ade583632fd29b1
Certificate serial: 019D38D30899FAC2E7801DAC19EB3512F558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8JsnulUZukw6cvWt5YNjL9KbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/db70f6-49b1-42ef-8d1a-19f32a5501a6/1/gN8JsnulUZukw6cvWt5YNjL9KbE.mft
Manifest number: 6B
Signing time: Sun 29 Mar 2026 09:00:47 +0000
Manifest this update: Sun 29 Mar 2026 09:00:47 +0000
Manifest next update: Mon 30 Mar 2026 09:00:47 +0000
Files and hashes: 1: gN8JsnulUZukw6cvWt5YNjL9KbE.crl (hash: 6A6g1g2e1At9wBW8VURmtUyb3uTNBsiHhRetpFiwzy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/db70f6-49b1-42ef-8d1a-19f32a5501a6/1/gN8JsnulUZukw6cvWt5YNjL9KbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/db70f6-49b1-42ef-8d1a-19f32a5501a6/1/gN8JsnulUZukw6cvWt5YNjL9KbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8JsnulUZukw6cvWt5YNjL9KbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:08:99:fa:c2:e7:80:1d:ac:19:eb:35:12:f5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df09b27ba5519ba4c3a72f5ade583632fd29b1
Validity
Not Before: Mar 29 09:00:47 2026 GMT
Not After : Mar 30 09:00:47 2026 GMT
Subject: CN=f1223165f82337eafa30ea8bcf2df8ce80c3bf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f2:0a:44:b5:ab:b2:c9:aa:29:0b:9b:f8:7e:
55:81:f4:02:70:2c:62:e5:47:79:0a:4b:54:78:68:
3f:df:8b:0d:81:7c:de:8e:7d:f7:6e:93:22:ec:25:
aa:47:5f:4f:52:af:d8:db:85:6d:2f:58:21:d9:19:
14:ed:1e:62:9e:bf:98:ee:77:c3:f7:15:f6:d9:67:
30:3d:de:a1:ba:0e:df:19:8e:8b:c0:13:36:b8:a0:
a1:a1:10:49:ba:1e:c3:1f:7f:0e:a5:12:e9:93:29:
cb:18:a6:61:6e:e5:f9:f8:a1:23:b4:66:cf:a3:70:
98:58:4b:12:42:6d:12:f6:d4:b3:c2:b9:28:02:b9:
76:73:32:b5:8a:09:1c:ee:cb:e3:56:71:6c:73:3d:
89:f1:df:e5:c7:6b:35:ed:a2:e9:9e:74:f4:81:8b:
37:b7:52:28:1e:13:13:05:01:6b:f3:0e:65:de:49:
48:fd:15:5c:10:ab:cd:83:ad:0f:26:08:ab:82:d3:
83:ab:2e:73:70:40:1d:90:ce:fc:db:17:7c:dc:c3:
08:34:31:41:2d:24:f5:6d:1c:b6:ff:51:e4:49:9f:
c1:3c:cd:03:0c:99:0d:54:8f:c0:e1:51:ba:82:a1:
69:5a:0d:c8:0d:f6:3e:6d:87:af:f8:19:e2:7a:de:
54:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:22:31:65:F8:23:37:EA:FA:30:EA:8B:CF:2D:F8:CE:80:C3:BF:0A
X509v3 Authority Key Identifier:
keyid:80:DF:09:B2:7B:A5:51:9B:A4:C3:A7:2F:5A:DE:58:36:32:FD:29:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8JsnulUZukw6cvWt5YNjL9KbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/db70f6-49b1-42ef-8d1a-19f32a5501a6/1/gN8JsnulUZukw6cvWt5YNjL9KbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/db70f6-49b1-42ef-8d1a-19f32a5501a6/1/gN8JsnulUZukw6cvWt5YNjL9KbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:31:f9:d8:7a:9a:30:74:a9:08:0f:19:e6:d6:0f:88:b4:1e:
e3:70:d3:ca:07:54:22:10:48:80:e9:8b:d8:fd:e5:8b:27:97:
78:4e:ec:b0:3c:26:f5:5b:94:7d:5a:b0:e6:8e:01:62:e3:fa:
db:57:b4:89:bb:ce:8c:24:ad:a5:c5:73:af:96:28:38:33:c7:
cf:13:12:69:d1:0d:47:e2:bd:63:33:b6:3a:01:7d:a8:82:1f:
d0:18:0f:a1:f3:bf:7b:bd:29:91:ab:22:ff:21:c1:06:1a:61:
36:20:5e:e4:d7:c2:15:03:70:13:1b:b0:4b:41:86:8d:90:5f:
71:ae:9b:3f:c1:0c:a9:84:07:d3:21:5a:d4:b2:26:6c:a3:a7:
72:6b:28:42:f2:59:20:19:42:d7:e0:0d:4a:aa:87:04:a1:bc:
b2:23:d8:18:7e:dd:43:43:71:b1:06:8e:0b:ee:c8:bf:75:99:
a0:a9:b1:dd:7a:49:6e:b1:45:d4:7b:05:24:34:c3:94:4e:04:
11:20:c0:23:bf:d7:6d:71:06:5f:ca:ce:92:e0:af:17:b8:70:
8f:19:1d:46:35:ff:6a:53:11:68:43:c0:d2:3c:00:70:08:62:
e4:fc:34:83:07:f0:a1:32:4b:96:a8:84:cf:28:68:2d:68:0f:
67:d6:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:58:06 2026 by rpki-client