Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier: 0+0rgKr3o19I5izbfION+2EQawndaPEyc15uEZwEOfc=
Subject key identifier: 49:03:68:BE:0F:0F:04:99:C4:D3:D4:48:07:A5:E1:1D:AC:83:5E:7A
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial: 019D3865DFA5501B6D43383CF2E4763CD9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number: 16A8
Signing time: Sun 29 Mar 2026 07:01:33 +0000
Manifest this update: Sun 29 Mar 2026 07:01:33 +0000
Manifest next update: Mon 30 Mar 2026 07:01:33 +0000
Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: 6NmBvqsh1mkBRa1UhjOWUVvj2aHcOoag5u1HAKgOMUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:df:a5:50:1b:6d:43:38:3c:f2:e4:76:3c:d9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Validity
Not Before: Mar 29 07:01:33 2026 GMT
Not After : Mar 30 07:01:33 2026 GMT
Subject: CN=490368be0f0f0499c4d3d44807a5e11dac835e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a3:9c:6f:49:c8:2e:21:e0:15:83:99:e7:06:
34:4b:95:0c:9f:d2:b5:d8:0a:af:d6:01:43:41:b9:
83:01:ed:e7:a9:3c:eb:46:5e:c4:0d:b5:2a:0a:37:
15:95:fa:56:dc:fb:e5:d9:a6:38:44:79:52:49:8d:
52:63:13:b6:c0:ab:5c:dd:7c:33:b4:45:2e:a9:a4:
30:a7:29:82:f5:43:69:97:5a:68:e1:06:83:83:f0:
f9:3f:7e:f0:6b:02:db:a8:4f:53:d9:63:28:44:86:
02:b1:d9:28:fb:58:bd:6a:16:3d:1f:92:6c:3e:8d:
99:9b:87:37:d6:2c:e7:bd:4f:f6:29:4c:eb:db:58:
6b:b0:5a:ad:29:0a:41:58:48:9a:4d:37:ac:7a:18:
cc:1b:39:e0:2e:20:e7:dc:ef:11:4e:78:f6:67:91:
32:67:3b:7f:cb:d1:3a:a2:81:ab:3f:46:6b:3e:7b:
4c:25:32:ba:58:b3:2c:06:59:2d:a2:2e:ee:0f:70:
fa:f8:de:67:2d:44:79:bb:6d:07:19:e6:e5:ac:c6:
ef:46:b6:4c:a2:2a:9b:61:26:ef:20:50:54:4d:f3:
b4:4c:ab:1a:a2:5b:38:6c:d0:3d:08:f1:09:1e:97:
9d:a5:32:04:a4:96:8b:23:13:56:16:1b:a3:15:89:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:03:68:BE:0F:0F:04:99:C4:D3:D4:48:07:A5:E1:1D:AC:83:5E:7A
X509v3 Authority Key Identifier:
keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:31:42:93:14:f9:69:d9:3b:a1:e5:dd:6d:84:cb:44:ee:ca:
31:b7:8f:c4:89:f4:36:cf:20:06:27:84:f3:71:e3:74:0d:55:
2c:f9:02:22:87:64:74:44:c6:24:98:11:e2:f6:1e:10:77:2e:
a1:b5:17:9c:0a:b1:9c:b6:9f:e3:4a:c4:32:4a:3e:77:9b:2b:
27:16:44:e3:38:97:68:cd:f4:c7:8b:e6:ec:4b:0d:1d:c3:f8:
f6:53:9d:84:bd:af:78:1e:0d:9e:f5:5b:0a:02:38:72:7b:0a:
5f:44:bf:82:c2:7d:a0:fd:3f:4f:43:bf:45:0d:09:b7:af:39:
6d:c5:09:02:23:bd:85:fb:f8:a8:5d:1f:16:f0:19:ef:0b:f3:
8d:91:1b:01:e5:bc:0f:ec:a0:da:9f:32:09:5f:6c:24:0e:46:
46:d0:38:1b:4a:be:2d:a8:17:4b:33:22:6b:8f:04:d4:87:bc:
28:ca:86:87:03:af:e0:ce:c3:c3:d1:2f:a8:d3:b6:46:7f:db:
91:76:ad:81:d2:7d:ae:42:c2:70:03:17:95:2c:de:33:49:89:
c0:4f:56:e5:ec:bb:3b:15:cc:1a:4d:c9:6b:5e:5f:25:c8:ba:
f1:cf:39:15:fb:9e:44:b3:46:f5:1e:f0:a9:43:3c:a3:8b:c4:
0f:e2:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:02 2026 by rpki-client