Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
File: gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft (raw, json)
Hash identifier: LbqAZ/VbuOuvoTPQglS2DC/YXQFvKcBJV0v1h8+eo0A=
Subject key identifier: 46:E3:AF:CD:C9:85:F0:24:5E:13:7E:02:7D:61:B4:EA:83:B2:2B:C6
Authority key identifier: 80:EA:CF:62:B3:4A:4E:FC:5B:2F:D5:24:E5:92:16:7C:67:44:10:1E
Certificate issuer: /CN=80eacf62b34a4efc5b2fd524e592167c6744101e
Certificate serial: 019D39779B444F037987FD95775E72711D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
Manifest number: 01BB
Signing time: Sun 29 Mar 2026 12:00:33 +0000
Manifest this update: Sun 29 Mar 2026 12:00:33 +0000
Manifest next update: Mon 30 Mar 2026 12:00:33 +0000
Files and hashes: 1: gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.crl (hash: 7n52ztz6LbUo6MNyJg4HUU4oyr6hC1hljsXR5ZC9ykQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:9b:44:4f:03:79:87:fd:95:77:5e:72:71:1d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80eacf62b34a4efc5b2fd524e592167c6744101e
Validity
Not Before: Mar 29 12:00:33 2026 GMT
Not After : Mar 30 12:00:33 2026 GMT
Subject: CN=46e3afcdc985f0245e137e027d61b4ea83b22bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:d6:54:d9:f4:ca:7f:bd:3c:07:3d:66:04:
72:6e:59:c9:54:ae:be:c5:54:86:1f:4d:48:65:28:
8e:ee:da:e6:74:40:ac:f0:96:21:f5:a6:cf:db:7d:
d0:56:97:66:18:32:cd:cb:49:f0:94:79:ab:af:b7:
77:03:65:14:03:19:ae:19:8a:9d:de:09:d8:fe:9d:
70:0c:73:80:93:bf:8d:b6:c9:b6:6d:b2:88:a4:9d:
c6:d5:05:42:53:37:bc:da:17:c2:d2:44:6a:7e:da:
e3:41:f5:30:e6:a2:e5:72:1f:57:c7:44:09:cb:d8:
36:56:85:89:30:a1:73:fb:f4:22:7b:94:b4:42:07:
a9:9c:9e:1d:0d:ca:12:59:a1:2e:4b:78:61:a9:c5:
8b:a3:88:45:bd:b3:f0:fb:b6:be:f1:52:de:bd:e3:
07:ab:ab:d9:f0:42:ff:8e:d8:88:8b:49:a5:e2:e2:
4f:41:85:1b:7f:43:9c:b5:c3:89:1d:c3:3d:fc:9d:
4b:22:98:3c:c1:00:57:c0:ac:37:7e:ff:f6:98:a3:
25:74:20:14:a0:6a:cf:9b:dc:70:50:1f:d0:95:41:
49:27:48:0e:94:ff:f9:97:f3:36:d5:7a:57:82:5c:
d6:be:ab:ee:93:8e:f9:80:cd:bd:c8:9a:a4:e7:03:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E3:AF:CD:C9:85:F0:24:5E:13:7E:02:7D:61:B4:EA:83:B2:2B:C6
X509v3 Authority Key Identifier:
keyid:80:EA:CF:62:B3:4A:4E:FC:5B:2F:D5:24:E5:92:16:7C:67:44:10:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:db:14:fd:a2:78:d1:bb:bb:cd:f0:e7:17:a2:f4:81:90:95:
1b:7c:75:d4:09:f3:a2:e3:62:b9:dd:8e:f8:b2:b9:fc:ab:b0:
ed:33:73:6c:e5:13:14:23:ea:77:a7:4b:93:67:f8:ed:ae:5a:
92:64:c4:b1:a3:9b:8b:bf:38:d1:25:fc:a1:d3:d9:6c:da:f4:
fa:56:94:31:cc:24:10:fa:5d:54:d1:79:a3:78:47:c4:33:28:
4d:18:e7:86:7c:36:d5:19:de:b7:52:9a:99:aa:d6:95:5e:4b:
ce:5f:9c:e3:35:16:03:7e:7b:d4:3f:52:8e:6f:1f:af:5a:24:
06:24:8d:bb:97:5d:93:32:ab:68:3c:81:61:75:43:65:8b:78:
4a:18:23:ce:b7:d3:91:67:df:a9:0e:51:09:97:c9:86:13:09:
fe:54:46:1b:86:ad:6f:50:82:94:dd:84:07:75:fe:3e:d1:aa:
d5:1b:fd:b0:4f:f8:64:38:8c:07:2d:0e:46:a1:a4:47:ad:77:
b4:fe:05:cd:6f:2f:eb:57:9c:69:85:70:a6:4e:ad:6d:4d:22:
60:e1:0f:ca:61:c7:31:e1:47:b0:d4:89:f8:74:e6:77:08:c7:
97:16:b1:be:bc:c1:98:11:58:25:65:d8:64:1b:05:a9:ec:c2:
32:cd:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:48 2026 by rpki-client