Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
File: GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft (raw, json)
Hash identifier: 9YBrRU9FVffPVJHho/C5iAygZBTb8RAcc55M58Yg+Xs=
Subject key identifier: 3B:6A:39:32:90:27:19:E5:A8:86:78:D1:1B:19:36:D8:87:90:40:57
Authority key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
Certificate issuer: /CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Certificate serial: 019D3A1C2EBAF647FC74087E2A20C3960125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
Manifest number: 0BF0
Signing time: Sun 29 Mar 2026 15:00:18 +0000
Manifest this update: Sun 29 Mar 2026 15:00:18 +0000
Manifest next update: Mon 30 Mar 2026 15:00:18 +0000
Files and hashes: 1: GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl (hash: Sfp03uLqv3dk5Rt8MZWsJvihyRmMK7RLzdbhEFCkTds=)
2: xyNMPOjdSXVrOkDnqACX6hpPikY.roa (hash: GWpndT2t/1Gpwi+SLRm0phgKLCkd6P4JAMgA+uJmCIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:2e:ba:f6:47:fc:74:08:7e:2a:20:c3:96:01:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Validity
Not Before: Mar 29 15:00:18 2026 GMT
Not After : Mar 30 15:00:18 2026 GMT
Subject: CN=3b6a3932902719e5a88678d11b1936d887904057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:0c:59:01:e4:5e:51:fa:f8:18:c6:dc:e0:
bf:8d:1c:97:4a:9b:fe:72:64:7d:f2:76:d0:5b:9e:
e4:19:8f:78:b5:69:d4:9d:fe:53:82:9b:7a:98:49:
f0:a5:ae:eb:4d:19:51:99:fe:fe:97:d1:4f:d4:45:
92:8d:72:90:e6:02:1e:88:05:a8:a7:46:be:ca:2e:
3a:cd:04:d0:6e:db:d6:31:83:0f:eb:4f:96:c5:70:
0e:83:aa:ac:6e:4a:9f:0d:c5:85:ba:de:b9:8a:f9:
02:2a:21:cb:ee:9f:17:bf:be:36:7a:38:b6:b0:74:
b7:29:c9:e6:d0:93:12:ab:10:86:e2:b3:f3:6f:f0:
c7:f4:ce:de:5f:e3:fe:6f:6c:c8:68:7d:e5:57:2b:
8d:d6:35:ca:4c:0a:f1:2f:07:1e:54:0d:d1:37:73:
3b:f1:89:29:df:ec:60:8d:e7:c4:29:18:b4:8e:3b:
ff:57:d0:7b:c7:0a:60:d8:1d:65:04:e2:5a:bf:95:
76:17:a8:29:35:86:58:04:ed:c8:4f:fb:69:1f:99:
af:ed:f1:73:3f:fa:f8:52:2b:fd:78:bd:cc:27:ee:
3e:38:5d:03:f1:05:e4:e3:42:60:5e:ff:04:ce:c1:
77:3e:3b:33:f8:bd:cb:81:8a:18:99:a0:95:a5:71:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6A:39:32:90:27:19:E5:A8:86:78:D1:1B:19:36:D8:87:90:40:57
X509v3 Authority Key Identifier:
keyid:1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cb:7b:d5:6c:04:a8:cc:d9:84:0e:20:cb:e3:4f:b9:ab:ed:
25:67:0a:dd:bd:41:a7:d9:76:0e:c4:fc:c2:1f:05:36:6e:ac:
08:2f:9f:9f:1a:e1:71:7b:b2:07:de:d6:9e:ea:47:71:95:e5:
f8:22:70:26:84:84:ce:9e:66:92:8d:d1:5f:09:25:87:fa:56:
c2:6b:65:a0:b8:9c:f9:10:bc:cb:43:6b:d9:6e:3d:a3:ac:9c:
14:56:39:df:41:e5:d4:c5:1f:ae:10:2c:57:87:3f:76:0e:cf:
cc:0c:f3:db:28:04:4a:06:9f:aa:68:53:65:ec:43:ef:8c:d4:
36:5e:a5:5a:59:8c:fd:f0:cb:26:65:cb:2f:6c:cd:d1:33:2f:
8f:5d:12:ea:a5:8c:9c:57:70:c8:d0:3b:f4:cb:fc:8d:cc:cf:
ef:3f:6b:13:45:3b:54:3e:f2:3a:b4:50:43:ba:65:8e:22:53:
f5:66:9f:28:2c:2b:84:4b:78:35:17:1a:a3:75:26:f4:8b:3d:
13:52:6a:61:f0:c2:9e:5e:af:bc:3c:22:c3:ef:2d:a5:97:fc:
1d:6c:9f:34:ee:f2:5f:ed:07:40:89:ce:d3:b0:72:ba:ae:bb:
71:64:e5:c3:31:43:56:0a:7b:2a:76:1e:07:69:c8:33:97:31:
03:5a:f3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:31:49 2026 by rpki-client