Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
File: GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft (raw, json)
Hash identifier: RE7gU+OeDCgi3rG2iRdgikqw0PmQ9wQ3T/J295mzaNQ=
Subject key identifier: B7:60:95:03:93:04:CB:69:B8:B7:97:A9:55:AE:3D:88:0F:EB:4C:1E
Authority key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
Certificate issuer: /CN=1925e6387b33e94069a89a5d1be68904e4090613
Certificate serial: 019D3940E2D37C4B54A9BA4342F254297887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
Manifest number: 0569
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl (hash: qb7CcdI61ADQU+Mfy4KBhX9NhhqjQUlBYZEuCktocOM=)
2: ndpI9qLffpVaMGScW-JZ0lWj0Ks.roa (hash: vfmuR4iQKhTkQbNhXUi+1cOgTRg44mLCvKB92dRG9wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e2:d3:7c:4b:54:a9:ba:43:42:f2:54:29:78:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1925e6387b33e94069a89a5d1be68904e4090613
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=b76095039304cb69b8b797a955ae3d880feb4c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:6b:15:4a:e7:87:3e:ec:55:6f:3e:3f:1e:
30:6c:16:ca:7e:61:15:ba:b3:da:d5:38:11:4a:d0:
2f:55:4f:f1:45:0b:ab:9f:a7:02:79:0d:64:bb:1a:
29:1e:c5:12:18:43:0f:8f:06:82:44:5e:64:9e:43:
9c:f4:07:9c:e0:7e:d2:f3:d2:6d:07:77:29:81:7b:
63:55:6a:ce:8b:22:7a:64:71:85:6e:16:c6:98:ae:
5b:73:70:e5:b2:6c:3b:27:93:a0:fb:50:57:03:b0:
b3:cf:66:75:98:7c:1f:d7:68:28:d1:5a:a4:7d:0e:
fa:0c:9f:88:88:eb:9b:0f:bc:9e:ba:e4:fc:30:bc:
43:e1:56:d3:f8:90:ff:e0:92:b5:fc:55:1e:15:c2:
fa:d7:cd:e0:fb:f6:6c:39:9e:1b:4f:94:0a:67:6b:
98:35:70:cf:5e:de:c2:1a:bd:9d:ca:24:b8:5c:71:
e7:78:92:4f:b4:b4:27:2d:68:ec:a8:65:7f:84:d3:
b3:ce:af:c7:6f:18:00:eb:97:37:d7:03:90:0d:d8:
8a:95:c0:be:8f:11:58:80:bf:e5:fa:c1:86:a0:67:
e7:15:c6:9a:ea:7d:c2:8a:f0:93:89:e6:40:a2:ac:
cf:79:8b:3e:5c:af:b5:ef:ab:79:cd:2c:6c:c5:22:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:60:95:03:93:04:CB:69:B8:B7:97:A9:55:AE:3D:88:0F:EB:4C:1E
X509v3 Authority Key Identifier:
keyid:19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3d:d0:d9:e4:e1:ad:e2:44:88:0b:2e:f0:cd:4a:75:9e:88:
96:45:98:6c:46:93:c7:0f:bf:32:c7:d3:d0:6f:ba:69:ba:8a:
e4:49:f2:6f:22:a3:4e:b7:20:b4:c3:8d:ea:e0:46:32:e3:3d:
54:92:a9:37:e2:e2:6d:08:9e:4e:ac:46:1e:dd:a2:3f:80:b7:
a6:57:bd:1d:3e:45:a2:f7:c1:31:6c:4d:67:85:60:97:9c:fd:
8b:12:3b:88:eb:24:ce:78:c0:1b:c5:7e:1b:f8:55:79:7e:aa:
41:f6:ad:86:e9:d0:b6:27:5c:40:57:f3:cf:7d:12:bc:ad:ce:
ee:1a:43:64:9d:04:eb:a0:fd:6b:0c:b5:94:9c:5c:32:c8:63:
63:fb:0a:12:3f:eb:5f:f5:bd:59:67:01:b3:7d:aa:5e:d3:4a:
35:a1:ce:d6:1b:99:f7:28:b8:6f:a2:0b:ff:09:0c:2e:e4:bf:
cb:a6:d9:01:be:6c:5a:ed:a7:d7:3d:75:11:a1:55:48:9c:bb:
65:aa:ef:55:9c:ff:54:67:7a:16:b9:14:66:32:91:45:80:01:
87:91:bd:7a:97:f6:81:6d:db:2c:75:1c:93:85:0a:95:d9:22:
5a:3a:a6:8a:bf:95:36:00:05:9f:a1:ef:af:47:d1:99:b0:4c:
ab:ce:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:57 2026 by rpki-client