Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
File: gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft (raw, json)
Hash identifier: ak5GxFhDUQuIhswPu/eHd9ZB38togYy1dXicaufj1VU=
Subject key identifier: A1:C6:E1:DB:D5:35:B9:E8:CE:5E:66:4E:03:8D:04:71:45:F4:AA:9C
Authority key identifier: 80:2D:2F:85:05:E2:BA:EE:DF:7E:05:0D:27:94:2F:54:AC:6A:0A:56
Certificate issuer: /CN=802d2f8505e2baeedf7e050d27942f54ac6a0a56
Certificate serial: 019D371BC6092D208F7A81446918D3348781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
Manifest number: 0189
Signing time: Sun 29 Mar 2026 01:01:00 +0000
Manifest this update: Sun 29 Mar 2026 01:01:00 +0000
Manifest next update: Mon 30 Mar 2026 01:01:00 +0000
Files and hashes: 1: gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl (hash: oH3bpqkutN22Q0XNV4H9iMbHQBIDbMuqg3r6g5bXSwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:c6:09:2d:20:8f:7a:81:44:69:18:d3:34:87:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802d2f8505e2baeedf7e050d27942f54ac6a0a56
Validity
Not Before: Mar 29 01:01:00 2026 GMT
Not After : Mar 30 01:01:00 2026 GMT
Subject: CN=a1c6e1dbd535b9e8ce5e664e038d047145f4aa9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:95:14:19:83:5a:b9:2e:c0:9e:1e:d9:7c:
18:f6:da:16:00:36:be:45:99:9e:fe:e1:0c:b3:43:
b6:6d:6b:39:29:7a:e7:2d:52:d2:98:84:2b:08:5c:
43:2f:6a:bb:17:2c:10:0f:4c:05:3b:f0:5b:65:94:
9d:d1:19:6d:a9:9a:0e:2c:a3:f1:48:1f:f0:0f:3c:
23:72:25:14:eb:c9:96:c8:fc:9d:db:d6:d9:71:e8:
ba:7f:1d:1b:dd:05:04:f4:8f:97:c9:a5:4c:e0:48:
2e:8d:8b:14:3b:58:31:c9:5d:df:82:ab:b7:bf:b3:
7c:bc:19:5a:af:60:bd:e5:04:16:05:13:53:2a:ff:
aa:07:9c:f7:cf:48:09:af:d0:b2:27:09:74:03:75:
73:7c:1b:78:ef:d3:e9:0d:6d:2e:12:f3:7a:d8:ec:
8b:63:da:43:f8:57:65:4c:35:54:1b:7a:6e:b1:b4:
4c:cb:ce:76:b1:e6:93:38:9d:a6:c2:eb:e4:cf:52:
48:a5:a7:4c:bb:ca:72:fc:7d:56:4e:1c:54:3e:d2:
f1:bb:fe:07:73:ed:45:67:bb:f0:e6:90:20:e6:4c:
ce:53:e2:c0:24:06:8f:e1:b5:b7:e7:98:20:ef:e0:
25:ea:2c:e3:ca:d7:cc:01:ac:98:a3:2d:37:a7:82:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:E1:DB:D5:35:B9:E8:CE:5E:66:4E:03:8D:04:71:45:F4:AA:9C
X509v3 Authority Key Identifier:
keyid:80:2D:2F:85:05:E2:BA:EE:DF:7E:05:0D:27:94:2F:54:AC:6A:0A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0a:cd:b4:ef:e1:41:89:e2:35:45:d8:e7:42:d5:aa:08:cd:
4c:18:a1:3a:02:17:f2:74:17:4e:de:6b:f3:3b:1b:4c:7d:71:
2e:03:07:cd:fc:4b:97:60:5d:06:cf:fa:d7:8d:83:8c:f4:ea:
94:98:9a:e9:4c:24:31:bb:59:dd:d5:3a:12:ce:00:12:20:20:
4d:15:d1:4b:24:89:35:33:ba:de:c9:8c:7f:ec:cc:e8:82:93:
5b:6a:39:6f:81:f8:54:31:87:f5:05:fb:70:d6:66:9e:66:ee:
4b:6b:0a:3d:7c:ed:b6:77:f1:2a:df:c6:78:2c:e3:92:b7:60:
1a:b5:66:eb:bf:9e:c3:07:d3:db:1a:d2:5d:d1:28:ff:c1:49:
4e:f5:35:aa:5a:bc:72:3e:50:07:a3:ef:3f:84:11:f9:2c:63:
40:df:19:09:c1:e7:67:22:a6:21:ee:27:fe:ee:20:b9:88:64:
7d:c8:21:42:fe:dd:2b:e0:4c:b2:75:41:22:89:38:3f:bf:0e:
33:3c:25:c1:ed:f5:00:ce:22:73:79:c0:46:ca:17:4b:d9:e0:
6b:06:b9:56:a8:de:68:4c:e3:2c:2c:11:81:54:e1:13:20:e3:
2f:a0:63:f1:17:99:8d:ee:72:a6:a0:ab:41:e6:95:e1:b5:15:
70:e2:7a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:24 2026 by rpki-client