Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft
File: GT0ubIC0mJEN4dla7G5x0ldGJWc.mft (raw, json)
Hash identifier: gTyuiyYWBhx8ExJepb3v6h56bjZ6RAsLWElgshO+/wo=
Subject key identifier: 8E:C4:2B:15:B6:C4:B9:F6:E1:C8:D2:AA:7B:F6:2C:60:43:6C:A5:A8
Authority key identifier: 19:3D:2E:6C:80:B4:98:91:0D:E1:D9:5A:EC:6E:71:D2:57:46:25:67
Certificate issuer: /CN=193d2e6c80b498910de1d95aec6e71d257462567
Certificate serial: 019D382E2164423E71DFDF2F721B3C8B4988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GT0ubIC0mJEN4dla7G5x0ldGJWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft
Manifest number: 0121
Signing time: Sun 29 Mar 2026 06:00:40 +0000
Manifest this update: Sun 29 Mar 2026 06:00:40 +0000
Manifest next update: Mon 30 Mar 2026 06:00:40 +0000
Files and hashes: 1: GT0ubIC0mJEN4dla7G5x0ldGJWc.crl (hash: fEgrd5fANXjG4Jx+anxjen0egQc41ZP9o0DTpFyX2NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GT0ubIC0mJEN4dla7G5x0ldGJWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:21:64:42:3e:71:df:df:2f:72:1b:3c:8b:49:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193d2e6c80b498910de1d95aec6e71d257462567
Validity
Not Before: Mar 29 06:00:40 2026 GMT
Not After : Mar 30 06:00:40 2026 GMT
Subject: CN=8ec42b15b6c4b9f6e1c8d2aa7bf62c60436ca5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:80:77:29:d3:89:e1:af:ab:ce:4a:e1:6d:
5a:38:95:57:94:cb:02:cf:6c:47:9e:31:af:99:fd:
1e:9b:79:fa:f1:87:8d:ae:c9:77:19:a9:70:40:f2:
d0:5d:61:1d:6e:f3:49:fa:6a:38:3a:cf:c0:ff:08:
27:ae:64:17:f8:e9:4e:89:8d:1a:12:a1:12:a4:56:
56:55:18:22:36:cd:a8:eb:94:50:71:66:68:32:3d:
d9:a5:6b:23:a1:69:40:cf:9e:d4:cf:6a:bc:50:99:
58:17:5f:5b:48:c8:83:7b:0e:16:ff:5e:e6:74:d3:
12:b4:cd:4f:04:39:63:73:d4:6b:79:16:65:ba:ff:
05:0e:9b:f6:57:13:22:5f:6f:c5:77:cd:78:f7:79:
e9:9f:17:3d:17:a3:0b:06:63:86:57:94:71:d2:0b:
d6:a7:45:fd:01:2b:3b:60:3a:62:d9:ab:0c:c1:f6:
50:b9:ec:55:f4:ae:f6:fe:cf:66:f1:49:cf:46:c0:
22:a7:bb:77:54:65:e6:d7:6b:b4:75:d1:23:d0:bb:
4a:d7:d6:43:ae:f6:8d:a9:46:82:52:b0:75:3c:b8:
a1:c1:05:a7:ef:b7:33:f8:c5:ea:ca:11:5d:e3:b4:
fd:08:1b:56:7c:f6:f5:5d:c0:45:08:5b:85:da:b6:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C4:2B:15:B6:C4:B9:F6:E1:C8:D2:AA:7B:F6:2C:60:43:6C:A5:A8
X509v3 Authority Key Identifier:
keyid:19:3D:2E:6C:80:B4:98:91:0D:E1:D9:5A:EC:6E:71:D2:57:46:25:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GT0ubIC0mJEN4dla7G5x0ldGJWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:27:ad:02:38:02:90:48:9e:0b:36:a0:04:45:68:a9:b1:89:
62:1c:ce:05:8b:60:31:cd:63:85:9c:fc:16:b2:a2:33:27:27:
07:db:52:c0:6a:1c:52:d4:44:47:aa:60:ab:2a:09:18:be:fa:
91:2e:26:35:31:d8:82:28:a1:ef:20:24:53:14:3c:8e:59:97:
cb:c2:e2:88:c6:36:1f:91:fa:68:56:10:ab:76:ab:a1:fe:f1:
e8:dd:f6:e1:86:f7:70:14:5f:07:ea:72:24:99:34:f3:61:9c:
71:67:e3:15:5c:54:4e:bb:05:f0:f3:51:cf:a3:73:63:d6:4e:
96:c9:f9:a2:52:83:d0:27:97:2f:c6:0d:32:c5:82:f1:32:09:
f7:14:8a:ed:ba:ee:c1:af:3d:6b:dd:bd:21:db:b5:db:24:37:
f7:c7:6f:ec:fe:ae:ef:df:ac:86:41:7b:91:de:41:f8:6d:fd:
52:fd:47:a8:23:6a:ac:fa:3d:bf:ab:03:d7:8f:72:64:53:d5:
f6:4f:d7:d0:1b:eb:de:b5:67:2f:99:c6:15:81:e2:70:87:6d:
6a:ec:b6:7d:16:70:e0:e2:35:56:67:09:45:68:3e:3a:cb:75:
11:cf:18:76:10:ba:f8:5f:af:33:a6:48:85:d7:ac:45:36:23:
9e:24:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:01 2026 by rpki-client