Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
File: Gw4VwVrnA6iXkEavXezEky7cf24.mft (raw, json)
Hash identifier: LM7yoyukRZVb0ApPkhTLFR7b5VfxSb29AFJTqie4/OE=
Subject key identifier: 9B:20:96:71:C9:D9:2B:4A:92:27:95:25:A3:AE:07:4C:6C:8B:90:EA
Authority key identifier: 1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
Certificate issuer: /CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Certificate serial: 019D382EA859D7D052AEA1A60C13EB62020D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
Manifest number: 09D1
Signing time: Sun 29 Mar 2026 06:01:14 +0000
Manifest this update: Sun 29 Mar 2026 06:01:14 +0000
Manifest next update: Mon 30 Mar 2026 06:01:14 +0000
Files and hashes: 1: Gw4VwVrnA6iXkEavXezEky7cf24.crl (hash: MpIoWQquDneB9v/v/IbY0+LdIkVHNnYFeRjW+mWULQM=)
2: LXtgiz2X-uWCq46JBVRBYRvIQFU.roa (hash: NOLtuvoznBuDmvNkK3zlEF6kLeoyidKik4Tk8XzR8jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a8:59:d7:d0:52:ae:a1:a6:0c:13:eb:62:02:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Validity
Not Before: Mar 29 06:01:14 2026 GMT
Not After : Mar 30 06:01:14 2026 GMT
Subject: CN=9b209671c9d92b4a92279525a3ae074c6c8b90ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:a1:d2:b4:9d:b5:7d:1e:53:b4:87:04:50:
35:5c:76:bd:5b:c8:47:ae:d6:c4:cc:c7:8e:4b:86:
5a:10:fc:34:0e:74:a6:a5:4a:03:3f:58:02:15:dd:
a6:15:80:86:66:6c:56:59:48:05:27:83:de:d6:23:
b2:7e:a2:94:52:1a:f0:c1:5a:2c:82:b4:ba:af:ca:
1d:28:3b:76:ed:ce:2e:92:e7:64:31:07:b2:40:17:
b8:d6:ea:52:67:f7:06:b2:e0:f1:e1:ee:5a:ba:9d:
a4:09:01:ed:08:67:eb:13:69:c9:ae:48:17:cb:7b:
f8:ec:01:0f:b9:c9:8f:16:8f:c6:a2:b6:47:83:f5:
97:46:c8:fa:c9:fe:03:c2:13:a5:59:c9:dc:98:16:
4a:d2:2a:0e:46:fc:06:28:18:60:7d:10:bd:9f:c9:
f8:c8:53:27:c4:ef:fb:5c:9d:fe:94:c5:1c:dd:44:
b6:bf:aa:88:84:ab:fb:ea:de:a6:87:d8:4f:ba:96:
b5:a2:3c:1f:58:37:2b:6c:bf:97:2d:60:4e:4f:13:
d1:96:cd:17:03:58:89:f9:4f:c3:ca:ed:11:06:6d:
7e:7d:eb:bf:8b:8d:51:4b:30:a1:ca:5f:7a:58:d6:
a5:a1:fd:65:c2:b9:c7:6a:49:12:f8:0d:81:2a:43:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:20:96:71:C9:D9:2B:4A:92:27:95:25:A3:AE:07:4C:6C:8B:90:EA
X509v3 Authority Key Identifier:
keyid:1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bf:7a:ab:cb:77:4d:a8:50:6d:ec:51:33:94:28:38:22:2b:
3a:b9:1a:25:60:c3:ed:f8:54:fe:aa:43:12:00:bf:7d:29:9d:
ce:ba:70:20:56:f5:67:54:81:c0:43:f9:ee:c8:99:25:39:a5:
aa:a6:af:2f:dc:21:ef:66:34:7e:54:c0:83:85:4b:fe:d4:66:
43:e4:3d:ac:a4:4f:8d:35:fc:2f:f2:46:9d:70:cc:5b:b0:de:
c4:6b:12:b5:7b:d7:6c:81:b6:d5:9a:d5:b0:9f:80:41:5d:f0:
8e:0e:1c:52:69:b1:2f:01:b7:d1:7c:df:64:44:50:36:3b:3f:
6f:ed:fb:1e:ec:68:7e:fd:06:1e:53:94:30:fc:f9:ec:eb:65:
c8:b8:c6:6e:e5:82:2b:23:ef:16:50:14:99:d0:d6:ed:c5:3e:
4a:1f:ba:ed:e4:3c:7b:35:cf:28:86:99:ae:d0:1a:48:d3:8b:
e0:be:e6:ac:d6:53:13:6b:3b:f3:12:d0:cb:2c:c8:d9:73:7e:
48:e6:23:7a:ad:b4:84:34:6c:bf:bc:14:f2:0e:b2:0d:7e:0f:
a5:b0:03:9d:9d:3b:d6:b3:76:7d:e9:2f:0c:78:d2:d4:12:9c:
c3:74:87:11:7e:14:92:7e:bc:c1:15:34:3c:9f:ce:c7:ca:45:
ee:fd:ec:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:42 2026 by rpki-client