Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json)
Hash identifier: 2tt3tobvntv0GfKatZCeNAJoheBYY4zIfD8W+KokwoM=
Subject key identifier: 36:EF:8A:80:C4:29:F2:EB:31:5D:11:6A:E9:0A:78:D2:9A:5C:92:E8
Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
Certificate issuer: /CN=8260c94351066ec06debfab2bca9dfaed407e698
Certificate serial: 019D38D3B6CC834D45DD984928E5C3502069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
Manifest number: 093D
Signing time: Sun 29 Mar 2026 09:01:32 +0000
Manifest this update: Sun 29 Mar 2026 09:01:32 +0000
Manifest next update: Mon 30 Mar 2026 09:01:32 +0000
Files and hashes: 1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: aArsx6+laMp/qD1VTeoi1UEaO5nYxB7ixLh/AvLLpFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b6:cc:83:4d:45:dd:98:49:28:e5:c3:50:20:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698
Validity
Not Before: Mar 29 09:01:32 2026 GMT
Not After : Mar 30 09:01:32 2026 GMT
Subject: CN=36ef8a80c429f2eb315d116ae90a78d29a5c92e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:90:e3:6f:d3:74:86:92:68:29:97:9c:a1:15:
86:be:a7:c6:6b:57:3f:92:80:e1:6d:af:66:ca:91:
23:a0:bc:54:0e:4e:bc:55:8e:98:d8:e5:71:f5:e2:
ac:fa:68:f5:be:d6:aa:27:df:ba:8f:2b:25:df:20:
92:f4:be:1c:09:69:ba:9e:bf:7f:89:84:c4:14:22:
9e:99:df:f5:db:d7:21:50:76:a3:71:99:46:8b:6c:
cf:b8:0a:00:19:62:d5:42:9a:a6:c3:39:4a:2d:36:
01:33:8e:0c:e8:6c:bb:e8:bd:00:bd:64:c9:c8:ef:
84:4c:60:b3:31:2a:3c:cf:65:62:b8:3d:dc:53:fd:
4e:e1:4b:f8:b4:20:1a:eb:de:a9:98:62:f0:fe:0d:
7e:51:ea:c7:50:54:bd:99:fd:ec:20:ef:bd:e6:32:
de:af:34:fc:ca:ff:19:06:3d:fb:b7:6d:5e:d4:ca:
30:40:71:2a:d3:47:1d:9a:15:be:30:06:39:64:53:
5d:61:53:bf:5a:85:72:18:aa:ee:84:d2:17:27:ba:
e0:51:39:c4:e9:ba:d3:fe:08:5d:9e:39:98:3f:c5:
77:03:94:aa:45:19:46:79:98:5a:dc:65:cc:9b:ae:
6d:47:36:1d:f4:8f:16:be:75:17:2c:92:8c:1f:02:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EF:8A:80:C4:29:F2:EB:31:5D:11:6A:E9:0A:78:D2:9A:5C:92:E8
X509v3 Authority Key Identifier:
keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:15:8c:85:39:b1:09:7a:bf:77:bf:e9:04:cc:42:3b:89:a4:
55:68:1f:f8:dc:bc:7f:d1:42:5f:22:e0:36:da:55:b4:b4:71:
76:6f:42:47:d1:73:31:cc:af:2b:3e:4b:6f:a4:f9:26:b0:c2:
7d:44:b2:25:be:e6:7e:ae:36:ea:51:31:61:b7:da:2d:5d:0c:
da:e7:32:f8:dd:88:39:2b:f5:fe:4e:8f:48:dc:44:66:a7:a6:
90:24:79:cb:ae:b9:43:ec:f0:7f:37:c2:4e:5f:34:ac:4a:69:
6a:4e:ac:b4:03:75:cc:b4:5c:93:26:46:be:0d:9b:38:a4:ee:
24:50:f8:f6:51:f2:2e:43:47:27:69:4b:6e:26:99:9a:01:af:
8b:ea:bf:72:ac:55:12:1a:07:9d:1b:cf:5d:54:3e:0d:ac:35:
c9:7f:5c:13:f0:18:fa:47:fe:a4:30:86:e1:51:54:e6:ad:11:
ed:ce:99:d0:7d:d8:37:8c:a8:91:3c:49:24:f8:98:54:13:ca:
01:08:ee:fa:7f:d4:73:88:6a:d0:35:ed:ac:25:aa:43:47:3e:
ab:fc:3a:b0:80:0b:1d:80:92:bb:45:76:12:b4:95:f1:ab:3f:
71:4b:a2:ae:fb:5d:3d:18:de:ee:41:3f:0a:03:dc:ec:c6:77:
72:23:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:17 2026 by rpki-client