Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
File: gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json)
Hash identifier: 6kFzJKzGEv2T2xbI7vszbOQgdBbXzvKaRnebyjAavfw=
Subject key identifier: B0:F1:4C:71:67:0D:E7:B8:02:96:E2:6E:4C:E4:8D:03:4B:A3:7E:94
Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
Certificate issuer: /CN=82a494a1dae54873dfa2deb56d031334076ac95b
Certificate serial: 019D371BF55DCB1882D95F36B02973400331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
Manifest number: 0A39
Signing time: Sun 29 Mar 2026 01:01:12 +0000
Manifest this update: Sun 29 Mar 2026 01:01:12 +0000
Manifest next update: Mon 30 Mar 2026 01:01:12 +0000
Files and hashes: 1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: pB68rkv0yO/u6LNKwvxvGkdKAP45GTsVMFacYdHcnZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f5:5d:cb:18:82:d9:5f:36:b0:29:73:40:03:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b
Validity
Not Before: Mar 29 01:01:12 2026 GMT
Not After : Mar 30 01:01:12 2026 GMT
Subject: CN=b0f14c71670de7b80296e26e4ce48d034ba37e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:40:ee:7d:4c:2e:2f:80:9e:3e:46:0e:6b:
fa:37:e9:4f:95:17:c5:04:c0:17:f9:8a:40:b1:f7:
6d:14:89:e9:96:f3:9f:cd:96:2d:9e:b7:20:0e:17:
6b:0f:5a:5e:c4:64:6e:22:05:a6:3a:a7:33:b3:54:
31:0d:6f:77:3b:25:64:bd:f9:1b:7a:3e:c4:40:0c:
13:b1:55:87:6c:4e:0e:53:fc:c8:cb:7f:9b:96:62:
e2:ec:5d:22:4d:60:d5:e9:89:b9:e0:35:df:c3:f7:
7a:a1:8d:31:01:d0:90:e3:27:a5:bf:9c:02:07:bc:
bf:e8:51:91:8e:ee:6d:b4:bc:16:8b:b8:3e:9a:34:
ba:a0:01:3b:94:4f:0c:93:a8:0f:94:c2:a3:cb:c2:
be:a3:ee:2f:40:ac:e7:9d:3a:16:21:c2:d4:e5:ad:
fb:1c:69:e3:8f:16:c6:31:50:36:ee:ce:84:d3:ef:
18:69:c1:1b:73:a0:e4:30:5a:88:2d:05:6e:70:41:
0a:c1:f8:61:ef:28:d9:8e:5e:b7:96:37:79:45:fd:
54:f9:39:d6:d6:35:48:9c:e2:dc:33:1e:55:0f:89:
9f:15:59:57:fb:02:04:87:0a:93:c2:2d:60:b3:64:
a0:ce:99:3c:68:5f:b1:bb:93:74:77:2e:e5:9b:f6:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F1:4C:71:67:0D:E7:B8:02:96:E2:6E:4C:E4:8D:03:4B:A3:7E:94
X509v3 Authority Key Identifier:
keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c5:44:f4:f5:3f:33:ba:06:7c:2e:bc:2d:12:4d:73:89:40:
0c:b8:b4:62:b1:a8:a7:1c:18:67:72:9d:76:f8:c7:45:38:20:
08:b1:b6:60:c4:23:53:09:95:9f:0e:1e:12:25:94:ff:cf:bf:
6f:88:ad:78:5b:56:05:f3:fe:eb:8d:7a:76:48:fe:43:e2:ae:
d1:91:50:18:05:6e:fb:d1:a8:75:07:ef:48:fa:05:d1:50:81:
4d:5e:73:c5:b8:b6:6e:9a:a7:63:a3:f4:51:df:ab:35:f2:0a:
c1:73:fe:25:e4:50:3f:51:6c:22:4a:10:36:39:64:92:c6:4f:
93:48:9b:50:b7:a3:69:f1:43:67:0f:e7:7a:c7:fa:20:de:e6:
76:80:70:42:fb:06:72:da:b3:14:27:19:07:ae:00:d4:f2:c3:
39:08:f0:7a:63:03:bb:74:75:59:65:99:4e:fb:26:9d:fa:34:
b6:af:f6:54:45:7c:bd:52:30:96:70:de:c9:6c:90:b0:84:bb:
6a:46:c7:d3:1f:1d:04:69:af:07:b2:d8:56:ac:5f:35:43:b1:
06:71:7e:da:8a:af:81:5c:80:43:49:b8:73:3e:6f:a5:58:5c:
11:08:97:db:3c:1d:2a:79:d7:4d:6b:1f:75:a0:01:07:78:c3:
69:e3:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:38:59 2026 by rpki-client