Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
File: GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft (raw, json)
Hash identifier: fI03DWidCEh7PAxs6fSc8FxVXW+ePZbRgTRKltRm5+Q=
Subject key identifier: E4:1B:BB:E8:2A:71:13:C3:EB:E3:A3:A4:05:49:2D:D0:59:24:60:BF
Authority key identifier: 19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
Certificate issuer: /CN=196628617c00e8dff20ca6699313af79fad0afc6
Certificate serial: 019D3A5479E6300D864E6F5FE77A93B6952C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
Manifest number: 1155
Signing time: Sun 29 Mar 2026 16:01:47 +0000
Manifest this update: Sun 29 Mar 2026 16:01:47 +0000
Manifest next update: Mon 30 Mar 2026 16:01:47 +0000
Files and hashes: 1: GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl (hash: JQH2nbW33iH2xpSntIs9hpsgNvDK6gMWXhQIX9Ay0Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:79:e6:30:0d:86:4e:6f:5f:e7:7a:93:b6:95:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196628617c00e8dff20ca6699313af79fad0afc6
Validity
Not Before: Mar 29 16:01:47 2026 GMT
Not After : Mar 30 16:01:47 2026 GMT
Subject: CN=e41bbbe82a7113c3ebe3a3a405492dd0592460bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:49:a4:00:e4:92:95:5f:2b:bf:bc:4d:94:
fb:66:17:32:b6:96:5e:91:49:cf:f6:9b:e3:0f:89:
7c:b9:33:42:21:50:1d:2c:c8:f3:1d:f3:9b:83:7f:
27:de:e7:37:a9:e6:51:66:75:ec:38:2c:f2:72:fc:
d7:e6:a3:cd:b3:31:94:b3:32:f7:5d:8b:11:6b:f3:
6a:60:8c:16:59:bb:f6:7d:68:6d:0e:36:75:9b:c4:
6a:04:65:26:1c:52:4c:c8:1a:aa:54:0b:5d:9c:5a:
fd:76:95:00:47:dd:7d:4e:40:a2:75:5a:5d:66:bd:
71:19:7d:d4:57:01:00:f8:7d:9d:7e:0b:86:0c:12:
28:07:52:7c:46:31:89:ae:e2:af:66:96:84:5a:32:
cf:94:ba:f2:71:d5:f4:e7:8e:bf:2e:9f:40:e7:b4:
95:25:ec:a9:15:c3:ad:bb:d8:f1:04:57:ef:9e:3b:
ca:87:39:a1:d7:ba:2c:c9:a7:65:e9:fe:f4:04:f0:
3b:b9:3b:2f:cd:1e:63:d0:f1:cb:4d:14:4d:3a:fb:
60:b2:d0:14:bb:6b:34:77:de:4a:9a:6b:09:88:ff:
e9:b4:c5:33:88:01:f9:37:5a:0b:1e:93:a2:eb:69:
50:f6:61:f5:85:4c:e5:15:02:a5:66:4e:a9:f0:c9:
96:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1B:BB:E8:2A:71:13:C3:EB:E3:A3:A4:05:49:2D:D0:59:24:60:BF
X509v3 Authority Key Identifier:
keyid:19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:45:26:bd:7f:54:0e:fb:2c:3d:19:ea:00:8b:48:19:16:84:
47:32:78:6c:53:66:a5:de:66:c5:f0:69:d6:bb:d1:69:84:c2:
0c:59:cd:19:68:24:bf:ad:ca:1e:2a:5e:b5:89:18:be:3a:1e:
59:3e:c0:ca:4f:bd:06:e2:be:48:19:34:96:fb:c4:66:40:63:
6b:e0:49:4e:56:b9:ed:cd:9a:fc:e8:71:df:97:e1:81:f8:0d:
ad:74:00:e1:77:d1:f6:32:35:be:2f:98:ae:25:32:ea:92:c9:
67:1e:96:1c:51:4f:0f:a6:3d:56:08:58:d9:8d:6d:4a:f2:b1:
97:c6:00:c7:76:8c:9e:32:1d:ae:8b:71:6f:f6:a9:61:43:1b:
a6:6e:86:3c:b1:ea:c2:b2:29:7b:f4:2b:b9:e5:85:12:92:c7:
90:d9:78:fe:02:66:d3:cc:b0:6d:e9:ed:4b:54:87:15:b4:0d:
ae:9f:89:5a:21:4a:67:6e:4a:36:cc:de:46:3c:4e:66:88:63:
38:e4:9b:35:6c:d2:eb:bc:3c:b8:7f:d3:e7:8b:dd:4c:a9:44:
56:5e:29:07:ef:49:1a:d8:b1:ce:1f:3d:34:1d:2f:58:88:bd:
f5:9d:26:d8:4a:b5:6a:ed:27:c1:2e:52:0e:10:00:3d:bd:8a:
13:d2:99:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:23:16 2026 by rpki-client