Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
File: Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json)
Hash identifier: MJfD4Uf7KrKy4xmqJnYXNi/Pc8iU5RzsncN9PaIqyLM=
Subject key identifier: 1C:5D:AD:D8:8A:A7:3B:99:12:A3:04:F5:AC:20:0D:86:6D:5E:C9:91
Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
Certificate issuer: /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Certificate serial: 019CAC1041854186109BBBAECAB772610E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 01:01:12 +0000
Manifest this update: Mon 02 Mar 2026 01:01:12 +0000
Manifest next update: Tue 03 Mar 2026 01:01:12 +0000
Files and hashes: 1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: bZxRDuEoT4yYtLXkT06L7fPQYaCtfegI7hg5EdwT+xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:41:85:41:86:10:9b:bb:ae:ca:b7:72:61:0e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Validity
Not Before: Mar 2 01:01:12 2026 GMT
Not After : Mar 3 01:01:12 2026 GMT
Subject: CN=1c5dadd88aa73b9912a304f5ac200d866d5ec991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:02:45:21:65:bc:13:0c:1f:50:f7:3d:89:
22:58:a0:1b:83:1d:54:d2:48:4f:8d:b0:8c:81:c8:
1d:5a:4b:ea:1b:aa:a9:26:f8:31:ad:f6:98:d4:d6:
ce:e0:48:ed:11:ea:ca:f4:b3:7c:0d:16:ed:56:5f:
6f:6f:cd:c5:7c:3a:40:05:bc:82:4c:ad:17:66:43:
9e:3d:77:69:43:f1:2a:24:1a:66:f4:4f:c8:36:54:
b6:69:34:ba:44:d8:1d:a5:ca:e2:d8:8e:af:c0:6b:
6b:af:10:ae:28:04:9c:83:92:19:d4:91:13:58:9e:
b1:2b:c7:bb:f8:9b:66:96:bb:17:c6:9e:e7:97:2e:
e6:3c:b5:46:35:96:7e:39:81:a0:e3:9c:92:ee:12:
36:d3:06:41:bd:41:74:64:88:c9:80:cc:0e:f7:e9:
64:f2:5c:ca:fd:60:52:b1:b0:4d:e8:7f:b9:64:48:
08:34:b4:bc:57:30:8b:94:58:56:3b:2b:b3:e1:b9:
6f:3d:9c:ea:46:24:46:53:c7:3a:d9:ea:93:87:e9:
cb:d6:b8:9b:90:24:eb:53:b8:ec:7f:1f:3c:e6:58:
3d:96:93:39:ca:7b:f8:9b:6a:0f:d7:58:e4:85:00:
ca:e3:c5:0b:bc:ff:9c:06:5d:5c:c7:f1:f4:9b:2e:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5D:AD:D8:8A:A7:3B:99:12:A3:04:F5:AC:20:0D:86:6D:5E:C9:91
X509v3 Authority Key Identifier:
keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:89:b3:47:ee:c4:cf:5b:f1:fe:67:81:48:db:4a:42:b2:1c:
60:24:78:dd:c1:1b:3b:a2:6f:93:af:59:4e:36:3f:da:14:ae:
ae:2d:47:e9:b9:86:be:e2:b2:51:33:16:b0:41:89:65:17:9a:
f6:78:9c:3a:28:c3:da:18:0b:cd:25:e9:fd:c5:9f:7a:70:ac:
d2:28:48:4d:02:20:c9:6c:cc:0f:db:c3:0b:5d:8c:46:d1:93:
6d:74:16:5c:de:cc:05:06:6c:c2:05:ac:fe:84:1d:33:8b:b7:
80:0b:33:7b:67:17:06:0c:3e:77:f2:cb:0b:76:35:d3:08:cf:
92:0a:5d:f6:d1:d1:d3:26:8c:9a:ed:1f:cb:8f:e3:03:1b:66:
79:99:5e:57:19:f5:a8:c4:d0:0c:15:e2:35:43:49:ac:d4:ae:
72:ee:2b:e2:f0:97:e0:5b:50:f0:00:41:8c:c5:cf:bc:1e:3d:
13:a8:c5:14:09:07:37:ab:de:5b:3b:55:04:d8:97:ae:d1:64:
fb:6b:60:ba:00:12:d9:3c:9d:c3:c5:81:c0:ae:74:28:09:cc:
3b:9c:ae:a0:43:e1:1a:23:07:94:c1:00:99:58:94:94:74:f3:
e6:33:96:4f:eb:25:df:ed:92:4d:e6:f8:c0:c2:5e:bb:ce:56:
de:35:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:27 2026 by rpki-client