Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
File: v3DW_GPRd37tzY9GpVk2F8YxneY.mft (raw, json)
Hash identifier: z6PMiZXF0jycqcIUGOluJ3B+jQqDaUOjbpNdvJgXHFs=
Subject key identifier: 36:6A:EE:33:0A:4A:E6:40:A3:E2:09:8C:35:4C:10:96:6B:F7:56:AB
Authority key identifier: BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
Certificate issuer: /CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Certificate serial: 019CAB340A6511B8DDB3BF63EF2E1BE66D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:40 +0000
Manifest this update: Sun 01 Mar 2026 21:00:40 +0000
Manifest next update: Mon 02 Mar 2026 21:00:40 +0000
Files and hashes: 1: Qy5Nmi3nAZDOhC946zssMGSp1zg.roa (hash: y5SFQREp1nOA/KbiyA7m/8jCP4sF9FhQoIl2/65Own0=)
2: v3DW_GPRd37tzY9GpVk2F8YxneY.crl (hash: x7TAehGiLYwBOfrsvBISuWicpzhyTN678JRcbTKnSBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0a:65:11:b8:dd:b3:bf:63:ef:2e:1b:e6:6d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Validity
Not Before: Mar 1 21:00:40 2026 GMT
Not After : Mar 2 21:00:40 2026 GMT
Subject: CN=366aee330a4ae640a3e2098c354c10966bf756ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:0d:63:98:3f:13:34:d1:19:38:c3:97:d5:
0d:9b:da:63:c0:13:6a:a9:cb:f3:56:00:96:87:19:
74:c6:aa:d7:8c:dd:1e:0a:ff:d4:c2:6f:3c:d2:17:
82:dd:53:c5:fe:aa:4f:b6:0e:00:8a:4c:51:f1:d9:
37:a1:b1:ad:60:34:38:a5:a5:c5:0f:2a:bc:70:42:
42:a8:d6:50:de:bb:01:e5:fb:e4:bb:23:4b:d5:63:
18:33:9b:8c:ac:cd:21:a5:f4:73:d4:1a:ca:bd:f7:
50:56:70:69:32:94:47:e1:10:98:e6:ae:07:af:49:
c5:c3:6d:72:a3:95:4c:75:81:dd:66:f7:f6:0e:02:
4a:f0:13:1a:c9:f1:bd:d6:37:b0:0b:94:d5:7e:e6:
4c:d8:66:59:31:49:4f:2b:0a:f8:cc:3b:ef:ba:ca:
41:e9:f3:6f:b7:f2:cc:38:5f:07:23:57:83:20:5c:
cf:f0:66:a2:8e:e8:1e:c7:e2:8d:bc:05:66:f7:28:
a8:0d:a8:9a:b2:0a:f4:27:e4:6f:ae:48:c1:5d:13:
1a:8c:f7:e4:36:d3:0b:dd:07:f7:4a:37:5c:35:6d:
fe:56:37:1f:2d:f5:59:75:49:eb:49:08:e2:82:76:
cf:9b:90:99:9e:6a:f4:9c:51:b4:bc:af:3d:ca:4d:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6A:EE:33:0A:4A:E6:40:A3:E2:09:8C:35:4C:10:96:6B:F7:56:AB
X509v3 Authority Key Identifier:
keyid:BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:03:62:4b:bd:9d:63:8d:c5:df:2d:25:5a:eb:d1:f4:33:8b:
92:0c:bc:1f:2c:3b:6e:46:c9:c5:e5:ff:ae:91:6a:93:a1:a2:
f4:ba:4f:b8:b6:11:30:2c:d0:70:d9:84:24:2c:1d:ce:96:bd:
82:3d:fb:aa:05:1f:dc:20:bd:53:1d:85:54:0e:ec:9a:56:d9:
75:58:05:6e:9f:e6:25:3f:8d:5e:ae:d5:ca:79:17:e6:7a:54:
e2:5c:0f:38:31:43:3c:3f:41:ce:16:ec:db:ce:79:20:20:10:
36:4a:65:48:03:15:b6:18:11:61:d4:95:e8:f4:5f:7b:e0:7c:
c5:76:97:99:44:78:3e:05:1a:a1:eb:af:c0:9b:47:b7:7d:ab:
ff:20:07:ee:78:af:66:75:13:2e:0f:ca:7c:e9:ba:0e:a9:7b:
fc:3a:ec:64:79:40:26:af:45:7f:81:87:74:08:42:5a:49:f6:
4a:da:97:a7:2d:5b:34:1b:b7:ab:14:d4:7a:3b:94:0c:a1:97:
84:fb:fc:56:f4:7e:14:93:bb:76:b3:9b:63:8a:f6:c4:49:cc:
fc:ae:75:94:8c:da:53:12:6d:a5:09:99:1d:c7:8d:2d:4a:32:
a4:c7:b2:b1:10:38:f8:07:a1:fe:60:34:dc:19:45:27:39:ac:
86:55:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:39 2026 by rpki-client