Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier: xl0onJ0yj8rIAShr2Fpq3H/obUwB+AKfXoNJILI5x58=
Subject key identifier: EF:1D:2B:34:66:17:6F:A1:76:62:43:94:39:D5:69:2D:49:54:A6:93
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial: 019CAB6BD8712FEF3F800A56DB934CD038C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number: 17D6
Signing time: Sun 01 Mar 2026 22:01:37 +0000
Manifest this update: Sun 01 Mar 2026 22:01:37 +0000
Manifest next update: Mon 02 Mar 2026 22:01:37 +0000
Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: A5CTW+JJq909ijxhTI7//Mm+IagxZK5k2YKyGS3Ohp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d8:71:2f:ef:3f:80:0a:56:db:93:4c:d0:38:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Validity
Not Before: Mar 1 22:01:37 2026 GMT
Not After : Mar 2 22:01:37 2026 GMT
Subject: CN=ef1d2b3466176fa17662439439d5692d4954a693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:2f:ee:48:7f:31:de:22:30:bb:f3:cc:1c:
7a:b8:41:34:50:e2:f3:45:53:fd:0c:d9:52:89:12:
2f:97:09:c8:a5:21:95:cc:03:55:ca:f1:f2:ce:0a:
e3:a4:2c:be:63:02:50:4e:c6:6a:97:27:49:50:ac:
2d:11:9d:49:09:6e:ca:05:8d:36:53:dd:79:8a:5d:
96:05:96:69:9d:6d:f8:0a:b3:6f:83:6a:85:ed:96:
65:e2:a5:67:fe:9b:b1:13:34:01:fd:20:a5:94:87:
c6:01:f3:20:b4:62:59:4f:36:19:88:84:38:e2:d1:
8c:44:3c:cc:d5:f2:0b:12:2f:b9:86:39:1e:d0:79:
60:00:97:a9:0f:87:b1:13:54:f1:b7:b3:5e:c5:cc:
bd:a7:f2:1a:84:0d:6a:0e:b7:96:9a:72:72:f9:1d:
4b:7d:40:eb:db:cf:a5:25:0e:b0:1a:d3:06:9c:56:
c3:45:11:60:b9:c1:d6:54:e9:17:3e:89:89:f8:66:
d8:f6:b7:8b:72:54:20:bb:00:f8:43:38:95:c8:af:
8c:1c:55:0d:e9:ae:6f:b1:fb:0f:fd:6f:2f:6d:51:
c5:de:00:93:67:90:bb:fd:e0:fa:85:aa:69:43:23:
d5:8a:28:0a:1c:8c:17:75:f3:e2:d9:d6:18:97:b4:
3b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1D:2B:34:66:17:6F:A1:76:62:43:94:39:D5:69:2D:49:54:A6:93
X509v3 Authority Key Identifier:
keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:46:75:47:f4:d6:e6:c7:a5:1f:5e:0b:05:1b:ef:01:df:9e:
e5:5e:c4:3b:94:ce:73:be:ea:b1:bf:4c:db:5c:9e:c6:f0:e2:
63:f1:87:fd:8f:c3:91:e2:e9:ec:5e:c1:38:ee:26:01:7b:9b:
e0:0b:28:75:e0:5c:f8:99:38:01:a0:05:49:f2:98:42:f2:1b:
8e:66:41:9d:20:24:9f:3d:c6:62:f3:40:c0:b9:04:5d:9d:0c:
f0:75:50:a4:d4:88:fa:fd:51:2e:43:ed:50:bd:f9:8a:ec:39:
ca:de:3a:84:d6:1f:3f:b7:30:62:fd:6a:d4:d8:ff:6d:a0:41:
8f:65:81:90:15:e9:7e:fd:01:b2:8f:fc:f3:d4:3f:b5:30:09:
4e:51:62:4b:d0:48:1b:9a:22:50:b9:b7:ae:87:99:1d:d2:58:
ee:8e:9f:41:f0:51:dd:f1:e7:15:fc:88:9e:a5:e4:29:ba:e0:
2e:2f:b2:e8:8d:8f:c0:6a:1e:1b:cc:bd:ad:41:7c:9e:75:1c:
f0:62:13:a8:6f:f0:c6:22:c9:c8:00:39:92:62:93:2c:ee:1e:
0a:ea:b8:4c:41:64:69:5d:b0:4c:df:99:b9:58:bf:45:a6:70:
8a:63:18:79:96:1d:2c:01:86:d7:f0:0c:e8:6c:12:28:30:25:
77:a4:54:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:30 2026 by rpki-client