Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier: Xj8o4pK64Jl9l38+9EdijuGD1lQp0uM+3xlX/+QEsvM=
Subject key identifier: 02:25:AD:4E:B7:E7:A8:C5:B3:A1:2E:AB:F6:AE:9D:FA:55:AC:57:55
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial: 019D98F4986F7AB10C8171C22D6788F6EB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number: 1851
Signing time: Fri 17 Apr 2026 01:00:59 +0000
Manifest this update: Fri 17 Apr 2026 01:00:59 +0000
Manifest next update: Sat 18 Apr 2026 01:00:59 +0000
Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: CK5ZiEPwUA7k/VWGwaQD0HCtN27evKjQK46CbhKXZ8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:98:6f:7a:b1:0c:81:71:c2:2d:67:88:f6:eb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Validity
Not Before: Apr 17 01:00:59 2026 GMT
Not After : Apr 18 01:00:59 2026 GMT
Subject: CN=0225ad4eb7e7a8c5b3a12eabf6ae9dfa55ac5755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:35:13:d0:a4:34:43:60:a6:f0:58:61:b2:21:
95:91:76:d5:c9:a1:8f:75:f8:cc:0d:3a:03:46:1a:
dd:ca:37:e6:52:b0:da:be:86:7e:23:86:99:41:a0:
b7:fe:27:6e:70:a4:b8:8d:2b:c5:5a:36:79:cd:8a:
81:1d:44:8c:f7:b5:c0:1e:37:5d:3d:c2:2a:fe:1d:
08:32:a7:21:dc:e3:e6:62:aa:3a:82:6e:41:07:2b:
d4:00:dd:a2:93:29:b3:b8:39:25:ca:e2:db:af:3c:
a0:05:4c:18:44:3c:fa:9c:0a:53:20:40:7d:46:6e:
3b:17:d3:dc:00:67:99:2d:0a:88:52:34:ae:1d:be:
0f:01:51:d4:78:29:20:6f:f1:94:f1:bc:b6:73:fa:
e3:33:14:0a:dc:d7:3d:88:17:e2:74:15:1a:a6:e9:
f6:83:17:13:4e:c2:87:f1:68:35:cf:aa:a4:b7:09:
3f:06:bc:4a:39:22:bb:51:a2:51:a4:a4:6c:27:30:
76:fa:8b:38:3b:f0:b4:e2:df:5e:fa:23:fb:53:2f:
4f:c8:fa:bc:04:8b:b5:60:ba:2f:b2:e0:26:3b:4c:
a4:2d:6f:18:f6:50:24:40:a2:6c:8e:63:fe:49:6e:
99:60:13:7a:e0:d1:9b:ea:c2:59:5b:50:d9:95:8c:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:25:AD:4E:B7:E7:A8:C5:B3:A1:2E:AB:F6:AE:9D:FA:55:AC:57:55
X509v3 Authority Key Identifier:
keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8d:d3:59:fa:eb:98:de:9a:65:3a:2f:f0:bb:60:50:27:d7:
b2:ef:8e:02:9e:79:47:49:8a:2a:4a:c1:86:02:69:88:8f:2e:
0a:43:82:ab:97:f0:bb:7e:bd:fa:a1:78:ae:6f:bf:9a:9e:7a:
5c:1e:05:2a:28:9f:54:30:92:56:8d:0d:1c:f2:d5:a1:3e:80:
65:8f:95:1a:53:37:42:09:cc:76:99:05:93:3c:8b:bc:a0:bb:
64:c6:42:8a:42:34:ac:b6:d7:bb:10:1a:8f:31:e0:4c:e0:20:
35:f4:26:32:79:9d:df:8d:b3:52:e5:8a:18:ec:23:58:a5:7e:
13:cf:d3:05:20:25:13:ff:ad:4d:6e:bc:a6:85:fc:8f:e0:a9:
bb:a1:b2:c6:ad:37:37:f7:86:3e:51:8f:fa:f7:62:f2:f1:51:
48:ac:6b:84:cc:c3:73:53:71:6f:da:34:30:6f:29:34:ab:e1:
06:09:d2:bd:00:5c:4d:de:d2:1f:28:c2:60:41:88:35:18:b1:
a5:21:59:77:6f:3b:04:b9:6d:79:6b:ca:b3:c7:84:43:1b:27:
6a:a1:d2:eb:3e:7b:16:29:84:fc:8d:90:ac:95:31:65:38:35:
2e:60:d6:c9:36:7c:4a:86:d3:ed:82:05:87:30:5a:ba:3b:35:
61:ac:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:47 2026 by rpki-client