Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier: 6YiiHs8948ONligAI06cJP8I4fdyNdwp8yESK9M1bUM=
Subject key identifier: FA:92:99:00:6C:43:BB:A9:17:EE:CC:8C:50:2C:A5:73:77:26:BF:AB
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial: 019CA97D692BD6A683AABEAB456FBBF6E522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number: 03EA
Signing time: Sun 01 Mar 2026 13:01:34 +0000
Manifest this update: Sun 01 Mar 2026 13:01:34 +0000
Manifest next update: Mon 02 Mar 2026 13:01:34 +0000
Files and hashes: 1: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: uysM9M/1dqDRzTzaOYl2AolpM4r5HisGBA7TOG+HGbc=)
2: pJgLulMLIKvMMO7AdCTNd61W_Qo.roa (hash: d7x2/EMQahiRCVzVwOaCAyZfFY39+nEtyCz6GzOW0VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:69:2b:d6:a6:83:aa:be:ab:45:6f:bb:f6:e5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Validity
Not Before: Mar 1 13:01:34 2026 GMT
Not After : Mar 2 13:01:34 2026 GMT
Subject: CN=fa9299006c43bba917eecc8c502ca5737726bfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:d7:fa:e8:80:a5:2b:c0:97:76:8f:5f:63:
78:3e:09:9e:3a:d0:95:c8:8a:66:ab:15:f2:c6:e7:
9e:6e:3e:d8:ce:3b:61:f9:29:36:d0:e9:31:91:28:
63:c2:9a:8d:ae:8b:a4:9f:c9:00:5a:5f:fc:66:c6:
ef:2c:7d:42:8f:e9:93:c4:cd:3a:06:9c:d1:76:6f:
89:b6:6f:13:0b:5a:5c:50:58:51:cf:3b:9a:ae:11:
fa:8b:b6:e9:01:95:b5:ab:b8:c6:96:a6:31:c9:2d:
5d:d8:92:9b:e7:79:25:f8:f2:3c:cf:ff:08:ca:45:
a0:d5:fb:ed:8c:30:17:52:eb:d4:d7:1f:43:54:38:
83:53:53:6d:91:fa:56:64:54:41:fb:4f:70:99:a9:
20:f5:72:0c:51:b9:0e:60:f3:33:90:c1:c0:75:db:
60:a3:f8:55:b0:c9:87:56:0a:2e:98:23:26:82:cb:
b5:54:7a:83:d5:a9:10:a6:d6:ca:83:13:f3:36:8b:
98:37:fe:72:05:8a:4a:10:12:2b:60:d8:e0:5a:2a:
25:3f:db:96:c6:51:b6:da:0e:57:b0:fd:5c:76:44:
d0:4c:14:10:b6:b6:12:ee:4d:3d:3e:ad:52:d2:b4:
95:86:0b:58:da:d3:cf:8c:98:63:19:0e:b3:8a:0f:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:92:99:00:6C:43:BB:A9:17:EE:CC:8C:50:2C:A5:73:77:26:BF:AB
X509v3 Authority Key Identifier:
keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e6:cb:a0:92:a0:2d:ab:9a:cb:a6:8f:8a:f2:81:04:ab:7b:
52:1b:10:e1:53:3a:e3:a0:99:c7:53:ad:a5:8c:3d:cd:65:2b:
2a:4a:14:56:df:04:f3:64:cd:4d:51:d9:b3:63:b2:3c:f7:61:
22:a2:62:1d:55:0a:88:59:99:7d:4c:e7:ea:73:8f:79:17:dd:
45:60:e7:96:84:ee:26:39:19:dd:f9:5f:5c:3b:84:3b:92:3b:
af:e1:8c:66:9a:4a:33:35:d6:89:22:79:f8:66:70:61:23:a5:
35:d8:e7:e3:72:2b:cc:a7:10:3f:16:67:dc:c5:ab:a9:20:ff:
22:44:84:76:8b:90:6c:d4:99:90:59:ca:a0:44:5a:e6:35:06:
cc:23:96:6f:cc:f6:42:a4:32:d0:41:f0:1b:95:c3:b7:15:d3:
b3:fe:02:60:55:b0:9a:9b:61:6d:cb:44:cf:90:74:73:bc:35:
0b:22:ec:f2:0d:23:78:d7:b0:f5:f8:30:48:27:6e:42:9d:4b:
ed:26:08:06:74:c9:a9:c7:bb:51:b5:2b:9c:c3:c0:81:4e:c8:
8c:75:2c:b4:db:b3:68:ff:35:0f:ab:75:9c:94:2e:b5:de:54:
d5:1f:15:1c:50:d5:84:e0:ef:49:f9:f8:34:76:9a:8e:71:14:
67:64:b2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:34 2026 by rpki-client