Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier: 055V85bimETj9U94GidyhWGpxulcZVqap9yJ1SFMWPo=
Subject key identifier: 3C:F9:B1:9F:18:80:70:88:AC:E1:27:89:63:B9:7C:4B:82:8F:40:1B
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial: 019CAB6B785545BE742D0630282A5AFF5613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number: 03EB
Signing time: Sun 01 Mar 2026 22:01:12 +0000
Manifest this update: Sun 01 Mar 2026 22:01:12 +0000
Manifest next update: Mon 02 Mar 2026 22:01:12 +0000
Files and hashes: 1: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: pUr1gR+B5wLECaBbjHLa0Rjx7w/MqAUt9rEacegNpEc=)
2: pJgLulMLIKvMMO7AdCTNd61W_Qo.roa (hash: d7x2/EMQahiRCVzVwOaCAyZfFY39+nEtyCz6GzOW0VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:78:55:45:be:74:2d:06:30:28:2a:5a:ff:56:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Validity
Not Before: Mar 1 22:01:12 2026 GMT
Not After : Mar 2 22:01:12 2026 GMT
Subject: CN=3cf9b19f18807088ace1278963b97c4b828f401b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:77:6b:39:d1:c9:2b:40:68:a7:ea:40:fd:
cd:ed:af:c9:af:8c:b5:97:61:f3:59:a1:ce:a9:55:
a4:b8:a8:2e:51:10:e6:c5:7d:89:91:26:b3:84:0c:
20:a4:4c:d3:93:9d:f0:67:14:d3:22:29:e5:ad:3d:
b9:4b:49:d3:2f:c9:67:41:1b:54:37:b4:75:de:7d:
30:b6:16:cc:e1:b7:da:72:56:87:61:1f:7e:f9:17:
47:36:d4:69:c1:70:06:8e:5f:20:b0:89:1a:ca:50:
b4:61:50:9f:5a:9e:8e:e1:a5:00:25:15:b9:ff:41:
04:64:01:9f:ec:b1:a7:73:53:69:da:f8:0e:a6:98:
d5:ef:7f:de:cc:5b:09:19:f9:ed:ab:6b:6e:31:e4:
15:e4:ff:08:a5:e5:35:2c:19:f2:e7:04:52:5d:79:
25:ed:ab:e3:b0:6a:69:0c:fb:d5:af:3d:58:44:51:
bb:99:50:f6:2e:98:c4:31:30:a7:6e:fe:5a:03:fc:
73:4f:64:6f:1c:de:6b:62:2d:44:70:7f:16:7c:80:
4a:cb:89:09:6c:2c:c6:75:b9:a4:f5:c5:b6:63:b1:
5b:b9:e6:12:5e:e9:4f:da:60:2e:02:d3:39:8a:00:
4f:31:d6:e4:ba:11:2f:29:68:f7:16:88:a5:b6:97:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:B1:9F:18:80:70:88:AC:E1:27:89:63:B9:7C:4B:82:8F:40:1B
X509v3 Authority Key Identifier:
keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9a:7d:7e:5c:af:7d:a6:b9:c1:f4:e0:a9:a3:be:06:0a:13:
45:9c:c4:77:dc:92:d2:4d:e5:13:89:c5:66:55:ea:f2:f5:89:
ef:1c:fb:56:20:1f:33:03:aa:0c:4f:21:05:f7:31:3b:de:0f:
e2:06:29:da:1c:fb:d1:e0:e7:36:66:22:94:f5:46:25:53:57:
04:03:7c:f1:5f:58:7f:38:81:b8:80:c4:6f:e7:8c:3d:2a:c2:
59:8c:5d:1e:f4:1e:fd:d1:b1:3b:5e:24:08:e0:51:0e:0d:bb:
42:12:f8:ff:c7:5a:79:45:ed:05:01:9c:e3:3e:55:ab:f6:dd:
3d:de:e2:91:93:ce:e0:70:0e:30:e8:54:2f:9a:aa:e6:66:88:
34:e4:00:db:66:9e:85:57:65:17:d0:f6:db:5a:dd:2e:03:a4:
14:9c:53:cb:11:89:d7:af:23:06:54:db:08:8b:38:d2:35:d9:
39:12:9f:2b:5d:a9:05:ab:39:8c:f1:15:27:b4:6b:99:99:a6:
d9:16:29:d9:f6:8f:91:73:67:cf:8d:55:2b:cd:4e:c5:1d:33:
9a:ad:52:fb:13:15:df:fc:3b:e6:1b:96:21:3a:db:47:05:01:
1e:3b:bb:b1:a4:e4:f5:c8:a7:88:81:ed:a1:91:a9:aa:4c:49:
19:89:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:40 2026 by rpki-client