Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File: GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier: di6SeKFjeL/P0lrzkpgVprEXKgfNAnDoh4xjX+MFPKI=
Subject key identifier: 2F:66:85:B0:BE:4E:57:F0:A0:5B:CA:A7:F5:21:FA:8C:C2:0D:1A:65
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer: /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial: 019CAA2169683286E522B568FEE6CE788622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number: 1584
Signing time: Sun 01 Mar 2026 16:00:42 +0000
Manifest this update: Sun 01 Mar 2026 16:00:42 +0000
Manifest next update: Mon 02 Mar 2026 16:00:42 +0000
Files and hashes: 1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: hoOoBKq/LhYIMijHy+tno+Mlqv9mINT8rCzEydU55KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:69:68:32:86:e5:22:b5:68:fe:e6:ce:78:86:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Validity
Not Before: Mar 1 16:00:42 2026 GMT
Not After : Mar 2 16:00:42 2026 GMT
Subject: CN=2f6685b0be4e57f0a05bcaa7f521fa8cc20d1a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:ac:ee:7f:a3:dd:c0:db:51:b9:78:54:15:
0d:a5:2a:2c:f4:b1:1d:62:f6:b6:80:66:6f:70:a4:
b2:65:3c:84:31:41:3e:20:c9:08:16:2e:c1:d6:29:
16:c0:05:9b:4a:60:c0:a8:ce:cc:01:5d:c9:41:b1:
41:87:2a:e5:11:48:ab:23:95:fb:8d:1a:ed:f1:8d:
07:27:cf:f0:a4:58:bb:d3:c9:41:20:e1:39:55:51:
2a:3d:be:29:01:35:d0:d0:9f:bd:32:f3:ab:5c:1b:
48:31:d8:ba:28:f5:a6:f1:86:6c:5d:69:76:bd:04:
27:13:e4:ac:61:14:1c:f8:3b:8f:17:53:cd:03:c0:
3c:b4:b6:05:4c:05:d3:f0:13:dd:50:15:6d:61:ff:
93:f8:a9:92:bd:7a:30:41:f3:b7:b0:c9:9a:e4:be:
b8:d3:be:dc:20:5c:c4:a4:8b:4a:e2:c0:d5:ed:08:
0b:40:59:11:1d:8a:16:7d:07:c5:32:75:8b:35:17:
ca:48:67:70:16:35:21:55:6c:a0:33:07:f0:fd:a5:
c3:c1:32:0c:bd:89:5f:ed:76:e9:8b:56:fe:e5:f5:
22:f8:82:fb:78:83:e6:9c:24:13:74:94:12:4c:dd:
74:05:de:f0:9d:21:53:9f:2a:24:d3:dc:50:17:1c:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:66:85:B0:BE:4E:57:F0:A0:5B:CA:A7:F5:21:FA:8C:C2:0D:1A:65
X509v3 Authority Key Identifier:
keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:48:f1:79:bd:db:74:c4:5b:d1:39:03:b0:86:56:8f:62:6c:
8b:3d:2a:c3:c8:cb:09:10:7c:c4:7a:56:4c:4d:bf:5c:7f:f9:
25:e1:ae:f9:3f:3b:a2:a9:29:71:f3:8f:26:a7:57:f3:a2:3e:
dd:39:d1:49:0f:38:44:bd:79:cb:fa:6a:f0:43:b5:55:32:89:
54:99:47:ee:b6:27:99:b9:ba:29:fa:00:a8:d9:12:87:b4:a0:
c9:0d:06:e8:8b:56:71:89:5d:80:99:76:16:31:44:5c:90:99:
66:4b:da:29:74:3a:c1:14:8e:37:de:39:13:80:2e:2e:d8:95:
33:71:82:35:32:40:36:83:38:53:7a:8b:de:f5:d7:cf:de:fa:
3b:24:d3:a4:74:5b:9c:91:c4:3a:e5:a1:8f:70:44:7b:c5:01:
a0:e4:42:0e:10:92:76:bb:7c:94:66:47:30:cf:8c:63:8e:bc:
2e:c1:47:d8:d0:52:5c:bb:a0:7b:6a:5c:99:90:42:3c:4d:a4:
00:bf:c8:9d:89:c6:7f:3f:c3:65:a4:95:f9:f2:88:8c:cd:05:
d3:da:87:ec:75:41:fa:3c:4e:5a:83:b7:ec:69:99:13:3c:67:
b6:ad:82:99:2f:9f:39:7a:7c:32:90:b1:9b:ec:24:a4:13:cf:
33:7f:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:19 2026 by rpki-client