Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File: gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier: X3arIYsU2M+dH4ZsG4K57GjcVTx7pPyckLu5cuWmS20=
Subject key identifier: 6B:36:D7:93:73:D4:F4:B8:E8:C6:D0:E4:AD:47:72:AE:34:52:C6:AD
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer: /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial: 019CABA1EA9B94E7C9DEF2DACBCE1EEAA12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number: 098D
Signing time: Sun 01 Mar 2026 23:00:41 +0000
Manifest this update: Sun 01 Mar 2026 23:00:41 +0000
Manifest next update: Mon 02 Mar 2026 23:00:41 +0000
Files and hashes: 1: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: MaNfwMH3gZRBj8NctxpJUhrdKsAY9O+2LOTlY++74OU=)
2: qG_zm-_87cXSw0_LhJiatFGZjco.roa (hash: 845weVVX02y1u2NuqLxhj3PGe6p4QBfV9nv+gr8bpog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ea:9b:94:e7:c9:de:f2:da:cb:ce:1e:ea:a1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Validity
Not Before: Mar 1 23:00:41 2026 GMT
Not After : Mar 2 23:00:41 2026 GMT
Subject: CN=6b36d79373d4f4b8e8c6d0e4ad4772ae3452c6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:65:a4:d1:44:61:d5:9e:f7:a5:2d:cc:6a:
00:b9:b9:90:5f:8f:c6:61:20:b8:68:d8:c2:8f:4d:
15:1f:fb:9d:90:61:c4:f3:c7:d1:e8:33:f1:30:8f:
cf:1b:4d:18:71:e4:01:a6:8b:d4:5c:f3:ee:dc:fc:
7c:26:cf:58:2a:38:ea:dd:94:84:95:60:8f:a8:62:
67:bf:bc:7a:bc:f3:3f:17:92:b3:86:50:f6:3d:55:
6a:ea:46:f7:1c:a1:81:fa:e0:c8:17:26:7a:cc:44:
75:60:3e:6e:64:31:7b:4e:96:bd:e5:48:74:0e:83:
01:b0:dc:0e:b2:ea:73:1a:13:1d:28:39:a5:cc:2d:
09:cc:7a:ce:a1:ad:c5:8a:3e:cf:30:00:07:51:22:
b2:81:35:ad:2d:53:c3:f4:57:83:2a:b5:0f:0f:8a:
16:44:8f:18:11:92:3c:7b:18:56:2e:71:c6:ac:56:
de:c1:d2:83:57:ef:6d:79:29:53:06:df:ee:97:a7:
6a:99:b4:67:3c:fc:96:e9:b4:bd:48:62:8f:e6:e0:
17:d5:95:fe:e9:68:dd:c8:63:60:3f:09:22:e5:83:
57:e6:72:31:07:eb:7b:45:fe:f8:58:3b:7b:4d:53:
38:f7:8c:58:07:01:f3:04:dc:48:1d:f6:61:84:28:
83:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:36:D7:93:73:D4:F4:B8:E8:C6:D0:E4:AD:47:72:AE:34:52:C6:AD
X509v3 Authority Key Identifier:
keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3c:dd:ad:71:85:a6:10:6a:98:fd:ca:26:ee:aa:d0:8e:5b:
ed:8d:0a:32:ff:7c:ab:12:ad:76:a8:10:6b:19:04:7c:71:19:
de:d8:55:46:22:9b:ff:5c:ea:b8:d8:d0:81:1c:0c:c4:88:b9:
00:d6:c9:a5:f8:04:19:f9:3a:f4:0f:61:93:ff:3b:a3:02:5c:
c1:9b:52:27:eb:17:a8:ad:66:d0:69:e8:14:ba:5e:6b:f1:5f:
a9:85:58:83:a8:fe:99:fd:1c:52:b1:43:47:63:7a:41:9d:a6:
ab:65:1c:35:0d:f0:f8:2b:39:e1:21:8a:98:96:a9:18:0e:cd:
63:1f:7b:2b:6a:eb:ef:f0:3f:a7:4e:cb:34:8f:91:52:58:c9:
75:4f:6b:63:22:94:7d:8a:f4:43:13:4c:89:a8:74:3b:fd:df:
f6:06:eb:e4:bb:3e:f6:3e:56:71:4c:d0:ee:a7:6e:f3:71:bd:
5d:90:24:67:01:46:15:8b:a0:e3:98:62:be:9c:9d:da:97:80:
73:a3:d5:ce:2d:9c:cc:07:7b:3d:46:b8:41:e8:51:41:2f:b5:
57:5f:fd:ba:22:b7:da:31:8e:7a:a1:a4:eb:40:95:04:2e:c2:
10:7b:14:20:99:d0:96:a7:15:16:d1:d7:f0:20:13:30:17:e1:
dd:fb:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:34 2026 by rpki-client