Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
File: gXNntPK_jrMfbhYk7Vbtq6nwITs.mft (raw, json)
Hash identifier: TQsdy1s1Mu0n6QbF5jY7iH/iUe3fGz3+Pnw42dAngdA=
Subject key identifier: B5:4D:39:A6:4D:5B:BB:65:02:49:5D:AF:17:12:4E:D9:2A:C0:A5:18
Authority key identifier: 81:73:67:B4:F2:BF:8E:B3:1F:6E:16:24:ED:56:ED:AB:A9:F0:21:3B
Certificate issuer: /CN=817367b4f2bf8eb31f6e1624ed56edaba9f0213b
Certificate serial: 019D9B507AADCAF371720D67D84EC4D23DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
Manifest number: 0FDD
Signing time: Fri 17 Apr 2026 12:00:35 +0000
Manifest this update: Fri 17 Apr 2026 12:00:35 +0000
Manifest next update: Sat 18 Apr 2026 12:00:35 +0000
Files and hashes: 1: gXNntPK_jrMfbhYk7Vbtq6nwITs.crl (hash: fvURJQtbPNGEAIueyYb2gNkeq16Z8SNtzWi8XntMBr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:7a:ad:ca:f3:71:72:0d:67:d8:4e:c4:d2:3d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817367b4f2bf8eb31f6e1624ed56edaba9f0213b
Validity
Not Before: Apr 17 12:00:35 2026 GMT
Not After : Apr 18 12:00:35 2026 GMT
Subject: CN=b54d39a64d5bbb6502495daf17124ed92ac0a518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:b8:00:17:a7:61:52:27:c2:4e:26:a7:e3:
0c:92:b8:76:4e:6c:3a:88:c3:b7:ed:f8:50:a3:6d:
b5:bd:1d:26:b3:84:b4:d3:1c:f7:78:d1:a8:dd:7d:
b7:72:5d:ce:39:31:c5:c7:0b:90:f9:34:43:ab:5b:
10:ae:d9:90:f4:bb:9e:9c:f6:5d:ee:75:8e:2d:b1:
40:e4:4e:e4:85:e2:be:47:de:c9:93:9f:33:da:61:
3e:57:98:25:73:68:91:6e:c6:ba:ee:9b:5f:2a:50:
a7:e0:0f:33:f1:d4:3b:68:0b:37:d2:08:8a:ac:07:
28:0e:0f:32:fc:7a:ca:02:fe:02:ad:ab:38:2d:b6:
d3:42:39:51:e2:ad:a9:5d:f5:3f:cb:9e:ab:8b:b6:
6a:bd:30:d6:09:c9:20:f4:17:fa:7b:4f:f5:c9:1e:
f4:4b:9c:fc:e6:4c:70:fb:26:85:a5:f7:06:69:d1:
c0:4c:0a:d1:0a:b2:dd:f7:bd:d5:42:55:d4:f0:00:
70:d4:41:7c:2f:08:cc:d9:de:30:7e:aa:5a:9e:83:
e6:b3:e2:c1:1d:77:e2:b9:c8:3c:ed:4c:39:8f:8f:
ff:2f:34:a9:64:61:30:25:e4:b0:a6:44:3e:81:25:
72:b1:04:a4:cf:0b:2f:28:75:cd:a6:fc:bc:fa:20:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4D:39:A6:4D:5B:BB:65:02:49:5D:AF:17:12:4E:D9:2A:C0:A5:18
X509v3 Authority Key Identifier:
keyid:81:73:67:B4:F2:BF:8E:B3:1F:6E:16:24:ED:56:ED:AB:A9:F0:21:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXNntPK_jrMfbhYk7Vbtq6nwITs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9575d0-9c7c-4571-863a-555130a57041/1/gXNntPK_jrMfbhYk7Vbtq6nwITs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:62:86:88:a0:84:ed:e2:59:74:90:6f:0a:25:dc:3a:9f:77:
18:0f:40:89:3e:e6:2a:80:fe:00:21:39:32:dc:76:22:aa:68:
47:b3:41:52:13:a6:47:79:67:55:16:cc:5e:03:a5:ef:ea:2f:
39:91:56:17:9f:c6:c5:c6:fa:2e:8b:07:dd:59:b3:cc:d1:41:
69:07:c1:88:1e:48:d6:83:19:7c:2d:07:0a:f1:f2:6a:60:71:
e4:dc:2e:7d:18:53:b5:30:21:cb:23:03:46:24:bd:c2:62:5f:
8c:55:87:86:7d:66:6b:fb:b0:0e:12:d8:c9:ab:7d:f9:ea:94:
ba:58:e7:fe:45:06:6d:24:09:21:8e:8e:36:4d:7b:ef:8c:b5:
0b:99:d3:fa:94:df:f8:8c:3e:9a:ed:52:ff:de:c8:7f:b1:f7:
b3:25:59:a3:9a:00:54:cc:37:71:b1:47:e6:80:08:1c:6c:8b:
1d:b4:c9:1e:40:58:75:91:a2:87:9a:3c:32:31:d3:82:60:11:
33:15:ed:25:10:aa:77:31:82:a0:14:c2:ca:04:1f:a8:25:5b:
1e:22:c0:cf:37:c1:a9:f5:2a:47:eb:04:c1:d2:25:c8:13:df:
e4:cb:2f:9d:a4:87:44:35:75:5a:cb:49:5b:f5:52:91:61:78:
4a:44:86:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:10 2026 by rpki-client