Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
File: GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json)
Hash identifier: RDG6wPIRBIJDKNTYJWSBJlcng7I7mi8SpVCNfwVxFDQ=
Subject key identifier: 35:53:78:41:A4:7B:9C:D9:BD:31:B2:27:8D:C7:A0:89:2B:C5:CB:DC
Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
Certificate issuer: /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Certificate serial: 019CABD8F84B15E19E9F05CEBB6017CCF23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
Manifest number: 0FA4
Signing time: Mon 02 Mar 2026 00:00:49 +0000
Manifest this update: Mon 02 Mar 2026 00:00:49 +0000
Manifest next update: Tue 03 Mar 2026 00:00:49 +0000
Files and hashes: 1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: knuFoEse1MCBjSNwgQdJ+hQDp1/CSEzL/VPROYx5M2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f8:4b:15:e1:9e:9f:05:ce:bb:60:17:cc:f2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Validity
Not Before: Mar 2 00:00:49 2026 GMT
Not After : Mar 3 00:00:49 2026 GMT
Subject: CN=35537841a47b9cd9bd31b2278dc7a0892bc5cbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:78:af:94:2f:1b:d3:11:95:91:46:0f:8a:
67:aa:12:ee:fe:17:0c:8e:ed:17:13:1a:ae:f8:b3:
d0:ff:b3:9a:73:fe:2a:59:a3:78:eb:e6:5c:b9:d2:
ab:f3:7b:35:ae:fd:c6:01:aa:6a:e0:a8:1a:ab:20:
14:40:a8:73:a4:29:d8:f2:1b:f2:21:a3:17:aa:e9:
95:db:07:1d:3a:44:00:7d:7c:ac:b2:98:c9:00:e5:
aa:28:2e:b4:2e:f0:f6:4f:4b:d8:2b:14:c2:cf:8a:
81:11:0b:44:d2:03:1a:1c:be:d6:1d:12:a0:8f:6f:
b0:06:a6:fc:e7:e1:12:e6:5a:cd:b0:2b:ea:65:55:
a9:72:4a:03:81:f7:b9:c6:1f:d9:2d:16:ca:f2:02:
f1:ef:6d:30:1a:9a:04:4c:b6:e4:ca:52:1c:1a:24:
ae:a2:5e:95:70:84:a9:1c:a4:0b:83:b5:c0:00:f9:
d8:82:a8:0e:48:62:4c:c2:44:94:1d:84:25:c8:a4:
b2:71:14:a2:81:81:a3:59:88:5e:1c:ec:83:cf:1d:
d1:85:bb:1b:d5:9d:e2:d6:29:59:6a:91:b4:52:f7:
20:f2:6e:2b:1b:91:e4:78:75:24:42:e7:31:a5:ed:
4e:b5:80:fa:c5:bc:6c:99:f5:fa:17:5c:98:60:bc:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:53:78:41:A4:7B:9C:D9:BD:31:B2:27:8D:C7:A0:89:2B:C5:CB:DC
X509v3 Authority Key Identifier:
keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:be:95:bb:23:3c:cf:ec:f7:b9:98:88:04:c8:0d:fa:61:d3:
39:e2:07:ea:94:05:c5:fe:53:4e:e4:91:bd:9c:ac:e3:51:7e:
5c:ac:28:e3:98:77:64:f9:fd:91:86:35:ef:42:af:38:b7:57:
07:61:0d:07:37:ec:55:ed:e3:af:87:89:60:0c:12:46:4e:e9:
da:2d:7d:3b:22:b5:d8:ed:cf:f1:b3:d9:78:0a:3b:e1:ba:65:
e8:61:fc:92:02:22:2c:d5:8a:37:16:8f:6b:f9:d7:bf:bb:0d:
0f:a3:b6:d8:e6:f1:a4:85:36:7a:72:8c:e7:4a:27:2d:18:7e:
d9:d9:40:58:49:9e:e6:37:5e:75:6a:89:68:1b:f6:c1:36:44:
9d:3f:40:29:ab:7c:a2:39:de:16:88:a5:db:ab:90:e2:41:a1:
82:fd:f8:39:3a:65:14:a5:e6:38:e4:84:b3:4d:06:ba:c6:ed:
d7:9c:37:4a:b9:f7:6c:07:02:3d:52:5a:99:88:da:8e:e7:1f:
0d:a3:3b:1e:e8:10:d4:b2:fc:50:87:ea:62:a6:53:e2:2d:f5:
e6:d7:2e:bc:28:5a:49:e6:e0:d6:9e:2e:21:eb:7d:09:b4:3b:
9d:94:b5:76:d0:a5:ec:c2:89:68:2c:97:e7:7b:ce:6e:b3:fe:
03:f6:86:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:14 2026 by rpki-client