Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File: GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier: mohNpa8iAmbjN0vny4JZpEX7eCZDg9SCAyK20VNaoiA=
Subject key identifier: CE:78:84:23:54:11:0E:80:4C:CF:C5:24:8E:9B:8D:4E:55:91:D1:A9
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer: /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial: 019CAA58AC4FD1EEFC75C6EB85F63D457DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number: 157E
Signing time: Sun 01 Mar 2026 17:01:03 +0000
Manifest this update: Sun 01 Mar 2026 17:01:03 +0000
Manifest next update: Mon 02 Mar 2026 17:01:03 +0000
Files and hashes: 1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: qpFMsvRHzNJgfnBjMXhkZd5mqn8cCL/OPiV6F1A8k3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ac:4f:d1:ee:fc:75:c6:eb:85:f6:3d:45:7d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Validity
Not Before: Mar 1 17:01:03 2026 GMT
Not After : Mar 2 17:01:03 2026 GMT
Subject: CN=ce78842354110e804ccfc5248e9b8d4e5591d1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:98:ed:98:39:dc:58:d8:d0:c0:93:2d:a9:
67:1c:f1:2c:86:bc:08:02:8c:d9:1f:0c:f5:13:a8:
a5:74:3c:b5:f6:56:b3:d3:97:cc:b7:2b:bd:26:34:
e6:4a:9c:0a:26:7a:4f:d6:78:90:0a:cd:25:23:c4:
86:6b:fc:36:df:07:36:6b:11:ad:f8:5d:01:7f:d8:
85:18:2f:a6:46:48:9c:9b:eb:c2:50:13:c9:22:18:
c9:b6:2f:95:21:84:72:26:c0:23:55:cd:42:a9:4f:
dc:90:e6:0f:27:3f:64:ea:e2:e9:c9:e8:80:45:0c:
07:d9:35:fc:d6:68:32:a2:5d:1b:1e:61:3d:6b:1c:
24:8b:ba:09:cd:3a:6a:42:87:cd:5a:e7:40:72:8f:
a9:3b:dd:0b:29:21:1f:7b:f2:79:36:8f:22:fb:cd:
e0:73:80:15:0b:83:32:14:a9:77:1b:71:6c:d0:5f:
59:ea:9c:51:61:99:1a:2b:5d:b5:67:de:fe:83:8a:
b0:c5:ff:1f:c2:24:2a:12:a6:45:50:40:0f:ed:b9:
b3:a5:ac:8b:12:0e:38:d8:72:8f:88:55:23:a8:f7:
a6:b3:db:ac:d4:a7:a8:0e:95:0e:f3:fe:ec:a4:6d:
fa:a5:bc:db:c0:a0:b2:38:d2:ca:af:d8:78:15:5e:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:84:23:54:11:0E:80:4C:CF:C5:24:8E:9B:8D:4E:55:91:D1:A9
X509v3 Authority Key Identifier:
keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ad:02:1e:71:a4:90:34:ff:eb:c9:f4:87:e2:67:34:62:5e:
62:c3:35:4b:ce:b6:34:dd:e9:9d:ae:c8:04:6b:51:ce:0f:6c:
9d:1f:05:eb:72:6f:90:4f:60:c1:1f:1f:ba:90:64:de:89:73:
ed:e5:2a:06:7a:1e:c4:89:33:26:b0:dc:4e:67:33:56:88:1c:
a8:2e:1f:b9:c4:12:b2:54:e6:82:6a:c8:ce:86:db:52:77:eb:
67:b1:4b:49:cd:a1:7e:3d:68:af:46:3b:a9:36:89:f9:8f:b0:
68:14:5c:d9:a7:85:44:13:29:b8:1b:5d:a0:18:01:67:84:5b:
7c:33:68:c2:dc:ce:a6:40:0a:73:f9:5d:fd:7f:2c:be:a4:f2:
65:0c:dc:05:94:dc:1b:00:dc:dc:a1:25:02:04:97:0e:84:04:
2d:ee:34:c3:ee:fb:44:c4:15:8e:e2:2b:8b:8b:f8:b0:ae:57:
b9:6e:62:07:73:91:70:0c:b9:cd:3b:39:ed:4b:fd:fb:a3:d5:
bd:f1:8f:30:3c:c7:be:9a:24:06:ba:27:04:d2:02:a6:e9:67:
85:c9:5b:d7:fd:bc:21:b7:f6:b5:94:c1:64:ec:b7:c5:87:91:
92:fe:1a:a3:02:f3:75:56:25:0d:56:22:23:f1:30:53:f8:ee:
25:ba:cb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:37 2026 by rpki-client