Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: rd4vMUQWbJKlmHS9qNARpCztMLOJoMZAcip73NxX1PA=
Subject key identifier: 11:86:DC:B0:61:B3:F7:52:1C:1B:CB:80:9B:61:22:E9:50:C1:32:91
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 019CAB3453807A249F654151AFDE61DB9391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:58 +0000
Manifest this update: Sun 01 Mar 2026 21:00:58 +0000
Manifest next update: Mon 02 Mar 2026 21:00:58 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: oyN3GSLIFu9lvvMl7nfOdXHyXd6pK3sNsopgWzJ3FEg=)
2: I5h_-n6q20lsOaRJZ1RaRmHMf8U.roa (hash: zer7O7oW6HZhNmqlr1aPUcsYOzbLm/tHkE6ZSX4C2TU=)
3: QiybHyZYXADSID7uWkeeef6I9FM.roa (hash: nffxcFthp0YuUEIfa7lK0CY+6Pk1YEGmytbZGeUzOYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:53:80:7a:24:9f:65:41:51:af:de:61:db:93:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Mar 1 21:00:58 2026 GMT
Not After : Mar 2 21:00:58 2026 GMT
Subject: CN=1186dcb061b3f7521c1bcb809b6122e950c13291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:43:53:67:6a:54:77:f2:ff:bf:07:6e:10:77:
2f:53:0a:dc:17:d6:23:9a:b3:f6:8e:22:21:5a:5d:
41:3e:7d:b3:b8:e5:c8:ca:c0:1c:5c:3e:4c:e4:4c:
f0:e3:41:0f:8d:f3:1e:13:d6:ef:ec:33:b9:3a:03:
f1:03:26:6a:c1:88:4a:06:c8:a6:d9:47:f4:78:dd:
ac:3f:1b:4f:4b:cc:72:9c:94:fb:6a:f0:ca:96:94:
21:55:f5:1a:f0:3f:f0:58:38:75:d7:9f:89:3a:6a:
3b:ab:08:26:89:5a:21:f1:bb:07:a2:6f:88:22:fe:
02:3e:94:92:60:9c:a8:52:d7:33:49:35:fb:59:3e:
9a:b4:fc:40:cd:3b:6d:08:b7:d3:de:c9:11:e2:19:
f9:3a:37:77:a9:cc:7b:80:4c:33:65:46:f2:e0:c4:
ce:b3:2a:41:26:1f:25:52:c8:18:2d:33:44:4b:b4:
9a:9e:61:1a:d8:10:70:80:2f:3a:e9:a8:75:a0:c2:
6f:3c:32:44:21:af:4e:32:c7:84:44:d0:c1:42:9d:
4c:02:b9:ac:f4:be:86:d4:d1:6f:8a:8c:2e:cc:70:
1c:3b:7e:1c:39:af:f3:d9:d2:7d:e8:c0:8f:2b:43:
31:21:6f:eb:4d:43:3e:99:5c:69:b4:5d:0b:da:83:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:86:DC:B0:61:B3:F7:52:1C:1B:CB:80:9B:61:22:E9:50:C1:32:91
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ff:35:4f:d0:3d:70:f7:51:d8:01:5e:25:8b:39:ef:82:83:
e5:82:48:bb:7e:e1:91:ea:71:0a:dd:27:53:4e:b7:74:55:d0:
7b:21:71:45:03:56:25:15:24:6b:52:62:7c:fe:ea:84:c4:ab:
0d:b4:5a:21:f0:28:ed:e9:5d:60:09:12:d6:bb:c6:b6:71:0e:
66:39:7c:a5:f0:9b:06:1e:da:92:2b:90:f3:11:06:61:83:18:
4f:cf:39:c0:57:71:8a:2b:4b:75:3e:4b:a3:ce:d3:30:ff:df:
ed:eb:c0:88:fb:31:70:1b:1c:55:71:dc:68:07:f8:bc:fb:ef:
b7:f8:11:95:c5:67:0b:fa:13:f7:16:99:25:0c:65:93:52:81:
62:cf:32:58:10:57:70:69:20:6e:dc:ed:7b:18:88:43:41:47:
b5:ca:42:f9:8e:cd:39:66:64:39:46:d2:30:c7:16:28:8a:bf:
91:4c:a4:56:6f:c0:65:12:b2:6e:1f:cc:09:c8:c6:fd:a8:cc:
d3:1d:f8:85:fa:19:df:0a:54:12:85:17:a3:f3:a7:ee:9e:5a:
d1:44:13:e5:4a:92:c5:96:cf:05:89:0a:e0:2a:7b:ff:b9:23:
ca:d5:b2:91:35:aa:d4:c3:eb:d6:17:80:9b:38:32:28:b1:3a:
f5:94:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:35 2026 by rpki-client