Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
File: gRsX62FjiTMhtH5K9_pWsBxfN7U.mft (raw, json)
Hash identifier: yMQhpLWvUA+ehDW3EjvLhAmn9eTBcvJB4EIqDIRpaGw=
Subject key identifier: 24:B0:DB:40:DD:D9:BB:4C:0D:4A:D4:25:59:D7:F3:C2:82:90:61:B1
Authority key identifier: 81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5
Certificate issuer: /CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
Certificate serial: 019CAC4704ABA1B80F7E9F43921A6C1DEDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 02:01:01 +0000
Manifest this update: Mon 02 Mar 2026 02:01:01 +0000
Manifest next update: Tue 03 Mar 2026 02:01:01 +0000
Files and hashes: 1: gRsX62FjiTMhtH5K9_pWsBxfN7U.crl (hash: wy9ACAPLM2ZG4FCYZQ2+KYc8f+Br2pmaaRkCDVNRnXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:04:ab:a1:b8:0f:7e:9f:43:92:1a:6c:1d:ed:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
Validity
Not Before: Mar 2 02:01:01 2026 GMT
Not After : Mar 3 02:01:01 2026 GMT
Subject: CN=24b0db40ddd9bb4c0d4ad42559d7f3c2829061b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:21:f6:66:f1:99:14:5b:57:d7:26:de:ce:
90:28:5b:ba:b6:91:19:cd:cb:68:36:bc:fc:2e:e4:
6f:09:8b:8a:2f:94:7f:82:fc:79:5a:30:b8:d1:b8:
fc:17:05:db:8c:db:65:5e:6c:62:dd:e5:87:e6:96:
00:c2:83:72:f9:76:19:91:83:7a:23:68:73:0b:7f:
1f:e5:89:46:ea:2f:d8:23:b5:36:5a:c3:0a:51:2a:
d0:8c:ec:73:51:30:0e:e2:2e:09:ee:d7:56:7c:9a:
a2:ee:2d:56:a8:fd:66:77:e1:85:f5:5a:ff:18:83:
00:f7:df:ee:c9:79:c8:8b:de:eb:0a:d9:d8:fb:3e:
50:34:73:99:3d:e3:30:ba:37:8a:83:f1:a3:2c:70:
39:26:d4:e7:b3:1d:37:d7:72:5f:ae:57:11:bd:e3:
31:df:ae:9a:75:63:1b:59:69:7f:e1:d2:1b:6e:ce:
35:2b:70:78:db:7f:34:94:96:d5:bd:c0:8e:f9:2c:
03:61:14:c1:77:34:94:19:39:3a:09:e4:3f:15:b5:
c8:f0:9c:61:a1:c8:3d:03:88:d1:ab:2f:2d:ff:b4:
d9:9d:66:be:f2:da:6f:91:72:96:5c:10:1d:9a:3a:
b7:ac:03:e5:b5:c6:07:02:f6:a1:b1:ba:b6:67:c0:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B0:DB:40:DD:D9:BB:4C:0D:4A:D4:25:59:D7:F3:C2:82:90:61:B1
X509v3 Authority Key Identifier:
keyid:81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a0:65:14:39:87:16:ac:b4:f6:c6:74:7f:c1:05:d3:23:5e:
2f:37:fe:d5:96:0a:75:98:bc:72:27:a8:aa:1a:f7:ab:c4:54:
01:89:4d:83:c5:9e:a1:be:93:dc:05:0f:b0:47:94:c3:3a:0e:
56:c7:05:de:4a:bf:40:f3:10:21:92:0f:c7:2d:1e:d9:a1:2e:
41:18:d5:ce:71:44:02:ee:4a:91:52:47:88:f4:39:33:cd:cb:
dd:6b:2f:c9:d8:d3:f1:f9:57:b9:ba:44:4a:12:27:09:7e:55:
80:19:c8:f5:ff:43:bc:30:12:ab:f4:8b:40:a0:9f:00:b7:39:
da:c6:55:55:33:5f:ff:ca:1c:10:49:c2:ae:fb:ad:fd:31:a9:
23:10:b5:51:b2:5e:a5:6a:15:12:30:c1:c8:69:e6:d4:fd:a4:
72:da:f3:21:2f:d7:05:fa:0a:75:3d:b5:1c:f0:af:56:20:0e:
81:56:24:5c:db:6b:f2:3e:0e:ae:80:13:9b:01:f2:c2:7d:13:
51:3a:35:93:31:ce:bb:3c:37:6d:ed:cf:3b:46:7e:a9:ea:3e:
01:fe:33:9a:00:0e:3d:00:2c:39:e7:f7:73:6f:6d:c2:1d:3c:
f4:7f:95:a9:91:7e:67:65:6d:21:3b:2d:f5:6c:64:c8:5b:b3:
7f:ec:92:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:34 2026 by rpki-client