Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
File: GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json)
Hash identifier: 1WGbEHjEO+yGNC3S+TAvpv+/NCnmshz+ObYYRldV9Wo=
Subject key identifier: 52:8B:08:82:B9:43:18:FB:E0:D8:E0:30:F9:0B:B1:E1:EA:59:CC:46
Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
Certificate issuer: /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Certificate serial: 019CABD9EDEBE4937866E1BAC3A48CE87AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
Manifest number: 1735
Signing time: Mon 02 Mar 2026 00:01:51 +0000
Manifest this update: Mon 02 Mar 2026 00:01:51 +0000
Manifest next update: Tue 03 Mar 2026 00:01:51 +0000
Files and hashes: 1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: JHaELBBFa01GKb9FLbaIz2i7LVV/BQc/NDTfYEQ53Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ed:eb:e4:93:78:66:e1:ba:c3:a4:8c:e8:7a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Validity
Not Before: Mar 2 00:01:51 2026 GMT
Not After : Mar 3 00:01:51 2026 GMT
Subject: CN=528b0882b94318fbe0d8e030f90bb1e1ea59cc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:6f:c0:60:50:01:fb:ac:f5:26:20:69:ae:
d2:af:3d:0e:d1:8e:8e:84:a0:f6:63:c4:64:4e:60:
6f:b8:02:df:15:fc:8b:23:7f:91:b7:09:f3:7d:b9:
0a:d5:f3:cb:7b:e7:b1:b3:3d:d7:36:9e:ed:e2:8d:
1b:9a:9e:f7:35:d2:ad:fc:11:23:30:c6:d6:69:0e:
2b:37:9e:f0:61:24:09:e7:27:e0:96:cb:3d:3b:2e:
95:a9:95:02:5c:05:ee:71:f5:b6:b3:1c:0b:42:ff:
58:52:2d:0c:d3:59:bf:23:e8:bf:d9:89:5f:93:46:
52:3b:ee:e8:36:e5:9d:4f:2f:88:77:cf:12:d3:96:
fe:45:57:90:16:8f:d4:a4:db:76:ff:00:97:7b:65:
be:2d:94:5e:d3:50:ef:1b:13:07:4d:72:30:0a:7e:
6e:bd:40:8a:c7:1a:35:af:2b:1f:ba:81:06:56:ef:
7d:8f:84:10:3c:68:6e:cc:7b:ac:75:b2:8d:0a:93:
8e:ce:4d:f4:a0:59:3d:a9:82:c3:04:11:0c:9d:58:
59:df:69:bd:d6:6d:2b:d9:e5:2b:bd:2d:cc:15:53:
1f:be:2c:17:79:62:b0:ce:60:d7:6a:93:f0:e1:43:
14:24:15:e2:a6:55:09:35:57:fb:46:35:f7:fe:2f:
3d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8B:08:82:B9:43:18:FB:E0:D8:E0:30:F9:0B:B1:E1:EA:59:CC:46
X509v3 Authority Key Identifier:
keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:73:44:3f:b3:19:ae:7b:27:59:b5:9a:fd:fa:35:a7:f9:3b:
68:a6:68:ae:58:c0:ea:68:3f:d2:c4:db:17:83:9b:4f:a7:cd:
7d:34:bd:ac:d2:58:e5:7d:68:cb:9d:a0:bb:37:35:91:51:71:
d2:7a:10:d5:a9:37:58:c8:bd:ae:d7:d1:68:5f:ee:5d:bc:b4:
57:db:ae:ab:e3:e1:d7:70:39:b6:75:e6:7a:ce:f2:df:e1:23:
dd:21:15:47:ae:4a:4c:87:c5:54:b0:7a:a9:0f:91:79:85:1e:
3b:cd:42:86:6f:c3:5c:a3:74:16:77:34:1c:3d:11:a6:15:44:
5d:1c:4b:0c:71:d6:a4:c8:2f:9e:2b:0d:e2:46:ff:49:94:21:
50:de:3f:2b:27:cc:33:5d:a6:01:b5:a6:56:ec:bb:13:44:84:
ac:8b:1e:da:93:eb:d3:ad:f1:7b:f2:bf:60:d4:6a:ac:ef:55:
2e:8d:a9:fa:cf:e5:25:d0:a5:6f:80:b9:6d:2c:fe:2a:94:30:
b0:1c:67:f6:3f:50:65:14:29:33:c3:df:a8:62:d5:5a:78:41:
8c:40:ed:32:62:46:8a:d8:31:d2:88:c7:44:be:fb:c0:dd:1e:
61:28:6b:ec:9c:ad:01:26:e2:ec:46:70:f4:9a:51:a1:3c:ec:
f0:dc:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:46 2026 by rpki-client