Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier: FOEuZ3C7cVQSBZsVPQ81vINrUDNbxLgShnTwzTB0piQ=
Subject key identifier: 42:F3:A7:90:1A:32:F7:49:0D:11:2D:4C:A4:DC:BC:CB:52:7B:1A:12
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial: 019CA9EB7CAFA698BAA998568CF6D058BAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number: 17D6
Signing time: Sun 01 Mar 2026 15:01:48 +0000
Manifest this update: Sun 01 Mar 2026 15:01:48 +0000
Manifest next update: Mon 02 Mar 2026 15:01:48 +0000
Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: A22bM72olN4xfmpvo5OBKvewM4nftDblbqfN5EyuJcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:7c:af:a6:98:ba:a9:98:56:8c:f6:d0:58:ba:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
Validity
Not Before: Mar 1 15:01:48 2026 GMT
Not After : Mar 2 15:01:48 2026 GMT
Subject: CN=42f3a7901a32f7490d112d4ca4dcbccb527b1a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8a:c3:48:cb:15:bb:d6:38:37:35:b3:d2:be:
df:ae:83:ee:58:51:28:fe:51:ac:76:15:b6:d0:9a:
d0:65:03:86:a1:cd:26:7d:af:3e:d3:f1:bb:5c:3c:
1a:1c:54:90:9d:48:a0:96:2e:d8:68:3d:8e:1e:4c:
0d:42:70:b1:8c:94:42:50:4a:5b:f6:18:3c:91:7a:
a8:a7:5e:a3:d9:0c:31:fc:bf:7d:56:cf:02:05:71:
0c:eb:48:66:ab:66:09:33:74:11:f3:2c:fa:d1:67:
e4:1b:70:86:82:1d:54:19:66:0c:e8:aa:87:50:c0:
7d:b8:9d:49:7c:f2:3c:35:18:52:15:fb:4a:71:33:
b0:a0:a9:de:74:f8:4d:4a:d5:4f:d1:c4:53:bd:f3:
d8:41:0e:52:2f:08:e7:a0:ff:2f:59:ed:df:cb:32:
be:e5:88:62:31:73:b4:0c:f3:fa:37:8b:c0:44:10:
64:b3:5a:a1:50:58:01:82:65:49:4a:17:9e:35:75:
c1:e6:69:e0:33:11:6a:16:9e:69:a5:46:c0:cf:a7:
bb:e8:45:9b:e2:c2:57:a3:e7:ed:04:60:3e:27:f5:
74:68:1d:ab:30:56:ea:e4:2c:e1:a5:5c:1c:99:7c:
95:d1:9a:fc:a6:5d:15:80:58:b6:b0:50:08:27:8d:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F3:A7:90:1A:32:F7:49:0D:11:2D:4C:A4:DC:BC:CB:52:7B:1A:12
X509v3 Authority Key Identifier:
keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:44:0a:09:ad:c3:d3:b1:1a:c5:23:fc:63:49:e6:a6:a2:09:
e4:31:5b:f4:a3:15:be:38:0d:f7:e0:a9:36:11:f0:bd:6b:e0:
59:88:01:f1:3f:87:32:95:0d:e1:5a:14:fd:1e:39:65:2b:57:
a1:2f:b4:dc:99:59:6e:63:a2:14:b0:ff:e4:4b:8a:41:07:e6:
20:1e:92:57:7b:29:57:08:a4:fc:22:b2:20:a1:45:52:c6:97:
6e:ad:6f:b2:46:cc:db:58:f5:44:79:04:4a:3c:a0:74:35:cd:
eb:24:da:f1:09:7a:1f:ef:7f:c0:c6:fa:6b:21:78:f8:d9:70:
c2:d2:b2:dc:f4:8e:c9:61:3a:ca:f1:e2:3d:d8:d6:04:bb:25:
18:e0:1a:19:9b:05:0d:91:e6:90:09:dc:ad:ad:10:0a:ff:4f:
af:ba:85:b1:49:1c:d0:3a:dd:1e:9f:7f:20:5d:1d:11:c1:cb:
a1:93:07:f1:3f:be:f5:9c:20:0a:56:e8:c6:3e:86:58:a8:45:
33:f9:59:e2:24:ec:e2:70:c0:cd:35:ae:39:2e:16:6b:42:55:
7b:5e:40:95:97:6d:14:6c:cb:dd:82:06:6d:79:54:f7:ec:ec:
09:a4:b3:12:3a:79:ea:e1:61:6a:24:ee:72:60:e3:94:b7:ef:
a3:04:23:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:54 2026 by rpki-client