Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
File: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft (raw, json)
Hash identifier: wQ8rgZPMUkjFrYXRfGTmKvg2/7b0bXYpE5nPjR0joFI=
Subject key identifier: E6:77:37:B2:7C:13:3E:74:30:2D:EB:D5:0F:2B:D0:63:62:62:CE:B7
Authority key identifier: 1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
Certificate issuer: /CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Certificate serial: 019CAC4776586E9376C2A500CDD7C48F553A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
Manifest number: 082A
Signing time: Mon 02 Mar 2026 02:01:30 +0000
Manifest this update: Mon 02 Mar 2026 02:01:30 +0000
Manifest next update: Tue 03 Mar 2026 02:01:30 +0000
Files and hashes: 1: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl (hash: wcSHvoL/DJjga/tz2JunEtvyOHbV28B6DpguAyHAotU=)
2: PRWWZTPfSbsdOcFDzXqI07gWKnM.roa (hash: o3ezVQcMSQ90jhxByB5K6ib9QZEeV8XrQMqvctluruM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:76:58:6e:93:76:c2:a5:00:cd:d7:c4:8f:55:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Validity
Not Before: Mar 2 02:01:30 2026 GMT
Not After : Mar 3 02:01:30 2026 GMT
Subject: CN=e67737b27c133e74302debd50f2bd0636262ceb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:32:2d:23:8e:4c:52:45:f8:1b:c2:d1:2c:
a5:94:27:9f:50:21:31:21:fa:10:06:0a:65:52:b6:
c7:df:ad:04:31:76:74:8f:b9:82:c0:7b:bb:74:d8:
06:a7:87:3e:f0:dc:1f:d4:a1:2a:7d:00:b2:35:35:
80:da:37:31:40:e0:e2:4c:a9:8a:44:5e:c4:a2:12:
da:a4:40:f5:8d:55:54:a7:ed:c9:6f:a3:d2:c2:f6:
37:ca:c9:0b:bb:f0:de:61:94:13:1e:aa:11:76:56:
6b:d3:c9:50:16:0e:cd:48:b8:e7:d5:81:97:90:9c:
fb:3b:61:12:54:55:20:fd:98:a3:0c:60:2a:60:20:
83:a9:00:d6:68:f4:dc:09:ff:bf:a5:bd:29:46:07:
57:f8:8a:7e:7e:44:c9:d7:b8:22:33:4b:89:88:a2:
62:54:9c:76:1e:a4:6d:2d:2b:dd:10:c0:63:42:f5:
04:50:c6:ae:44:22:82:7f:2a:5b:14:36:37:aa:41:
33:e0:05:f0:2b:f3:40:d9:e5:0f:16:d2:5d:41:29:
59:e4:46:8b:8d:23:61:00:15:03:bc:0b:e2:4b:42:
ca:c7:e7:73:8d:51:3e:c4:c7:e1:2c:f4:fa:d9:03:
89:97:9e:e0:7e:2b:bc:37:8b:57:ec:aa:01:21:d5:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:77:37:B2:7C:13:3E:74:30:2D:EB:D5:0F:2B:D0:63:62:62:CE:B7
X509v3 Authority Key Identifier:
keyid:1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:cf:70:0e:cc:7c:62:20:43:94:25:ad:75:f6:9c:35:15:d6:
5c:1d:78:b3:32:5b:f2:8e:81:b5:a1:4e:aa:9a:64:12:2e:85:
a8:23:32:21:07:01:d4:f7:a5:31:f6:b3:4d:6e:41:eb:74:f7:
a9:fd:0a:ba:ec:19:e2:60:ea:36:98:11:3b:eb:e6:0f:fd:08:
9e:64:ca:1d:b7:76:79:21:33:55:d5:08:0b:1f:c9:2f:9d:4c:
ac:aa:de:4a:4a:4d:05:3c:ed:e0:c2:79:10:59:94:95:52:7b:
3e:46:b9:2a:3b:f2:80:77:21:96:19:df:51:43:6f:c2:60:c0:
66:fc:ab:d9:9d:71:aa:df:ec:21:83:4a:a6:1a:a7:96:36:0e:
11:56:d9:5f:30:c1:63:68:5f:f5:fe:73:46:61:cd:b0:1d:ee:
25:52:cb:15:85:d7:da:78:d8:9f:23:5b:1b:37:d9:0d:53:01:
e7:4d:3f:42:1a:51:59:0a:23:19:68:67:a3:38:7f:25:2e:54:
de:e9:73:79:93:bd:12:80:eb:20:55:07:d4:01:4f:15:6f:3a:
66:4d:da:24:f0:4b:64:02:a4:15:67:d9:5f:60:fa:ab:51:5e:
78:f4:27:6f:bf:30:99:85:42:f1:50:fe:4a:1b:50:8c:29:56:
28:d0:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:17 2026 by rpki-client