Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
File: gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json)
Hash identifier: kEm3XAtURYcG9do88cObISfEdKWQNpykdzb2f3Md+IY=
Subject key identifier: F5:5F:E0:0A:08:27:D3:77:3A:A3:40:40:07:F2:EB:F9:7B:CA:03:FD
Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
Certificate issuer: /CN=8159495b72ff015878c1314d24759b6e9147a8e0
Certificate serial: 019CAA214C3C2785C908E0C133EE116718AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 16:00:34 +0000
Manifest this update: Sun 01 Mar 2026 16:00:34 +0000
Manifest next update: Mon 02 Mar 2026 16:00:34 +0000
Files and hashes: 1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: j/qKilatfuKvd42ACcBPnEuSR/p/PV0zlr1cDDxPyYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:4c:3c:27:85:c9:08:e0:c1:33:ee:11:67:18:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0
Validity
Not Before: Mar 1 16:00:34 2026 GMT
Not After : Mar 2 16:00:34 2026 GMT
Subject: CN=f55fe00a0827d3773aa3404007f2ebf97bca03fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:e7:86:b5:d2:d0:6b:71:11:bd:d0:78:32:
56:0d:d3:e0:59:91:46:02:15:a3:72:3e:2c:28:d7:
6d:7b:1a:9f:c5:a4:3a:72:14:43:e4:40:a0:bf:5f:
d9:cf:0e:0a:a8:23:c6:4b:90:f4:2f:ef:18:cf:c2:
fa:15:99:ec:09:72:b6:ec:ae:6a:e0:51:0f:2a:97:
73:5d:6e:f3:60:00:2d:2f:38:65:e6:a3:8d:f4:2f:
5c:a2:9b:32:cb:50:6e:08:84:03:67:98:52:45:9b:
1f:98:7b:e8:f4:7b:8d:72:ba:27:c1:6b:f9:fa:1e:
5e:c7:fe:a6:22:f4:9a:41:2f:38:42:2b:37:bf:3e:
c3:88:d8:86:36:bc:f8:1c:b3:0e:a8:bb:69:e5:d1:
06:8d:b6:13:50:12:1a:41:ff:24:13:b0:a2:3b:b6:
b1:dc:09:0d:30:a6:8e:4e:11:1d:fb:87:c3:77:d1:
17:c1:a0:ae:f4:84:94:ad:5b:a1:d6:bc:47:22:b0:
7a:b7:df:23:97:e0:a3:82:74:f4:25:45:e9:73:29:
88:5b:f4:23:51:0b:14:51:ae:a1:e3:31:8d:e4:2f:
e8:4a:dd:08:bc:82:7b:c9:16:32:2d:4a:6f:f8:dc:
b3:18:e5:11:ba:d3:70:7c:c9:52:91:70:27:14:2c:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5F:E0:0A:08:27:D3:77:3A:A3:40:40:07:F2:EB:F9:7B:CA:03:FD
X509v3 Authority Key Identifier:
keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d5:c7:44:bf:62:a2:88:2b:0f:09:d2:a9:4e:85:24:2b:f1:
b9:d6:d9:7e:72:42:88:8f:9f:54:a3:fe:94:63:fc:6e:7f:b5:
eb:7e:60:39:b0:08:f3:ac:cf:20:80:4b:e1:21:31:ed:39:ec:
5a:60:a7:80:96:30:ae:e5:19:71:06:5d:e9:2d:5b:4b:8b:48:
7b:0b:7d:00:8b:ac:fc:06:08:73:77:d8:b8:5f:82:fa:a9:99:
ac:75:59:2f:36:7e:af:25:26:65:2d:09:e9:8d:0e:63:ef:8f:
6b:0c:f9:72:1c:d8:52:2d:ee:a7:dc:92:d2:91:24:0a:b7:d4:
b3:bd:09:df:d7:68:ec:a0:af:90:c7:21:f2:8e:5c:40:63:c5:
18:39:30:81:99:e6:8a:5f:ac:95:2b:7a:38:08:32:ec:6e:2a:
bb:47:f2:34:d3:e4:15:90:50:36:6f:e8:10:aa:1f:1c:cc:bf:
d9:6e:45:6d:da:53:6b:ad:c2:28:b6:c4:76:43:7b:7a:ba:ea:
b8:f6:ca:0d:e0:99:eb:60:c3:f9:09:5d:fd:31:31:5e:56:39:
03:4a:0f:34:19:79:f3:0d:68:ae:a5:87:c8:92:7d:72:89:37:
86:ab:44:5b:04:a3:c1:dc:4d:a5:c5:6d:62:4d:ad:1e:38:56:
38:2e:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:53 2026 by rpki-client