Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
File: gMez3pa5HtxunIXZ1aZoQZIDtfU.mft (raw, json)
Hash identifier: /PWpb7hdTAhjdEcThw4XZC4qlkcLW0JSjMTlnBmg5Vc=
Subject key identifier: 5D:C6:D3:B0:90:1C:F7:A1:D1:47:A6:05:41:51:F5:DE:DF:26:DF:91
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Certificate issuer: /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial: 019D985067E1C54F6DA1A3A32E7F04A155A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
Manifest number: 069C
Signing time: Thu 16 Apr 2026 22:01:39 +0000
Manifest this update: Thu 16 Apr 2026 22:01:39 +0000
Manifest next update: Fri 17 Apr 2026 22:01:39 +0000
Files and hashes: 1: gMez3pa5HtxunIXZ1aZoQZIDtfU.crl (hash: uKZM+ZT6EKwNxzqINVz0dByPzAGuNq7r3Gz7v/8HsqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:67:e1:c5:4f:6d:a1:a3:a3:2e:7f:04:a1:55:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Validity
Not Before: Apr 16 22:01:39 2026 GMT
Not After : Apr 17 22:01:39 2026 GMT
Subject: CN=5dc6d3b0901cf7a1d147a6054151f5dedf26df91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:ba:f4:30:62:9d:c6:c1:3c:b5:04:26:54:
ff:9d:68:09:68:88:97:0b:a7:65:45:87:8a:fc:da:
df:c5:45:15:78:7a:da:5f:b4:6a:2d:72:7d:52:1c:
e7:be:1c:22:87:08:a6:60:bd:e7:c5:36:73:68:30:
0b:bf:d2:90:e8:ed:a7:bc:41:cb:47:86:cd:55:cf:
6b:1f:44:17:30:a8:15:f2:3b:63:89:b7:53:b8:38:
dd:64:60:e3:e1:e8:31:28:62:2a:58:f5:09:9a:15:
ab:e6:3b:ee:c4:e7:d4:ad:09:af:ed:c1:7d:3a:20:
2c:c0:9c:09:59:77:f5:b4:58:a7:4f:f6:ff:4d:da:
11:f2:86:07:4f:a0:66:bd:be:49:10:30:74:86:96:
ae:31:6b:00:c7:22:fa:76:ce:8f:be:f5:2e:08:66:
c8:a3:38:dc:a0:af:15:01:9a:be:56:93:34:bf:4f:
66:a5:80:6a:db:52:ea:1b:a9:28:95:54:8e:9b:6a:
32:b0:ae:1e:71:5b:f7:5a:b3:d3:03:d0:de:09:b2:
32:47:87:b7:4a:5d:4c:d6:80:14:1f:aa:76:fd:9e:
bd:30:8c:28:f6:06:17:a7:50:b7:c5:30:9a:ee:18:
33:7a:18:df:64:d2:44:df:f4:d3:5a:ec:4c:6c:17:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C6:D3:B0:90:1C:F7:A1:D1:47:A6:05:41:51:F5:DE:DF:26:DF:91
X509v3 Authority Key Identifier:
keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:76:2e:be:95:5f:5e:35:3d:42:39:85:e0:88:6a:75:de:a8:
4f:03:50:21:f0:39:5b:36:76:5c:73:bf:3a:3a:1a:73:c2:cd:
76:15:b6:09:fd:9b:06:f4:6e:8b:c8:88:cb:9c:4b:df:64:45:
31:ef:86:03:a1:58:f0:64:cc:69:ee:50:ba:62:c4:18:5d:29:
6e:5e:54:09:63:33:a3:55:15:3b:7e:6a:3d:e9:fd:14:10:4e:
fd:75:77:81:32:d2:30:95:0b:c2:52:16:77:18:b9:8d:03:12:
61:9a:2a:a9:a1:96:28:ac:35:34:e5:73:34:1f:1a:23:99:ee:
c6:c6:55:a0:ca:10:0d:f3:a7:1f:66:7f:b0:b9:ed:df:5b:a9:
07:c9:d1:99:7a:27:8e:00:93:b6:d9:2a:88:a3:1e:44:e4:c7:
a8:66:8a:22:00:3b:f1:e1:17:44:a5:1b:0c:7a:00:52:e9:d4:
f3:9f:12:fd:35:13:f0:0d:5e:3a:38:98:f6:8f:4d:4d:5d:63:
25:ff:7c:35:42:ba:c2:75:e5:4e:8f:3a:f2:82:5e:6c:2b:59:
52:c8:c8:f6:cb:96:5b:62:70:ba:2b:09:42:29:2f:8e:6c:36:
d5:14:12:1a:73:fc:61:d0:57:f9:c8:9e:e3:c5:07:86:22:37:
62:db:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:52 2026 by rpki-client