Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
File: gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft (raw, json)
Hash identifier: gATL2Kt3Z7zhUBO1mTmkcem2GaY0GYXn7/RJrG4y2Zo=
Subject key identifier: 30:EC:DA:09:6F:A6:7E:D8:16:E8:1C:8A:F8:18:48:84:55:71:B7:B3
Authority key identifier: 82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
Certificate issuer: /CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Certificate serial: 019D996290364DDDD7EF6D1FB41E62B13427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
Manifest number: 082E
Signing time: Fri 17 Apr 2026 03:01:06 +0000
Manifest this update: Fri 17 Apr 2026 03:01:06 +0000
Manifest next update: Sat 18 Apr 2026 03:01:06 +0000
Files and hashes: 1: gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl (hash: SQ7KwwWjMBEkP2J8EDPaUICgPUEyxJQ+xCbrm8drBMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:90:36:4d:dd:d7:ef:6d:1f:b4:1e:62:b1:34:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Validity
Not Before: Apr 17 03:01:06 2026 GMT
Not After : Apr 18 03:01:06 2026 GMT
Subject: CN=30ecda096fa67ed816e81c8af81848845571b7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:03:b7:d3:6b:34:14:bb:26:8c:d2:ce:5d:
f0:e6:16:21:9f:ee:a2:80:bc:39:3e:0c:76:ef:fa:
e3:8f:08:cf:71:6b:ff:78:43:2b:bb:94:fe:c8:f6:
ec:06:de:ec:fd:2c:9e:75:90:6c:21:0a:29:e6:52:
aa:ad:b6:79:da:84:83:1f:93:7d:b5:4c:7b:19:f6:
48:12:51:20:f7:ef:4a:7e:d8:31:b6:57:2e:84:57:
9b:a3:32:09:04:0c:39:fb:3a:de:e7:8e:0e:b7:01:
39:92:8e:d1:b4:a5:29:3b:52:77:d1:17:81:a3:9e:
b0:f4:4a:8b:9c:00:45:48:53:50:02:c7:72:8a:12:
1e:c7:54:fc:63:ec:ed:62:f5:52:6c:a4:72:74:fb:
2e:78:ed:ca:f4:ab:1b:c0:f1:63:f5:80:86:b2:61:
24:6c:e2:ec:23:08:7d:39:95:59:f6:f1:d0:c3:c8:
a2:3f:40:c4:48:b4:03:4b:b6:9b:11:1b:51:65:85:
c7:f1:31:24:43:36:9b:5b:7e:1b:63:bb:e3:89:85:
cc:9e:2e:ee:0f:03:a5:26:46:68:49:e5:cf:69:26:
cb:16:2e:c1:39:cd:4d:c4:64:27:e7:fa:eb:bc:38:
e7:6b:38:04:c5:4d:0b:a4:93:bc:19:b6:51:81:4b:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:DA:09:6F:A6:7E:D8:16:E8:1C:8A:F8:18:48:84:55:71:B7:B3
X509v3 Authority Key Identifier:
keyid:82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:71:ba:b6:0a:89:4a:9d:a7:53:af:f7:df:a1:2d:98:28:a0:
bf:e8:ff:d1:72:af:6d:85:28:3b:69:18:78:86:14:23:1d:1e:
b3:c1:f2:a7:25:8d:6e:ca:e4:2d:9e:59:a8:31:68:63:df:d8:
5e:2d:ea:e8:f0:80:66:a1:25:d2:aa:fa:92:9d:98:f3:05:eb:
e1:f2:de:96:42:11:2e:ca:dd:3b:62:2b:69:74:9a:bb:32:57:
9a:9b:10:89:ae:19:22:1d:a4:8b:ac:da:55:fa:0d:a5:b1:3a:
a8:8f:20:43:7f:ea:a8:54:fb:c7:63:c3:48:e1:06:4a:7a:69:
7d:73:65:9b:c5:9c:52:13:b3:8b:81:4e:37:23:51:94:91:ad:
0c:0d:db:0e:73:dd:06:0d:8c:e2:7d:ad:84:6f:a3:7a:bc:16:
fb:ef:d8:0b:13:bd:e1:af:37:dd:9d:5a:b2:06:88:73:e5:8c:
d8:43:2e:c0:2a:0b:a5:10:32:ba:d8:10:b3:19:08:e7:ca:fa:
23:99:23:f6:93:41:b2:a5:8a:14:b0:3a:89:8d:f3:99:ca:0a:
99:1e:be:88:98:1c:b4:08:ec:75:36:79:6b:53:12:85:84:be:
4e:82:c7:f6:b3:69:06:d7:36:dd:63:c5:87:60:94:1d:7e:34:
d9:0f:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:26 2026 by rpki-client