Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
File: gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft (raw, json)
Hash identifier: 0I0nybDM5iZYu5/K+OOxAcTbibBfaeFiOLlNUqk9Bt4=
Subject key identifier: 52:D7:62:9A:CE:7F:78:A1:B8:D9:79:41:89:11:30:51:BC:EF:5A:66
Authority key identifier: 82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
Certificate issuer: /CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Certificate serial: 019CA9EB430192307F243430B5D54140C881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
Manifest number: 07B2
Signing time: Sun 01 Mar 2026 15:01:33 +0000
Manifest this update: Sun 01 Mar 2026 15:01:33 +0000
Manifest next update: Mon 02 Mar 2026 15:01:33 +0000
Files and hashes: 1: gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl (hash: 1h1C8eyM4pHizYCigV49ViruShRB9l8rLLJAf42rIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:43:01:92:30:7f:24:34:30:b5:d5:41:40:c8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Validity
Not Before: Mar 1 15:01:33 2026 GMT
Not After : Mar 2 15:01:33 2026 GMT
Subject: CN=52d7629ace7f78a1b8d9794189113051bcef5a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:e1:d1:cf:bc:dc:7e:b3:cb:b1:47:16:75:
01:cf:e7:0d:aa:37:4d:04:d1:14:0a:bb:11:b0:bb:
61:86:21:1f:ea:b9:92:4d:25:ed:af:42:57:c2:05:
63:fa:07:02:b4:eb:69:af:bf:77:31:7a:37:12:16:
4b:fc:f6:44:f3:38:ae:79:79:e9:cd:c8:fd:4e:fa:
4b:5d:58:a8:33:df:66:ca:1a:83:55:99:94:12:b0:
ea:14:61:8e:7e:69:a4:06:83:e6:0b:9e:12:41:5f:
a2:c7:62:03:87:8f:53:79:9b:0a:9e:e5:20:98:73:
7f:b5:d6:ff:f7:0d:7e:ee:38:10:a7:16:fd:d3:3d:
e4:90:0d:8f:bf:d9:e9:cc:ae:1d:24:9d:f8:17:20:
57:e2:80:79:53:fb:1c:50:ea:1b:d0:e1:c8:c0:a2:
d0:be:fb:a7:9d:4d:20:6d:fe:fb:ec:fb:27:17:0c:
ab:ba:81:a1:34:dd:01:8c:b9:97:17:f7:87:75:db:
76:59:b0:eb:19:09:45:3d:56:a9:2e:b4:d3:ae:6c:
27:63:db:9f:94:06:1d:36:4b:ea:84:9d:3e:ee:65:
b2:07:8f:eb:3d:c8:7c:13:52:21:f7:da:a3:d7:f9:
64:11:1c:51:57:ba:9c:dc:ad:ed:fc:5b:4c:c7:01:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D7:62:9A:CE:7F:78:A1:B8:D9:79:41:89:11:30:51:BC:EF:5A:66
X509v3 Authority Key Identifier:
keyid:82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:96:a2:e1:a0:2f:f7:0e:f4:e3:d0:96:d6:ff:69:e6:fb:f2:
36:95:22:6d:9c:ac:2e:2a:8d:c3:e1:e0:c0:df:6e:41:b1:b5:
95:95:ee:7c:f5:1d:18:41:e4:0f:92:03:6b:d3:e9:fa:3a:8d:
ec:c6:31:5d:09:45:84:75:d2:bf:04:1f:d0:65:80:b4:93:1c:
ff:b9:1f:67:55:48:1c:34:28:80:99:fe:3d:32:67:b1:5a:5e:
9c:f8:9e:e7:04:fc:3f:7c:2e:25:17:ca:55:31:56:4e:a4:e3:
6f:97:32:4e:86:cd:f9:bb:a4:47:75:4d:32:45:8a:5b:ba:e3:
0c:6c:ca:8e:78:67:8a:85:b2:9e:cf:60:eb:a3:18:4c:26:d8:
16:92:71:a9:86:6d:1a:40:0e:df:96:57:81:4a:ed:c6:f7:c6:
6f:69:e3:4f:c1:7f:37:3d:5b:b8:09:6e:7f:90:7c:42:4e:80:
1d:57:37:6f:87:f8:1e:2b:48:ae:01:fe:f4:38:5e:26:0c:9a:
fe:ae:f5:b8:71:b6:f4:6a:c3:84:ea:c1:42:5d:13:28:a5:d0:
36:fe:19:5e:a6:eb:40:df:4c:86:54:e2:77:be:96:1a:22:d5:
59:28:db:70:22:63:ec:31:8a:99:00:e1:f1:c8:34:f0:f7:5c:
e7:08:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:03 2026 by rpki-client