Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
File: gz8MJRPUNTtAzvg5F57r-HOCRcY.mft (raw, json)
Hash identifier: /bjRlQnwEWAOM08rI5i0upBlQF7f+5iZVmiVZ6sIxc8=
Subject key identifier: F1:C0:73:01:AE:58:04:92:BD:25:7F:05:37:B0:24:F5:3E:56:F5:40
Authority key identifier: 83:3F:0C:25:13:D4:35:3B:40:CE:F8:39:17:9E:EB:F8:73:82:45:C6
Certificate issuer: /CN=833f0c2513d4353b40cef839179eebf8738245c6
Certificate serial: 019D98F54E5CBA0E3E103BFF74E3F31B04E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
Manifest number: 1395
Signing time: Fri 17 Apr 2026 01:01:46 +0000
Manifest this update: Fri 17 Apr 2026 01:01:46 +0000
Manifest next update: Sat 18 Apr 2026 01:01:46 +0000
Files and hashes: 1: gz8MJRPUNTtAzvg5F57r-HOCRcY.crl (hash: t5fELWq8DLCwOkZrWPo97NXb6+ImebyQYyFRlKQbe+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:4e:5c:ba:0e:3e:10:3b:ff:74:e3:f3:1b:04:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833f0c2513d4353b40cef839179eebf8738245c6
Validity
Not Before: Apr 17 01:01:46 2026 GMT
Not After : Apr 18 01:01:46 2026 GMT
Subject: CN=f1c07301ae580492bd257f0537b024f53e56f540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:40:4e:9f:43:35:6d:2a:db:cf:15:5c:7a:
8d:88:e5:a6:98:90:e8:75:0e:44:5d:80:88:8a:5e:
7b:72:a9:1a:71:38:55:31:bb:b7:2c:6a:5c:bf:ea:
86:7b:22:21:3f:98:e5:8a:a5:89:e7:6c:6a:70:44:
ca:32:5a:ee:50:0b:77:4d:c7:90:86:f7:8c:fe:6f:
49:d3:ec:3e:c1:d0:bb:e1:3e:8b:40:97:59:30:27:
bf:3e:81:07:4e:a6:b8:e0:b7:22:2a:78:04:a7:e6:
8c:1a:79:c2:98:b6:70:64:ee:73:b5:b6:e1:a1:54:
1a:b6:cb:ec:aa:64:19:00:eb:9f:56:d3:82:f1:9c:
27:49:df:f9:73:75:07:2f:cc:bb:5f:8a:72:81:d1:
20:09:c9:fa:8c:f4:1f:03:b7:0b:aa:bf:fb:c3:bd:
e2:f1:68:67:e1:4e:be:bd:7a:a9:d4:cb:07:96:09:
19:6d:38:6a:cc:13:79:de:64:85:ad:4b:55:25:42:
fc:fd:86:a1:ed:a4:0d:05:84:26:a5:a3:60:ba:52:
25:79:d2:c3:e5:14:fa:60:78:d4:02:34:5b:4e:8f:
58:53:05:55:e6:f9:37:be:64:17:b5:c5:12:10:11:
cf:b4:f8:ce:df:8e:63:d6:8a:fd:8b:97:d2:25:1c:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C0:73:01:AE:58:04:92:BD:25:7F:05:37:B0:24:F5:3E:56:F5:40
X509v3 Authority Key Identifier:
keyid:83:3F:0C:25:13:D4:35:3B:40:CE:F8:39:17:9E:EB:F8:73:82:45:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:57:c8:e2:4d:9a:2c:b9:8f:af:fa:ba:a0:ba:fa:ea:7a:f1:
48:c6:e6:44:7a:3b:a9:d5:42:33:a4:0a:1b:d7:b1:f5:7d:99:
c4:c4:d9:7d:e4:3a:44:89:e0:2e:d3:bd:6f:4f:25:8e:36:77:
f2:d4:65:c4:66:77:53:b1:a8:7b:b1:e4:bb:42:58:89:3e:e2:
e5:bf:94:78:c2:7a:1e:d6:4e:72:f3:16:34:bb:e3:7c:0b:2e:
8a:a2:52:83:e6:e8:57:af:11:77:c2:ab:7d:88:ab:87:f4:6a:
53:e6:2f:df:78:3f:0c:e6:5f:8e:8e:04:18:64:a8:e4:8f:ab:
c8:5c:47:71:c0:34:c9:fd:44:9a:9b:69:1c:4c:9f:c1:9d:3c:
25:40:e0:a3:5b:2e:37:21:ae:76:f0:2f:93:b4:ab:ac:b6:70:
7c:4f:35:37:2e:e2:d4:8f:2e:8c:aa:4c:3c:f2:ab:eb:d8:64:
94:58:91:0f:d4:26:2b:96:ce:6b:ee:9d:9b:12:ab:76:8d:9d:
bb:ea:63:e9:be:bd:be:27:86:da:61:57:dc:26:3f:0b:9d:11:
bb:4a:df:80:5c:40:5f:d4:fd:58:94:88:96:86:a6:ae:63:c1:
93:34:6b:ee:4c:fe:fd:ca:a9:4f:43:96:16:c6:40:f8:a4:a5:
b7:d6:05:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:20:59 2026 by rpki-client