Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
File: GXXTHyIv7CWL1HYY_flMURzl4G4.mft (raw, json)
Hash identifier: aYsJqhCcucCfDGCznvxuFCAstw4opECOYaZEgmYAz9w=
Subject key identifier: 80:15:6A:7A:C8:D2:F4:4C:E9:82:A6:A4:B7:9D:71:3B:CF:DE:7A:C7
Authority key identifier: 19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
Certificate issuer: /CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Certificate serial: 019D98F46605A60460D5F6CBFCC21AA2BC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
Manifest number: 1004
Signing time: Fri 17 Apr 2026 01:00:46 +0000
Manifest this update: Fri 17 Apr 2026 01:00:46 +0000
Manifest next update: Sat 18 Apr 2026 01:00:46 +0000
Files and hashes: 1: GXXTHyIv7CWL1HYY_flMURzl4G4.crl (hash: HxhG/2iF1LPnwDQPCZ0FLNezFvvyJll4bR30AlFYe6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:66:05:a6:04:60:d5:f6:cb:fc:c2:1a:a2:bc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Validity
Not Before: Apr 17 01:00:46 2026 GMT
Not After : Apr 18 01:00:46 2026 GMT
Subject: CN=80156a7ac8d2f44ce982a6a4b79d713bcfde7ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:af:3e:c7:79:dd:9a:85:07:e6:c9:e0:2b:
68:16:3b:a9:0e:0f:74:05:5f:ea:cf:33:ee:bd:6e:
5c:75:48:d9:2b:bf:61:93:6b:fa:25:9f:a1:de:9e:
6c:43:ba:3c:21:d4:32:de:85:73:57:eb:79:d3:af:
81:20:cb:6b:04:78:f2:d6:69:32:cd:0e:9a:b8:ac:
a8:4a:7d:c3:13:5a:36:cb:8e:0a:ea:9e:76:b5:64:
51:b7:0c:8f:a6:d0:00:18:0c:f7:92:47:dd:8b:ad:
b0:6f:c8:86:11:27:61:55:b8:a1:61:52:a2:5e:ee:
fe:6d:3b:f6:ed:c9:56:62:eb:a7:a9:4a:c5:7f:8b:
8c:36:0b:d2:fe:57:71:d9:10:15:69:d9:b4:65:16:
b4:5a:17:6a:f8:0d:08:f7:25:49:f3:24:a8:7e:95:
31:26:ce:d7:6c:44:ab:00:d7:ed:e4:e4:5f:c4:61:
91:8b:62:5f:ca:92:65:a2:9a:3d:ab:82:66:5e:a6:
b9:67:ec:7b:76:b2:e8:fb:57:bd:bd:49:2d:e0:82:
e5:7b:8b:f0:5a:06:74:a9:c7:86:90:30:76:dc:13:
73:0f:ad:69:cb:d9:47:6e:f0:84:d0:9b:52:d9:ec:
48:10:de:04:b9:ec:5f:f5:38:da:64:3e:94:b0:2a:
6b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:15:6A:7A:C8:D2:F4:4C:E9:82:A6:A4:B7:9D:71:3B:CF:DE:7A:C7
X509v3 Authority Key Identifier:
keyid:19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:25:91:2f:be:91:9c:7d:94:af:db:2b:08:11:74:1c:67:a8:
df:08:03:8d:e0:3c:65:0e:72:19:5b:eb:27:64:25:b6:46:4d:
39:02:db:83:52:01:3d:7e:15:10:f7:4d:49:e1:cc:e1:51:7d:
b3:1a:6e:ed:cc:ab:ed:d1:67:54:33:15:68:d7:e5:e8:ad:12:
99:8a:0b:20:a3:11:51:85:5b:77:2e:3b:b2:0c:32:b3:0f:a8:
8c:87:7f:cb:fc:73:17:a5:0d:37:70:51:bd:d9:08:a4:24:9d:
7f:15:77:dc:5b:66:17:5e:18:0e:24:02:a2:d6:71:9a:af:47:
1d:80:31:aa:1c:88:59:ec:83:70:b0:0a:83:a3:c9:e1:15:76:
fb:42:15:0d:15:c2:8c:57:60:4c:20:c3:24:c3:0f:cd:c7:3f:
bc:c7:d9:0d:ee:34:f9:d6:ef:98:b7:85:1f:59:1c:77:33:ef:
54:ed:e3:59:40:64:36:ac:fb:3f:34:90:da:88:f9:87:72:89:
5f:8f:41:1d:10:75:2a:fe:cb:30:a5:cc:e0:69:6c:01:31:f1:
0a:55:e6:81:6f:5e:60:3d:01:38:85:96:2f:42:14:76:e2:a8:
bb:88:9f:fa:a7:b0:0b:68:64:4c:d9:b6:27:5e:61:ec:7a:a4:
3c:ed:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:14 2026 by rpki-client