Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
File: GXXTHyIv7CWL1HYY_flMURzl4G4.mft (raw, json)
Hash identifier: DM0OpqgKmmapGrC5R/RYRAjaZEYE+341vZp5vBSBSIs=
Subject key identifier: 04:23:99:DC:F9:35:08:4F:2C:1C:9F:FC:51:11:D3:B9:9C:B2:2C:37
Authority key identifier: 19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
Certificate issuer: /CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Certificate serial: 019CAB6B7AE053F14B9743A5612085395DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
Manifest number: 0F89
Signing time: Sun 01 Mar 2026 22:01:13 +0000
Manifest this update: Sun 01 Mar 2026 22:01:13 +0000
Manifest next update: Mon 02 Mar 2026 22:01:13 +0000
Files and hashes: 1: GXXTHyIv7CWL1HYY_flMURzl4G4.crl (hash: ZqU1s6k5f+86gzeID3kD05eat1UBhIZ3cwBVuSkB8Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:7a:e0:53:f1:4b:97:43:a5:61:20:85:39:5d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Validity
Not Before: Mar 1 22:01:13 2026 GMT
Not After : Mar 2 22:01:13 2026 GMT
Subject: CN=042399dcf935084f2c1c9ffc5111d3b99cb22c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:11:51:ec:91:33:fd:35:b9:bf:9f:5b:05:
c4:a4:d7:6d:f5:7a:27:d0:8d:ad:15:a3:eb:28:01:
1e:b6:1c:84:78:c0:f9:18:e1:12:46:56:53:59:1a:
73:df:54:08:6b:01:4d:86:5f:0f:cd:a7:8a:4d:06:
b2:e7:62:73:dc:c6:4e:e1:29:91:3d:55:02:e7:23:
7e:74:70:74:6f:b1:da:44:71:4e:3b:20:05:bd:75:
bc:23:fe:51:f7:5f:1a:12:3b:2c:ce:61:94:fa:5b:
b2:7d:a7:56:9d:67:f9:52:fc:d7:54:2e:0a:a7:f1:
47:0d:b3:85:a3:19:b8:49:38:ac:ce:6d:4c:24:f3:
e7:64:1f:7f:d6:1f:18:04:32:5c:5f:ff:4b:ce:94:
f0:22:6e:06:67:d5:3d:f7:51:16:6d:06:78:9e:e7:
9a:fe:e6:70:64:65:45:40:e9:7b:1c:c4:b1:cc:f6:
59:82:d6:b4:33:66:cb:a1:34:c9:e3:00:2a:73:09:
a1:a5:69:05:46:d0:c4:33:5e:1f:81:d2:20:cd:29:
5f:2b:2b:9f:94:97:81:f3:90:60:20:92:89:91:e6:
e7:e9:10:b0:7f:7a:e8:3e:28:12:62:37:db:e6:90:
c3:b6:9c:ad:99:6c:29:6e:41:71:98:46:19:1a:69:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:23:99:DC:F9:35:08:4F:2C:1C:9F:FC:51:11:D3:B9:9C:B2:2C:37
X509v3 Authority Key Identifier:
keyid:19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:08:07:89:18:59:e2:dc:74:9d:8e:e8:0a:83:a5:72:9c:97:
b6:9b:7d:67:f3:e2:17:da:e9:26:db:cb:b6:2b:d5:c4:73:33:
51:e1:49:42:90:02:44:92:09:0b:77:8b:a0:9f:71:a2:46:28:
ad:ff:28:0a:2b:fc:eb:12:28:0a:60:6c:6c:0c:fe:84:79:b7:
ab:bf:f8:21:40:6e:fb:82:c3:6c:bf:bd:1c:17:c0:4a:e0:2a:
ea:51:eb:82:06:dd:de:36:a5:22:b3:e6:e8:66:96:60:fc:10:
d2:8c:d6:52:e2:5c:2d:c9:f9:eb:a3:15:14:0d:b2:59:96:79:
ba:c8:b6:20:5f:7a:f2:66:a6:a5:3c:5e:f7:80:de:2a:93:aa:
42:f3:c0:c6:8e:f3:5f:0c:93:6a:ed:54:e1:60:c3:4e:31:cb:
91:61:20:dd:e2:12:b7:4f:76:51:93:c3:d5:62:83:2f:e2:72:
86:9a:ef:a4:97:b5:90:a5:c8:cf:e6:0d:94:f2:0c:06:c7:ce:
43:9b:e4:03:f1:67:22:63:de:29:4f:f8:85:cc:78:99:c3:4b:
7f:58:75:f5:87:06:68:de:00:29:0a:ae:c8:1b:55:f5:92:43:
42:0e:35:d1:4b:c6:a0:be:52:02:b1:ee:a2:1b:32:0c:a5:9c:
ae:89:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:22 2026 by rpki-client