
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
File: Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json)
Hash identifier: XnsHMGApHMraeua4Xz+kqWSPI1F4PuH2OWjybX6SwiQ=
Subject key identifier: D4:97:7E:F6:CF:0D:84:9B:40:A7:C2:2B:0A:33:EA:96:05:F5:26:8F
Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
Certificate issuer: /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Certificate serial: 019CAB6B99E14F9BD4702C6A118D11F32C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
Manifest number: 0B72
Signing time: Sun 01 Mar 2026 22:01:21 +0000
Manifest this update: Sun 01 Mar 2026 22:01:21 +0000
Manifest next update: Mon 02 Mar 2026 22:01:21 +0000
Files and hashes: 1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: rPVCgyDhVrf0KGPJgmc8T+/V3qEvh+teXLy9qvSaMZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:99:e1:4f:9b:d4:70:2c:6a:11:8d:11:f3:2c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Validity
Not Before: Mar 1 22:01:21 2026 GMT
Not After : Mar 2 22:01:21 2026 GMT
Subject: CN=d4977ef6cf0d849b40a7c22b0a33ea9605f5268f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:b5:33:7e:7c:11:16:3d:07:9c:b8:0d:d1:
e8:48:eb:5e:24:ac:b4:6f:17:1a:bb:5c:c4:df:d8:
78:24:a2:df:13:74:67:3b:60:42:83:db:11:75:60:
42:c2:a5:30:55:e8:99:b2:58:3c:84:1e:65:f4:49:
32:9f:96:aa:29:97:87:88:f6:92:26:dd:60:8f:70:
59:f0:d9:7a:aa:74:b7:cb:7c:21:c5:9b:68:70:d5:
6c:50:88:cc:61:f2:52:70:59:d7:4d:06:eb:68:91:
75:e8:d4:13:ce:c2:7a:bd:77:7f:3b:4d:75:36:d1:
39:b9:05:3a:62:13:48:28:b7:9b:73:24:7f:0e:64:
5c:64:5f:3e:2e:3e:60:b6:3d:1d:c9:dc:e4:cd:b9:
86:a0:71:ce:3a:95:5f:b1:ff:31:1e:e3:8b:f4:3f:
69:59:21:ad:4b:69:8b:6c:ad:5e:1a:d3:df:e5:0c:
2e:f9:01:95:e5:29:3b:6f:d0:8b:9c:c8:51:b0:fd:
dd:43:38:21:1e:f7:c9:76:1e:f8:91:b7:cf:19:9f:
43:5a:27:d6:85:55:31:d1:99:66:c9:64:8d:43:0c:
13:7a:af:75:39:16:90:af:f7:d5:cd:d0:50:90:23:
95:6c:7b:b5:cd:b8:b6:92:af:23:b5:9e:74:8d:71:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:97:7E:F6:CF:0D:84:9B:40:A7:C2:2B:0A:33:EA:96:05:F5:26:8F
X509v3 Authority Key Identifier:
keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1e:b8:82:87:c2:7b:13:82:33:54:32:d9:49:75:a6:53:17:
8a:ea:08:7a:7b:a5:fb:8a:af:b7:65:13:26:a6:dd:66:66:08:
0e:1d:b4:c5:64:e9:7d:f0:47:07:90:1c:4b:9b:70:0d:26:6e:
fb:42:40:d8:b3:6f:d7:db:08:9f:e3:fc:df:b9:57:3e:41:d8:
41:60:55:c9:3f:36:44:33:6b:0f:61:17:e4:13:52:18:99:f7:
ad:de:1b:3c:2a:d8:fc:db:af:96:78:01:c4:3b:9a:e2:8c:38:
83:6a:d3:90:03:95:79:e5:14:ba:6c:6b:7a:32:47:d1:32:5f:
8d:0b:8f:a0:3e:64:86:22:91:ee:1c:7b:4d:bc:2d:1d:f8:15:
33:9b:33:f7:96:1d:13:5e:18:52:63:9a:43:45:1a:4e:85:cb:
eb:b1:d9:42:bd:cb:c6:b6:9d:ba:ec:2e:d9:ea:26:f5:35:ad:
41:53:72:3b:87:a6:6d:9b:8c:bc:94:3b:a7:1b:81:26:ef:fd:
5b:d6:c2:e0:c4:9d:b2:f9:4e:c8:0f:73:a7:26:4d:9a:d8:5f:
4b:da:44:c4:71:42:d6:97:de:28:0e:3e:e4:1b:2f:2f:77:c4:
29:fd:10:25:68:36:00:60:f7:aa:75:c9:38:64:9e:9d:bb:b9:
91:a0:f1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:41 2026 by rpki-client