Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
File: GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json)
Hash identifier: y5PLwdOoNStAt9rdK0Mhv1J+Jaz+8scRNljq0JHrA5M=
Subject key identifier: B9:04:F8:39:1C:28:72:D2:8B:25:25:D6:52:41:BC:4A:58:24:DE:C0
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Certificate issuer: /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial: 019D378995EA70C806D21919452765AB96BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: NSJ1ZUx3qfIAp/3zP9Ah891l50LoVx9NihfCGLJhiFU=)
2: HyBfdHBu-E_xnT2LV4MR8Uj2x2g.roa (hash: ECkHLWD5o4a328xINTv5HTRD82ypaSriGLU8WBsJUfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:95:ea:70:c8:06:d2:19:19:45:27:65:ab:96:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=b904f8391c2872d28b2525d65241bc4a5824dec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:f0:b4:16:bf:07:82:f1:f1:b1:13:13:64:
55:8e:8c:d7:fb:19:26:06:ba:39:2c:75:95:33:f7:
f6:2c:f6:91:3b:9a:d5:5d:d8:86:2a:17:72:da:b9:
c7:f1:c9:aa:ee:ce:0b:61:50:ce:5a:f1:f4:44:8a:
40:95:08:d4:73:6d:66:31:02:5c:82:2e:83:47:ad:
84:5a:4a:d9:7b:23:bf:30:22:2f:78:6f:b6:38:9f:
43:31:85:19:93:df:31:7a:83:9d:3a:74:2f:3a:80:
b0:08:17:d9:a9:7b:68:85:0d:3d:25:00:53:cf:16:
d6:32:3a:cb:3f:f9:88:c8:18:07:00:6f:65:6a:6e:
e7:6f:34:d1:7b:e7:e1:5c:51:8e:45:f4:c6:fd:07:
20:89:aa:7d:98:b0:a7:e9:17:62:48:a4:44:e4:28:
6f:09:15:56:0e:e3:6b:a6:94:5e:8e:6b:d2:2f:a1:
b4:c3:5a:2d:1b:20:9b:9b:c7:ab:42:95:5e:28:04:
ed:96:43:95:f8:99:2c:5c:5c:ec:79:bc:fd:24:2c:
13:3b:5c:cf:47:ac:b9:fc:87:63:e0:75:13:41:b4:
a0:e9:f3:ea:55:59:8a:12:35:1e:20:b8:03:30:0f:
71:c8:47:1c:11:29:ec:36:43:10:20:34:8f:40:0d:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:04:F8:39:1C:28:72:D2:8B:25:25:D6:52:41:BC:4A:58:24:DE:C0
X509v3 Authority Key Identifier:
keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f2:92:3c:35:3f:bb:14:c3:80:e3:08:5a:46:89:f5:a9:7b:
b1:d0:f8:90:26:32:dd:25:41:66:52:34:0e:38:e4:5b:38:45:
6e:ef:67:a6:37:2a:ba:73:9b:24:c3:1a:14:d7:69:e2:3a:d5:
17:70:11:0a:aa:a7:69:4d:9a:86:2d:99:c9:fd:2f:d6:c9:22:
64:7b:c1:57:08:cc:e3:24:c4:2f:2e:52:4c:e1:f2:bc:2c:84:
7a:e1:3f:f6:5f:4e:f3:37:8a:54:d8:84:5d:43:11:c5:08:d7:
a6:1a:59:1c:37:e8:b2:64:8c:07:a3:76:45:52:22:b9:6e:34:
08:67:2a:01:9e:85:f3:f1:9a:30:92:51:fc:d7:b1:99:3d:da:
1a:95:02:bf:1b:99:be:73:cd:4a:11:cd:79:f8:ec:68:1d:93:
04:b7:2b:ad:49:cb:7c:df:20:59:bc:2c:ad:20:b8:3a:c3:43:
1d:65:59:26:74:eb:a3:16:58:d5:c6:5b:f5:9a:83:b8:e0:ff:
6d:32:ff:47:52:0b:96:b1:39:20:4b:12:47:53:01:ba:26:9b:
5e:00:8e:d8:79:e2:9e:d2:83:a7:40:63:bb:4a:59:f5:51:57:
fe:f4:22:dc:c1:b9:db:f6:77:29:66:90:1e:52:fa:ae:78:b3:
6f:65:12:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:24 2026 by rpki-client