Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier: aREbkUrjpfLyEyvoZeWRHjDniInCWO+/NJ5zoOXiJVY=
Subject key identifier: FB:60:F6:42:CD:C2:7D:55:E1:40:72:BA:49:54:AB:05:AC:C8:BA:C1
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial: 019D390A3CCB5556E4BC8D053C7041FDA00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 10:01:05 +0000
Manifest this update: Sun 29 Mar 2026 10:01:05 +0000
Manifest next update: Mon 30 Mar 2026 10:01:05 +0000
Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: 30s8TalQhXwwM0lUFjt6DzrQ11Io/2oGVm7WmdC61Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3c:cb:55:56:e4:bc:8d:05:3c:70:41:fd:a0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Validity
Not Before: Mar 29 10:01:05 2026 GMT
Not After : Mar 30 10:01:05 2026 GMT
Subject: CN=fb60f642cdc27d55e14072ba4954ab05acc8bac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:13:7f:df:4f:63:d5:89:78:25:e1:ba:7f:bb:
4b:1e:7f:c8:9a:68:9f:74:bc:8c:02:02:41:83:a0:
43:e2:92:cd:da:e9:df:c1:87:23:d9:0e:0d:b3:60:
7e:3d:0c:18:92:d3:18:40:43:62:ec:da:28:e3:60:
4f:e8:47:4c:6d:64:99:33:af:cb:98:94:eb:11:63:
62:68:99:00:01:27:c6:01:8e:49:db:ee:45:61:ba:
ba:0e:d9:56:f4:ac:11:8e:54:e2:a5:1e:ea:20:a9:
97:73:52:5c:46:db:4d:96:84:d3:22:3d:44:a3:47:
a2:26:e0:5b:e2:63:8b:95:ae:3a:16:fd:8f:19:f0:
d8:0e:c8:8b:b1:03:53:a1:16:dc:31:f2:f5:92:34:
6b:6c:04:b4:2b:30:78:45:52:d0:7b:83:4e:3e:22:
8d:b2:c2:25:18:0b:ce:d9:75:f1:9e:45:ac:cf:21:
cf:4b:2a:8f:95:79:d3:80:39:07:50:33:cf:7b:ad:
e2:2c:ca:25:94:7b:ee:39:8b:f0:f4:6c:07:b2:ee:
16:91:1a:84:44:73:e6:6a:74:de:83:eb:df:3d:2c:
db:e0:7a:bd:5e:60:08:25:ce:d7:ae:09:86:f3:ba:
07:24:fe:d8:bc:2c:98:af:54:d3:a3:03:58:77:0c:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:60:F6:42:CD:C2:7D:55:E1:40:72:BA:49:54:AB:05:AC:C8:BA:C1
X509v3 Authority Key Identifier:
keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f4:44:ae:6c:55:c5:fa:84:b5:29:af:3a:c4:ff:26:b0:18:
89:c6:bc:de:b2:6a:31:ac:0b:7a:77:a2:99:4a:93:86:8f:a2:
31:3b:f6:ae:7f:d8:9a:5c:74:5d:c1:e8:35:fc:99:fb:2c:39:
dc:15:f2:b2:ff:92:d4:28:b6:bf:80:e0:31:20:00:0c:28:e0:
50:28:42:d1:33:fc:b3:76:53:05:bd:06:4d:54:57:68:4d:f4:
1e:45:7a:c9:e6:76:97:36:9a:91:16:76:f0:a3:47:98:6c:af:
8e:40:b2:67:40:9f:af:48:c3:56:31:df:16:07:f2:89:6e:23:
11:d3:7a:2b:a3:1d:09:56:31:02:3d:c1:c1:b6:e2:ca:70:90:
f2:b5:de:ca:e4:bd:bd:1b:06:dd:08:f9:52:5a:d1:26:8f:92:
32:4d:13:f9:91:d0:22:5c:87:1e:37:d0:e1:76:53:27:f0:76:
f2:ae:c5:4e:1a:70:fc:28:47:38:25:01:a9:0b:b5:15:08:7b:
c6:ab:29:97:04:77:b8:63:4a:81:35:77:6a:ea:bf:7f:9a:0d:
07:02:c0:8d:a4:0f:ed:06:8a:a8:d2:15:d9:d5:ec:d0:c5:9b:
7a:30:84:d5:f4:94:cd:10:2d:5b:ee:26:07:59:ae:6b:b2:24:
c0:8c:f9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:43 2026 by rpki-client