Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
File: GPe8sFBdSWl9bFFzJBWGc257DXA.mft (raw, json)
Hash identifier: iVupI7wKmBnCQpunJaYeOa5KZb4vDGOZYFCads3av04=
Subject key identifier: 7A:DA:B8:D0:C7:EE:B8:CD:D6:B7:A5:55:40:3D:75:F8:06:AB:74:91
Authority key identifier: 18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
Certificate issuer: /CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Certificate serial: 019D37899FB8E18D480714541E38D9EC45D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 03:00:59 +0000
Manifest this update: Sun 29 Mar 2026 03:00:59 +0000
Manifest next update: Mon 30 Mar 2026 03:00:59 +0000
Files and hashes: 1: GPe8sFBdSWl9bFFzJBWGc257DXA.crl (hash: 9wvBLES9H+axhYpeUxgQIadOcpOfm/UzIz7a2IfBLsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:9f:b8:e1:8d:48:07:14:54:1e:38:d9:ec:45:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Validity
Not Before: Mar 29 03:00:59 2026 GMT
Not After : Mar 30 03:00:59 2026 GMT
Subject: CN=7adab8d0c7eeb8cdd6b7a555403d75f806ab7491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:a9:da:89:f9:1c:93:97:b7:a2:cf:5a:32:
22:91:5e:66:95:7f:00:30:e3:42:a1:fd:e5:18:29:
ad:b7:0c:73:b1:09:5f:a2:7e:15:f3:bd:b8:c8:9f:
a7:d6:e7:49:73:96:51:da:57:cb:55:69:07:9d:04:
01:e8:46:5c:87:0e:7b:9e:2a:2b:2b:fb:7b:ac:7f:
4a:62:2d:26:26:fa:ee:16:71:63:fc:0f:90:64:91:
08:0d:a8:5d:26:b8:7d:7c:45:ff:cf:98:13:81:ce:
4f:61:17:d2:1f:d1:0c:dc:d3:d7:98:00:b3:9f:bb:
83:35:19:d7:de:60:16:f6:cc:3d:7d:28:45:cf:d4:
b0:1d:d7:d5:26:d8:06:81:b7:bb:01:a7:16:d2:86:
33:14:2e:36:9e:08:d2:24:02:a2:9f:af:03:3f:8f:
af:7d:e0:1a:61:98:6b:b2:0c:7d:49:78:77:07:10:
bd:fb:3f:a2:9d:63:14:cd:6a:f1:03:dd:34:b3:eb:
94:0d:01:68:fd:4d:30:bb:51:7b:96:f1:56:aa:3a:
54:5f:93:22:e7:d3:0d:a7:3f:65:33:ab:29:2d:44:
0d:34:89:51:cd:79:e2:d0:54:7f:1c:f1:73:17:94:
3c:79:e0:16:72:a2:ff:9d:bd:dc:5f:68:5d:83:9b:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DA:B8:D0:C7:EE:B8:CD:D6:B7:A5:55:40:3D:75:F8:06:AB:74:91
X509v3 Authority Key Identifier:
keyid:18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ee:d3:16:ae:5a:96:9a:00:91:f3:11:91:82:c1:33:3a:f5:
7c:60:1e:9f:a3:56:7d:bb:c6:a0:9b:93:77:2a:a2:b7:04:9f:
9c:84:ab:09:79:65:81:15:1f:ee:0e:1b:b8:cb:c6:e7:de:3f:
5f:40:a6:51:3d:a3:85:66:15:bc:2c:7e:6b:c9:a2:f2:a2:5c:
7c:0e:81:24:23:2b:e3:04:bc:9c:fd:f8:ec:71:c6:15:ec:9c:
33:ce:ab:97:d3:0c:83:2b:da:98:7c:4a:90:30:1e:5b:36:f8:
35:80:8e:4f:3e:ae:a8:30:de:24:79:2b:fd:a2:fc:22:34:c5:
19:4b:db:87:09:c2:ac:c4:b8:d7:ef:a4:ac:b5:ca:36:6b:75:
2a:15:59:a3:ee:19:a9:56:00:99:00:c9:15:30:a7:a1:cb:7e:
2d:9f:b9:c4:fc:a8:f7:b3:c9:35:1c:88:ec:b7:80:44:3e:b2:
ad:31:08:ba:91:e7:84:2b:1e:2c:d8:f4:93:e4:dc:10:8b:e3:
7b:9f:c2:cb:16:ff:23:69:e3:c9:c4:f8:69:37:11:71:93:ce:
97:95:2b:31:f5:ba:a5:07:c0:4f:e0:e0:ab:d8:90:22:5f:e5:
2e:e2:7a:6b:54:5a:4b:ba:22:c4:b5:69:7c:69:24:9f:6b:95:
8e:45:57:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:40 2026 by rpki-client