Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: JLiV1lhpS5CAYmPTwHNa4nVDQWf/HHjxTGHajfHmNyo=
Subject key identifier: 7E:20:13:45:73:22:82:EF:2E:9B:C0:29:64:7F:9D:67:95:7F:2D:FC
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 019D386635107E315246F798B8A9F78A5113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 0D45
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: OJPq621tcEBawowqRkZikbnOWfsOuGotFgCtfLw1MkE=)
2: HS3nZ0zy9rnKNuUQJIH2lNuhV3s.roa (hash: AgTDhdZgzXbDinGCbfeqfnNTye+ByZ5TlKKfMLNM5jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:35:10:7e:31:52:46:f7:98:b8:a9:f7:8a:51:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=7e201345732282ef2e9bc029647f9d67957f2dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f3:56:cb:19:04:5a:6f:69:7e:50:70:6e:bc:
5a:18:cf:6a:3a:ae:da:b9:8c:85:89:2f:03:c8:c9:
48:a9:ad:6b:9d:e5:72:3e:62:30:47:c8:f3:76:8b:
91:56:ef:10:59:f4:f1:da:92:10:16:f8:3c:f7:85:
6d:a5:9a:10:78:a7:66:a1:57:4e:c9:b4:3b:79:35:
3d:cd:cc:a7:3b:26:10:1d:fe:e5:de:e0:33:3a:ce:
96:d8:c9:08:cb:8b:34:a0:f0:b6:b1:97:10:42:88:
da:46:00:e7:0d:09:72:3f:8b:95:9f:1d:74:8d:64:
0a:ac:9b:eb:e1:75:c0:1c:2f:80:11:b4:76:1e:7b:
f7:29:4d:54:52:1e:a3:1a:f4:a9:6f:e2:f5:71:b4:
84:58:ee:2c:a5:2e:c7:7d:02:4b:10:cc:2e:3e:58:
1a:24:85:2b:c9:11:dc:7f:c5:c0:95:f9:a5:c2:a0:
7d:85:7c:25:73:71:2f:30:17:70:1c:95:73:1e:3e:
e5:66:d9:e6:1b:c0:97:89:78:8b:bd:4b:ed:15:b0:
6e:30:d5:d1:e3:a7:a1:3c:a6:3d:f8:5c:1a:1f:a7:
3f:15:35:3f:81:ab:97:5f:33:99:08:17:9b:46:82:
6a:6b:17:4a:5b:44:8b:4e:c9:03:0e:d0:15:a7:55:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:20:13:45:73:22:82:EF:2E:9B:C0:29:64:7F:9D:67:95:7F:2D:FC
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f8:a3:3f:1e:78:ef:ee:ae:68:49:7e:ab:b0:0c:be:ac:04:
61:28:77:81:6f:d3:85:a2:3c:a0:af:41:72:5d:6d:5a:94:1f:
0f:d6:ef:5b:1b:7e:20:b8:2e:b7:16:ee:14:3a:53:4e:9f:2e:
ac:8c:05:e5:d7:17:fc:3a:1e:df:cb:3e:a2:7e:5f:da:0c:a3:
a7:20:05:d0:48:7d:ce:d3:47:16:79:47:c3:0a:e0:fa:85:d4:
12:81:df:4d:84:43:4e:88:56:c1:19:93:1f:5b:d9:06:86:12:
a5:87:a1:5c:be:32:bf:4d:64:a2:12:c9:d1:41:c9:1a:7e:58:
a7:cb:74:25:4a:9d:19:d9:ea:6c:57:82:25:fa:a7:35:c1:6a:
06:c9:93:4d:c8:7c:32:fc:50:cd:cf:5f:7f:b7:65:9f:c1:08:
f3:ef:e2:64:98:41:5f:7e:02:c1:bc:85:e3:45:fd:a2:ac:bb:
83:d0:6b:ab:bb:31:2a:59:bc:67:70:63:89:d5:21:1f:dc:86:
7b:3c:be:2b:84:74:6c:21:6e:6d:54:8a:7d:5e:72:e3:0d:c0:
85:d6:c9:81:84:f5:0a:86:fd:d0:7b:53:1d:dc:e0:1d:83:e0:
01:72:b4:1c:71:bc:cc:fe:b1:7d:b4:da:b8:31:f1:e1:81:08:
4a:75:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:45 2026 by rpki-client