Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
File: GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json)
Hash identifier: pl5NF3bXW0Ph0SIeQs/eTRR6LVTBVLWDin2N8lUPqD4=
Subject key identifier: 4B:79:BD:03:7B:A3:19:E7:39:5F:F6:56:80:87:7F:E0:C7:78:E4:CD
Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
Certificate issuer: /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Certificate serial: 019D389C11F2EFB68079EB4C2E555A346A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
Manifest number: 04F5
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: xPKvVZzvWiG+K0/d9jav9lj8ALaixCHFE7CHoy96nfE=)
2: UFE842JQ7HXlV4O8ypyYJqZjKxo.roa (hash: d4GAUahRXjgUNYF+NjmfLkIgWSJGMgXblr9oMS3knEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:11:f2:ef:b6:80:79:eb:4c:2e:55:5a:34:6a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=4b79bd037ba319e7395ff65680877fe0c778e4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:65:29:51:5f:b9:8c:ea:52:8b:05:2b:7a:
f8:a0:a0:58:a2:f4:c7:ff:60:48:b2:c4:0d:09:bc:
e9:f2:c7:2c:f3:95:a6:1f:a5:62:94:14:03:63:11:
63:73:45:ca:cb:df:0b:bc:04:2d:78:87:08:be:13:
04:42:08:d9:92:90:53:98:e2:2d:de:0d:cd:bb:c5:
60:b0:fd:a2:56:e7:dd:7e:94:ab:18:6a:89:ae:8a:
95:4d:83:09:e3:3a:38:eb:4b:13:55:fb:b3:83:97:
63:8a:1d:6c:93:d3:fa:30:3c:a0:f9:e9:09:20:5c:
89:56:9f:90:b8:09:0d:74:9b:10:93:8e:0a:38:c5:
30:34:3e:cf:4d:cb:5a:de:ef:f6:b6:9c:12:9d:7e:
fd:d8:ff:de:59:7c:48:7a:0b:c2:c2:85:cd:14:0b:
60:71:e0:34:9b:7d:21:34:4f:83:72:8d:c4:10:ea:
14:8b:41:c2:17:03:4c:25:f2:de:08:96:10:63:4d:
bd:69:5f:e9:7e:f6:6d:f6:49:88:87:70:d4:fa:fa:
25:6a:f5:d9:a7:94:36:8b:44:e7:99:42:ea:d0:7e:
df:0d:7e:d8:8f:3e:a4:bc:84:d5:99:68:36:a2:c7:
12:54:1e:be:0b:33:eb:ef:fd:45:99:0b:f2:11:9e:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:79:BD:03:7B:A3:19:E7:39:5F:F6:56:80:87:7F:E0:C7:78:E4:CD
X509v3 Authority Key Identifier:
keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0c:a0:11:9e:77:1a:44:3e:a0:d1:c1:ef:e8:55:cd:0e:5d:
e8:85:61:42:f1:79:c7:52:81:5b:f0:2e:2d:5b:f5:fc:ff:6a:
01:b1:1a:15:57:78:8f:22:e9:0a:f1:73:58:17:bc:7c:0c:f1:
fa:ad:ad:28:b2:6a:9e:ed:ae:9f:e1:4e:e5:0f:bc:41:72:02:
96:8d:2e:3f:d6:8e:e0:78:e0:00:68:94:57:90:f4:c3:12:f8:
69:aa:11:55:6f:8a:20:eb:e4:c8:8c:53:ce:04:c2:d3:37:7d:
b0:ae:0f:29:50:07:66:70:61:6d:2d:c9:2a:5d:0a:70:b2:11:
34:12:29:20:d8:b7:77:fd:25:15:8a:90:ae:ea:02:c9:6a:aa:
b6:01:ca:cf:fc:d3:64:3b:e1:7b:d8:5e:b5:11:1f:bc:ca:12:
75:6c:22:fa:86:bb:a7:03:d8:83:17:c6:16:d4:29:39:4f:c4:
09:57:c1:d4:7d:eb:8e:93:85:12:98:de:35:b5:bd:d7:67:b1:
4a:65:83:42:53:a9:e9:d6:c2:ff:81:be:c3:c2:c0:c1:1d:8b:
b0:ba:0f:8f:48:5d:d2:ba:cc:9c:0c:c7:8b:e1:41:24:27:68:
f5:0d:7b:3f:c9:45:24:41:e2:54:1e:ab:17:cf:e1:35:7d:76:
1c:cd:7c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:06 2026 by rpki-client