Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
File: GPJ8DAs13dQruJLBaEWmOwAnocc.mft (raw, json)
Hash identifier: PNCpJDgHqbuKUV9lplRkDRuKgaLHnPXHbCVaYSFHB2Q=
Subject key identifier: 22:F2:64:B0:78:5E:01:CC:CE:45:D8:8D:C6:82:BB:50:88:B0:2B:5B
Authority key identifier: 18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7
Certificate issuer: /CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
Certificate serial: 019CB9CBD87AA2CC3C632CE3C5F3130CD50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
Manifest number: 034D
Signing time: Wed 04 Mar 2026 17:01:10 +0000
Manifest this update: Wed 04 Mar 2026 17:01:10 +0000
Manifest next update: Thu 05 Mar 2026 17:01:10 +0000
Files and hashes: 1: GPJ8DAs13dQruJLBaEWmOwAnocc.crl (hash: i1GJoVjkEYGI2cFTf4pXoaCqPTzNe4wpnEX90wz0bLw=)
2: RqlCRGLn8WCi_decwvLY1MH3NJ0.roa (hash: e6wtpCGhTAbBzVr4hSDCQshEk7sSjJ31RaQhsBrVJiY=)
3: kZzi5najCOiRoP0WLMWI7hCvztc.asa (hash: b2P8/xQuWtMN9fdhE+2aiLpTbdQceFn+w65LkW+vfwc=)
4: soR2pwiyOc7dgIHXlwP-PMnXsm0.asa (hash: 5F0rJLaw/NXlRPUerx6WnmlN2zMQswFy06aLsh2Eurw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:cb:d8:7a:a2:cc:3c:63:2c:e3:c5:f3:13:0c:d5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
Validity
Not Before: Mar 4 17:01:10 2026 GMT
Not After : Mar 5 17:01:10 2026 GMT
Subject: CN=22f264b0785e01ccce45d88dc682bb5088b02b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:d9:fc:f9:dc:4c:60:59:f1:0f:20:58:31:
8a:92:81:54:92:03:98:73:f4:16:9b:b3:be:58:7c:
93:f6:eb:bd:a5:80:53:ec:3e:0f:9f:20:06:19:3e:
0c:ab:c6:7d:95:df:d9:3b:c9:96:eb:e5:1c:6c:98:
2d:d9:1b:da:32:9f:b8:a5:f3:87:54:b3:38:64:05:
63:30:0c:47:bd:19:b4:dc:09:d0:79:9b:2d:5a:1e:
be:c0:d9:c8:6c:59:ce:e1:05:3d:1c:ff:17:a1:c0:
dd:1d:45:ae:a5:a7:b5:26:ab:64:de:e9:73:12:5a:
22:af:ee:85:eb:59:66:8f:2b:52:b9:fa:4f:05:1a:
2c:f4:59:fd:49:c3:c6:bd:d5:39:ad:dc:41:e6:eb:
36:b2:5f:f1:f2:52:39:54:cf:63:96:d0:2e:2a:08:
46:7f:12:85:69:09:10:a3:0e:d1:b9:31:9c:7c:26:
87:41:b1:28:88:4f:db:dd:14:87:8d:dd:05:00:84:
4d:a5:e0:19:74:0f:f8:3a:1d:3e:6b:59:54:d4:43:
d7:02:b7:bc:55:5f:f7:bd:0f:b6:b3:67:72:70:07:
a7:3d:bd:ee:3e:c5:eb:52:0c:b5:22:41:c2:f8:58:
67:28:be:37:a9:01:08:c7:77:96:16:77:6d:c9:34:
05:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F2:64:B0:78:5E:01:CC:CE:45:D8:8D:C6:82:BB:50:88:B0:2B:5B
X509v3 Authority Key Identifier:
keyid:18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:33:8c:07:49:3c:1e:e8:06:3e:49:8f:e6:72:c9:1c:e3:76:
ae:94:84:67:47:0f:45:3f:c3:ce:ff:6d:50:fa:d8:5e:b0:27:
f7:76:fd:7b:c3:16:ad:71:d5:f2:c6:c7:59:1b:b7:69:5c:d4:
bf:29:b9:d2:58:5c:d5:f2:ce:fc:ce:15:39:d6:e3:54:d6:77:
1b:41:8f:f3:b8:b5:96:e4:d3:98:a1:37:6b:f3:f5:b9:e6:96:
4b:96:67:03:64:76:be:59:2c:8e:a8:60:8a:3d:49:59:ef:49:
be:8a:13:98:e5:64:72:65:0e:3e:1b:d3:2a:ed:94:f9:80:a1:
5e:0a:17:25:74:a5:33:af:fd:59:0d:36:23:2c:ba:10:e8:65:
f0:7c:f6:2d:b4:97:e0:7f:d8:2e:2d:d7:92:26:d9:47:66:6f:
1b:1d:b5:b7:70:c8:d7:54:7f:17:50:e4:ba:34:b5:85:f2:f9:
16:27:cd:3a:dc:5a:0f:f4:bf:7f:d6:7e:45:69:c5:7d:62:1c:
91:db:77:2f:76:9c:6b:ae:d6:26:6b:7c:e0:6e:6d:09:7f:8e:
f5:f9:ff:19:9c:db:36:76:40:17:9d:63:82:7b:2c:73:8b:55:
fc:d1:2a:7b:34:ef:bd:76:76:30:4a:f3:a8:0f:0b:2d:80:6e:
8c:db:6a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:25:16 2026 by rpki-client