Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json)
Hash identifier: iQT8HseSATQCQ8YhFApZodEIlVrBH2E5G5pQoMxr8Nk=
Subject key identifier: 4E:0E:93:46:39:AA:FE:5A:32:8C:60:A8:4F:80:82:5D:65:43:0A:F1
Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Certificate serial: 019D3977DBD32F47DB496425E9EF72B7ED7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
Manifest number: 0DB6
Signing time: Sun 29 Mar 2026 12:00:49 +0000
Manifest this update: Sun 29 Mar 2026 12:00:49 +0000
Manifest next update: Mon 30 Mar 2026 12:00:49 +0000
Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: yh2drcfqyV/N64pD6gs0xpSjttEUbl4dVOpILV02/D8=)
2: HnXupNyU6Ln1DvOJmDwyBCuBye8.roa (hash: e7NeeQetnUXIz/cPikG/o99FtcutUK+Ayg5ZE+4XzYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:db:d3:2f:47:db:49:64:25:e9:ef:72:b7:ed:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Validity
Not Before: Mar 29 12:00:49 2026 GMT
Not After : Mar 30 12:00:49 2026 GMT
Subject: CN=4e0e934639aafe5a328c60a84f80825d65430af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:1a:48:04:d5:d5:a4:62:bc:bf:26:10:a2:
db:5f:87:8a:b5:0a:df:d6:76:11:46:51:63:6f:1e:
ae:f2:7c:18:e3:af:b1:c6:0a:54:f3:29:b5:6f:59:
c2:4d:92:96:15:0d:77:68:31:ec:64:8f:9d:58:c9:
d4:38:08:d8:53:92:0c:98:a4:a4:b6:39:f0:3c:d4:
30:78:f5:0a:ad:0c:b7:00:8d:93:19:6e:a3:6f:ba:
37:f6:22:36:76:4f:1e:8c:aa:14:54:ce:e3:19:1c:
5d:3d:f5:6d:63:b7:92:1d:af:ae:9d:aa:c7:81:2c:
2e:92:b2:27:3c:e4:e2:26:de:72:4f:8f:16:0e:df:
fa:b7:52:e7:40:0b:6d:ac:14:41:44:5c:17:9f:7a:
c9:bc:2f:2c:8d:43:8c:ea:c4:18:d0:3d:f2:65:0b:
35:df:a3:fb:dd:f2:8d:81:98:b5:04:b0:57:7e:aa:
d6:b5:c5:a1:ad:04:20:18:fc:e1:f1:a0:b1:c9:f8:
a8:04:77:bb:ef:ac:a3:cf:81:95:33:d0:23:95:52:
49:0d:cb:87:34:c7:6c:08:5a:2a:4c:89:d6:68:14:
00:ea:7d:e3:3a:0e:19:99:5e:61:09:e0:3e:3e:5c:
24:73:cd:4f:4f:88:7e:1b:cc:ed:eb:f7:0d:de:81:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0E:93:46:39:AA:FE:5A:32:8C:60:A8:4F:80:82:5D:65:43:0A:F1
X509v3 Authority Key Identifier:
keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c3:52:8d:d0:85:76:61:7e:fe:5f:d9:40:37:4c:41:51:d6:
1b:9b:da:eb:5f:ea:92:c1:4b:6d:d9:ad:24:8d:ec:92:64:8b:
d1:d5:64:7c:45:e6:6a:52:de:3a:ef:4a:a0:9f:f7:47:44:8e:
94:7d:d4:c2:25:d0:83:0b:2d:63:d3:af:69:42:7e:13:e0:65:
9a:16:fe:43:57:bc:a2:5d:d5:74:d6:95:db:8d:f0:10:8d:80:
6c:87:b0:9d:9c:d4:50:61:94:2c:9e:41:07:fd:35:a0:11:da:
00:f9:4c:15:76:32:4c:39:6d:b4:2b:23:bd:90:a8:1f:50:52:
a1:2d:4f:df:b5:e1:78:96:09:00:d8:01:b0:48:9b:7a:bf:0d:
fa:55:f1:3b:9e:e0:ae:2c:74:89:35:3f:11:95:cb:a7:f6:08:
9a:41:ef:22:fb:9e:5e:98:e0:b9:e5:bf:e6:36:5c:25:f4:c3:
4d:62:dc:72:24:5a:c6:7f:08:e4:fe:8e:bd:4e:04:c7:a9:37:
9e:eb:50:bf:d6:14:dc:df:bc:74:14:6c:6b:12:76:7e:3f:f1:
9d:3c:dc:b5:e8:5a:bf:e1:14:51:31:3e:d9:22:f8:6a:fe:ae:
ed:e6:51:39:01:37:19:d8:55:dd:6b:f8:b2:86:76:15:13:07:
53:18:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:42 2026 by rpki-client