Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier: Lnans8m4+V79BURBz1HBQ7ygNnjDCtPOuiiEmWsaHkA=
Subject key identifier: 06:C7:05:7F:BF:1A:E5:C9:68:90:E6:33:8F:9C:27:0C:BD:E9:6C:0D
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 019D3752ABA880FA5B646856C90B81EA9691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number: 09FF
Signing time: Sun 29 Mar 2026 02:00:57 +0000
Manifest this update: Sun 29 Mar 2026 02:00:57 +0000
Manifest next update: Mon 30 Mar 2026 02:00:57 +0000
Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: b0Wj7G/T4dF+RwvThUVFYnhWNxgXcoTzDr9gM7S25p4=)
2: IjGrmYJ01VhSBHqQt8lEwuCam0E.roa (hash: wRhA0UxHh3OEkpsw+jN2w//ZJrtHgK8+FbKZBNihmv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ab:a8:80:fa:5b:64:68:56:c9:0b:81:ea:96:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: Mar 29 02:00:57 2026 GMT
Not After : Mar 30 02:00:57 2026 GMT
Subject: CN=06c7057fbf1ae5c96890e6338f9c270cbde96c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:fb:a9:0f:6b:2a:ed:c7:06:a6:dd:3f:aa:
60:73:b7:96:39:cf:b0:fd:f4:be:10:92:b9:a6:74:
c1:5f:4c:e2:8f:b7:83:bc:e8:61:33:0b:5b:44:25:
c9:a7:8f:d0:70:c9:6d:c9:37:55:e4:cb:d5:3d:e5:
85:c2:d8:ce:2c:f9:6a:59:62:88:64:62:9c:8a:ae:
5a:4c:45:53:b0:80:b5:14:42:16:6c:e1:4e:70:e7:
87:94:0a:7e:c2:31:bc:95:45:89:12:20:f2:41:b8:
1b:be:e3:2e:b7:35:a9:1c:47:b4:40:31:85:27:5d:
98:49:e1:48:14:05:40:0f:13:c8:42:1e:8a:f6:3c:
09:6e:fd:68:37:df:47:34:59:d7:52:29:21:7f:f5:
06:d1:bf:aa:bd:a2:5e:e5:90:5d:00:38:15:64:ec:
f5:bc:30:40:a3:c2:58:8b:01:15:3b:ba:b2:b9:b4:
a4:f9:4f:81:12:4e:ba:e3:7a:9e:6d:03:b7:48:2d:
cc:2c:ea:25:c7:55:bc:ab:6b:10:0a:e0:30:e2:d8:
76:3f:70:da:eb:bf:3e:76:6d:d5:ca:db:9d:c8:09:
2f:14:d1:a1:42:5a:91:e2:e9:07:8e:03:f2:2f:c2:
3f:ed:fb:16:10:dc:27:c3:40:1f:9a:ae:c6:1c:9f:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C7:05:7F:BF:1A:E5:C9:68:90:E6:33:8F:9C:27:0C:BD:E9:6C:0D
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:40:e4:da:b5:0f:a2:2d:4b:25:29:b1:83:7a:a8:b3:5b:67:
c9:d9:1f:f6:6d:a7:c2:7c:08:44:39:90:f5:49:7a:b6:10:c1:
a4:c8:84:96:63:ad:1a:78:fc:6f:4b:66:25:8e:a5:e1:81:c7:
64:bf:55:b3:f0:a5:f2:3b:5f:68:d6:ce:ff:97:2c:4e:62:e6:
95:9e:90:45:c1:33:a0:ba:f8:78:c6:e8:a6:86:3e:01:a8:68:
a4:e2:fa:3d:0f:5b:7d:ac:e5:87:33:35:23:c3:8d:f1:f6:c7:
13:a0:46:c5:2f:a5:c6:da:06:16:54:80:e3:c0:a6:58:c1:94:
13:29:3b:37:5b:41:2a:b1:e5:d1:2f:03:e3:3c:47:e3:e3:0e:
68:76:32:05:d2:f0:28:f1:76:03:ac:96:d7:69:a4:fa:f4:ae:
28:a7:a3:b5:ce:72:71:f9:89:50:28:8c:14:b3:c3:d3:4f:a8:
32:34:49:a1:e8:b0:3a:be:07:e6:cf:f9:d8:15:f2:a3:03:42:
17:34:5f:0a:9d:aa:1c:62:80:85:c8:74:a2:b5:c4:04:fc:49:
71:77:2b:9f:34:ef:2e:ca:e8:f4:f3:e2:b8:1c:9b:6f:f8:46:
8f:13:15:62:95:be:27:a9:e4:2c:0e:fe:b8:43:f7:60:20:41:
d2:66:1f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:45 2026 by rpki-client