Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json)
Hash identifier: +4PR29/+MPUOlRdHc8eABZFaaYk3Z8MgcOBcXhA/MOw=
Subject key identifier: 6D:15:7C:BB:BE:C7:CF:C4:6E:E5:C1:06:64:56:F2:8E:74:9E:F5:A1
Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c
Certificate serial: 019D3865DF2BED31191A11BFD488FFB053C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:33 +0000
Manifest this update: Sun 29 Mar 2026 07:01:33 +0000
Manifest next update: Mon 30 Mar 2026 07:01:33 +0000
Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: QKS/6k81NB894ap1k/2E/PflOr4iSITDI6i8qsdIMzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:df:2b:ed:31:19:1a:11:bf:d4:88:ff:b0:53:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c
Validity
Not Before: Mar 29 07:01:33 2026 GMT
Not After : Mar 30 07:01:33 2026 GMT
Subject: CN=6d157cbbbec7cfc46ee5c1066456f28e749ef5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:37:83:8a:a0:f4:fe:5a:a5:45:7f:27:4b:
7a:19:ef:01:f3:5b:14:28:6e:eb:44:3b:24:b9:3a:
18:67:82:49:36:9f:10:9b:3f:31:b5:c2:48:03:58:
2b:23:cb:6d:28:c0:1d:9d:49:d3:2b:35:09:83:c9:
07:69:c2:45:7c:bf:07:02:ab:4b:cd:a3:ab:05:01:
24:56:d6:a6:61:9c:c0:e3:2e:1c:d5:fd:af:72:a0:
df:3a:c6:c2:ad:37:57:90:9d:b4:c8:9c:20:99:c1:
67:11:f6:c6:29:c0:70:f9:3f:f7:be:37:8f:a2:47:
2d:77:fa:32:36:96:bc:5f:86:d7:19:a4:e1:e4:f5:
14:92:8c:2b:ec:7b:18:8e:76:8c:97:8f:16:21:e9:
de:b9:79:27:4b:2e:e7:7d:b4:d3:bd:e6:7b:42:c1:
48:09:9c:18:ed:44:4b:8d:20:7d:3f:90:be:0c:6e:
29:3d:4e:ae:ee:e6:93:d1:b0:17:bc:cd:4b:54:f0:
9b:43:fd:aa:69:45:89:e5:f5:63:83:ec:76:2b:ab:
0a:24:30:d0:2f:93:a3:38:e7:e8:ca:03:91:a6:ba:
c7:49:c7:9e:9c:eb:c9:55:a0:7a:cd:69:82:ef:35:
b2:db:3c:52:bb:e8:4a:5f:f7:15:81:d5:f9:89:ee:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:15:7C:BB:BE:C7:CF:C4:6E:E5:C1:06:64:56:F2:8E:74:9E:F5:A1
X509v3 Authority Key Identifier:
keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9a:5f:68:57:78:10:e0:59:2f:5c:91:4a:54:b1:95:a8:a3:
91:6e:c5:85:42:3d:42:11:4b:aa:fa:19:84:c2:26:1d:98:3e:
bb:df:f0:62:fb:f7:1f:06:5b:a3:64:44:1e:8c:c9:43:1b:f4:
a1:ae:bb:24:37:e8:50:7a:71:e0:32:1d:72:b5:c5:9d:3a:7f:
61:93:75:a5:a2:3b:99:d8:e5:96:93:15:2a:7e:70:fe:ba:e4:
0d:c6:0f:32:11:d0:71:e6:08:19:f2:78:e5:0b:d8:60:b1:ac:
cf:26:6a:e2:70:7f:e0:94:49:56:e4:b9:12:31:11:8a:1b:df:
3a:cf:08:0a:d1:a1:ca:32:84:02:18:92:1f:bd:4b:27:34:6a:
c4:22:32:b8:4c:ce:80:c0:30:c5:92:b9:bc:80:8c:d5:85:a7:
f9:7a:26:e2:bc:0f:c9:e9:62:20:0d:c3:41:0c:36:53:85:68:
eb:22:42:f3:3d:a3:e6:57:82:cd:43:3c:95:4a:ba:3b:ea:71:
ac:12:74:a2:f8:21:66:41:dd:7c:ff:cb:65:16:04:df:d1:89:
c0:53:f6:14:f9:c8:61:26:a5:56:06:23:d7:3a:f2:3c:c0:97:
93:23:f6:4b:9d:db:fc:0c:df:9c:c0:54:54:2e:67:bc:f5:47:
6a:02:f5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:41:03 2026 by rpki-client