Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
File: GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json)
Hash identifier: w0un4Ou+30eM4PTRGtrK6GjVQz3TnTyCrB9G5P+JPRI=
Subject key identifier: 3E:60:05:23:27:76:89:9D:F2:B3:0B:E2:A1:0A:E2:09:4E:C6:BA:A5
Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
Certificate issuer: /CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Certificate serial: 019D3865F972D90066DF5318CDE99FD4E72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
Manifest number: 14BE
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: XugQBAy5uvFflyH7r0P4DR4OD699vfquV5CoUGvR7eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f9:72:d9:00:66:df:53:18:cd:e9:9f:d4:e7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=3e6005232776899df2b30be2a10ae2094ec6baa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:67:dd:d5:8d:3a:15:1b:c1:68:7e:5d:3e:3b:
ff:eb:f0:76:cb:c6:22:64:3c:d0:26:48:59:b6:92:
67:ba:30:1f:0f:7e:07:4c:bf:84:e0:aa:e7:2a:be:
b6:05:52:bc:38:53:df:3f:b2:f8:ef:3c:f6:46:ad:
de:bb:97:14:08:12:c6:c1:dc:94:f0:df:f2:19:0a:
17:b0:59:1d:c6:70:d8:66:a9:4f:49:19:af:9c:8b:
6d:a5:1f:ab:e8:19:bc:30:6f:c4:fb:43:be:38:c9:
df:a1:31:46:e5:ce:3b:6c:0c:87:1f:07:3e:2d:71:
8f:61:f9:66:ed:12:e6:7b:06:0c:c3:09:06:1f:2e:
a3:c1:f0:b1:c5:69:a5:f3:1d:01:e3:48:e1:5f:ab:
23:17:ed:4b:aa:c4:c4:8b:b4:a3:0e:3e:94:95:1d:
c5:70:62:8f:45:3d:9f:40:db:9f:b7:ae:7c:71:0e:
ae:c1:20:2e:b1:69:b3:94:6b:5c:d6:1c:65:16:cf:
c9:44:91:94:d4:45:86:37:2a:38:5a:b8:d1:2f:30:
0a:7b:dc:90:39:d4:5c:b9:51:60:83:29:63:62:ef:
6b:a9:bd:66:c4:48:87:7a:28:6c:0d:54:f9:ec:42:
63:84:4f:08:1d:c8:b5:6f:c9:3a:04:11:82:54:a2:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:60:05:23:27:76:89:9D:F2:B3:0B:E2:A1:0A:E2:09:4E:C6:BA:A5
X509v3 Authority Key Identifier:
keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:41:cc:6a:62:65:97:02:97:95:87:4b:a2:b1:7b:d3:21:e6:
e6:16:8f:dc:c0:13:63:aa:3f:60:5b:26:2f:0c:3c:2d:f8:f8:
fb:d9:6b:d4:c3:90:30:aa:0f:91:ca:cf:e8:47:09:17:2c:77:
21:7e:a2:d7:f8:59:e8:fd:de:ed:86:eb:0a:60:57:bf:34:ff:
81:f8:61:0a:14:a4:3b:9d:f3:90:39:53:64:3e:57:ec:71:f3:
5c:56:e4:60:33:35:fa:5b:1f:2c:82:5a:09:a7:bc:83:87:d9:
e3:4e:ca:75:30:fc:cd:2e:39:ad:09:c2:e7:57:00:e9:08:53:
99:92:ea:12:35:b1:a2:e7:16:07:90:7a:94:37:bd:27:ce:1c:
5f:54:05:84:9a:e6:f4:36:09:f9:1a:c7:23:6c:36:9d:59:aa:
2c:b0:63:54:e9:1c:65:34:86:d6:0e:6c:b5:9e:55:f4:84:fb:
75:15:0b:7c:b1:0f:1f:37:b0:9f:ec:59:41:2d:f1:d5:47:4f:
08:3f:62:57:f1:57:9b:a1:ee:3f:ec:25:e3:62:b4:88:60:b5:
1c:81:a4:b9:a6:38:41:8c:43:c0:43:77:8c:bc:a8:7d:c7:27:
5c:c9:b8:26:27:20:9e:6a:a8:a8:dc:92:99:8a:47:d9:63:91:
fe:81:f9:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zfly2QBm31MYzemf1OcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTcxNzVlYWFlMTBiMTZhNDE1M2I3MGE1Y2ZkNzY4Yzdi
NTE5OTAwHhcNMjYwMzI5MDcwMTQwWhcNMjYwMzMwMDcwMTQwWjAzMTEwLwYDVQQD
EygzZTYwMDUyMzI3NzY4OTlkZjJiMzBiZTJhMTBhZTIwOTRlYzZiYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWfd1Y06FRvBaH5dPjv/6/B2y8Yi
ZDzQJkhZtpJnujAfD34HTL+E4KrnKr62BVK8OFPfP7L47zz2Rq3eu5cUCBLGwdyU
8N/yGQoXsFkdxnDYZqlPSRmvnIttpR+r6Bm8MG/E+0O+OMnfoTFG5c47bAyHHwc+
LXGPYflm7RLmewYMwwkGHy6jwfCxxWml8x0B40jhX6sjF+1LqsTEi7SjDj6UlR3F
cGKPRT2fQNuft658cQ6uwSAusWmzlGtc1hxlFs/JRJGU1EWGNyo4WrjRLzAKe9yQ
OdRcuVFggyljYu9rqb1mxEiHeihsDVT57EJjhE8IHci1b8k6BBGCVKLglwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5gBSMndomd8rML4qEK4glOxrqlMB8GA1UdIwQY
MBaAFBgXF16q4QsWpBU7cKXP12jHtRmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JjWFhxcmhDeGFrRlR0d3BjX1hhTWUxR1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83YjE4NDgtNzRmMS00OTdkLTlmZjYt
NWQyMTM0OGE2M2M4LzEvR0JjWFhxcmhDeGFrRlR0d3BjX1hhTWUxR1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83YjE4NDgtNzRmMS00OTdkLTlmZjYtNWQyMTM0OGE2M2M4
LzEvR0JjWFhxcmhDeGFrRlR0d3BjX1hhTWUxR1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEHMamJl
lwKXlYdLorF70yHm5haP3MATY6o/YFsmLww8Lfj4+9lr1MOQMKoPkcrP6EcJFyx3
IX6i1/hZ6P3e7YbrCmBXvzT/gfhhChSkO53zkDlTZD5X7HHzXFbkYDM1+lsfLIJa
Cae8g4fZ407KdTD8zS45rQnC51cA6QhTmZLqEjWxoucWB5B6lDe9J84cX1QFhJrm
9DYJ+RrHI2w2nVmqLLBjVOkcZTSG1g5stZ5V9IT7dRULfLEPHzewn+xZQS3x1UdP
CD9iV/FXm6HuP+wl42K0iGC1HIGkuaY4QYxDwEN3jLyofccnXMm4JicgnmqoqNyS
mYpH2WOR/oH5fw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:16 2026 by rpki-client