Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier: ndWRFt3c7qximJNe1qC8NlT0RGBqqkv6qHVnxFBMELw=
Subject key identifier: 23:FA:E9:D3:33:ED:FD:3A:5A:DA:5B:54:D8:A9:D2:4F:E3:AC:45:77
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 01A17DE1B02CDF6D5A836C568CBD2548708E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 15:01:45 +0000
Manifest this update: Tue 27 Oct 2026 15:01:45 +0000
Manifest next update: Wed 28 Oct 2026 15:01:45 +0000
Files and hashes: 1: 1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa (hash: J9DAvhv9r0Mlaj2FFrH7O2ik+AlszrMRbhAMQDYeWAs=)
2: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: BG3NWE00PV6uLrxEXyx15SLF+fIwgd4k/+KXzvimBDg=)
3: sTs-6prOh5q4wA6a1OyyqtZ74q0.roa (hash: FFPnuFxlEdQJXEK42gi4uhiZA2nfgoW67T20PySbZn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 15:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:b0:2c:df:6d:5a:83:6c:56:8c:bd:25:48:70:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Oct 27 15:01:45 2026 GMT
Not After : Oct 28 15:01:45 2026 GMT
Subject: CN=23fae9d333edfd3a5ada5b54d8a9d24fe3ac4577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:5e:63:fb:2b:4c:f9:6b:8b:41:0e:76:80:
af:58:41:41:7a:56:ae:fd:2f:56:aa:6d:3a:4f:18:
ce:ea:65:df:fa:c2:5d:75:de:fe:0b:da:73:14:79:
9d:02:75:0e:2e:df:fb:c5:7a:a3:2f:6b:bc:f4:69:
9d:0b:0c:cd:e0:0b:2f:3c:32:b1:a9:00:32:fa:ed:
bf:d6:77:d7:20:4d:7f:50:91:50:d7:af:84:d6:6d:
8e:6b:e0:3f:ba:5d:92:0a:41:1b:b1:64:5b:d2:06:
1e:ad:66:3d:a6:a5:42:73:57:23:4e:3a:40:50:96:
d0:67:2a:42:c9:e3:58:15:e6:94:cf:f9:4b:c7:62:
27:46:8a:ae:64:bd:8d:8b:7e:db:48:a3:61:17:83:
39:93:e3:3a:6e:46:37:4f:c9:d1:b8:59:4b:ed:08:
8f:8f:1c:90:8e:cf:7f:47:0a:59:7b:bc:05:6f:e6:
c8:ab:87:ad:33:7d:2a:06:3c:eb:2b:77:2e:ee:a7:
28:66:01:eb:a0:99:fd:e5:50:7d:c4:b5:44:53:c6:
46:51:93:2e:d1:fb:56:27:b6:02:d0:45:7e:6a:6f:
93:bf:5f:31:2d:c6:3e:84:de:da:78:1a:7e:54:2c:
6d:da:7d:0e:2b:b6:a4:e2:2e:69:8c:a3:42:04:6f:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FA:E9:D3:33:ED:FD:3A:5A:DA:5B:54:D8:A9:D2:4F:E3:AC:45:77
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:88:f3:37:7a:35:50:f0:17:7e:dd:67:81:2c:06:87:f6:03:
9e:1e:78:69:66:ec:fc:bf:dd:11:61:70:9b:f5:54:e5:b6:d9:
19:d4:25:a1:a2:64:6e:cf:c5:9a:7d:b5:73:5c:3f:82:cf:41:
d1:61:ec:29:1d:27:47:d7:e0:b2:58:65:a2:7a:b8:9c:17:06:
5e:15:6a:4e:b4:e8:0d:f0:b8:f8:07:ca:b7:b7:f5:67:90:04:
ed:9a:28:ed:8c:16:e7:60:72:a2:78:9a:f5:2f:5c:22:3b:1a:
a8:31:92:ee:de:92:c1:6d:24:62:73:ee:cc:80:3e:b1:71:94:
f6:b2:7e:2b:a0:e6:30:e4:cb:cd:03:60:ee:aa:44:27:7d:4c:
a1:f2:0a:19:aa:72:58:1b:b0:da:08:88:11:bf:59:15:ff:4d:
e5:d4:e9:c7:75:07:43:95:88:74:13:14:23:64:93:b0:c7:94:
75:29:45:7d:e3:16:5c:84:e9:50:95:cd:6d:b0:c5:94:2e:1d:
3e:11:14:c7:52:10:d6:ed:74:fa:77:09:f9:0c:91:63:59:58:
c8:09:2f:30:2f:69:d2:5a:e6:07:22:ca:f4:43:c5:14:94:80:
0a:96:8c:7e:0c:fe:b5:16:ad:07:64:7c:f5:51:bb:6c:ee:39:
e6:97:ad:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:47:03 2026 by rpki-client