Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier: 2WjssaClc1oKvt00iplwTfkXgcn7M3yN9G9717GO7XM=
Subject key identifier: 52:93:3B:1B:3F:E1:B8:8A:1A:E8:7D:98:71:3A:CB:F2:21:31:FE:B3
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 019DCE2B98AB50FF9BBAF912F19B9131690D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 09:00:56 +0000
Manifest this update: Mon 27 Apr 2026 09:00:56 +0000
Manifest next update: Tue 28 Apr 2026 09:00:56 +0000
Files and hashes: 1: 1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa (hash: J9DAvhv9r0Mlaj2FFrH7O2ik+AlszrMRbhAMQDYeWAs=)
2: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: 8HiswcgTmUaVTFHGMSkgkXB9b6la4OtnwfU3rC4mZgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:98:ab:50:ff:9b:ba:f9:12:f1:9b:91:31:69:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Apr 27 09:00:56 2026 GMT
Not After : Apr 28 09:00:56 2026 GMT
Subject: CN=52933b1b3fe1b88a1ae87d98713acbf22131feb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:78:4c:92:0f:2e:e2:bb:ca:7c:4a:dd:25:bf:
47:c9:5b:b0:27:31:8b:d1:66:4f:f6:8f:6e:70:e7:
7e:19:f1:d0:9e:fa:b6:83:e3:57:09:3f:78:cf:43:
b7:49:40:e6:22:8c:4e:69:3e:37:30:4c:d3:2f:51:
1f:c2:25:f7:74:a5:69:b2:3f:2e:9c:a2:28:bd:6d:
12:3a:e9:05:e9:d8:87:8d:bf:9a:81:f2:1e:d2:8f:
09:e7:37:9c:cb:8c:d0:0c:80:14:6b:f5:12:b5:69:
a4:be:51:6c:63:ff:3a:a9:01:93:1e:82:b1:83:2e:
aa:f3:48:f5:f0:0d:39:db:c6:a0:6b:fc:5f:12:8d:
07:45:5f:8e:94:c4:b7:a0:80:1c:ce:a9:8c:ef:d5:
dc:bb:c8:56:78:bf:ed:dc:64:27:e1:fd:5e:7d:83:
0c:cf:8d:44:13:8a:a4:dc:33:1b:1f:9a:8e:41:d1:
dc:c4:f4:11:0e:ee:9d:9d:c4:99:f4:d4:4d:3b:eb:
8e:46:de:a0:1a:57:64:99:58:71:f8:6d:78:56:6e:
a4:59:e0:6c:3c:69:3c:6b:87:7a:81:ac:99:12:71:
fa:be:87:5f:34:fc:0b:a7:69:08:ab:ee:03:a3:6f:
00:2e:bb:6c:3b:7a:c8:cf:b3:33:77:58:3c:31:d5:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:93:3B:1B:3F:E1:B8:8A:1A:E8:7D:98:71:3A:CB:F2:21:31:FE:B3
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:17:91:94:2a:14:6e:dc:06:fe:5f:31:b2:7f:82:bb:6d:c4:
0e:8f:49:f4:40:14:9f:a9:20:8f:bc:b0:b8:bd:2c:bf:78:78:
5a:97:9e:6e:45:7d:d9:53:8c:8b:38:93:02:cc:c6:51:6f:6d:
fa:2f:96:e3:d5:4f:3e:8d:d6:b2:b9:27:1d:d1:3e:c2:fc:d5:
6d:41:46:2b:85:5f:89:c9:c3:dc:22:ec:c4:b6:49:06:19:a5:
10:5a:1b:71:d0:08:8f:64:dd:c9:68:60:ef:22:be:ca:4d:81:
f3:a8:f8:8e:65:d2:51:e2:37:cc:fb:cf:ea:09:34:a8:86:24:
d9:a2:81:3d:9f:12:57:f9:61:9e:49:a9:99:aa:d2:91:d8:f2:
2f:6b:e5:ea:65:ec:32:21:cf:e2:4d:76:c5:b1:f4:bb:e0:ab:
c3:5f:56:15:28:fc:b7:1a:08:21:58:2a:a6:d1:b3:9d:f1:9b:
3a:33:ab:f8:7d:76:5f:5e:ca:44:d0:6e:72:3d:6b:f3:60:4a:
c9:72:ac:72:27:4b:02:0f:d8:72:7e:0f:ed:1c:8d:62:75:4a:
04:30:69:47:3e:ee:5e:b5:12:62:36:82:8c:6c:c2:86:69:de:
ea:22:fa:e9:57:c3:e0:21:c7:04:24:d9:6e:db:c4:97:d3:4a:
ab:01:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:07 2026 by rpki-client