Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json)
Hash identifier: Ai6Rkz7Yvgrv5j9G66zmJf79u7QgJhGZSDCpTOA7aak=
Subject key identifier: 38:A2:81:22:CE:2F:2A:BD:D8:71:CC:55:5C:E9:26:F5:CA:23:CD:65
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 019D375234EA2EE606D392138046C16FA168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 02:00:27 +0000
Manifest this update: Sun 29 Mar 2026 02:00:27 +0000
Manifest next update: Mon 30 Mar 2026 02:00:27 +0000
Files and hashes: 1: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: QtU1gRL93CwxHU29X5ZRNuR5jsN8e6ErFc4UN2nrJR8=)
2: T9LuV_lKN_28uDuP4XufTzMSbP4.roa (hash: RqEiAiqPldTyuCtIL3PVLaEYZ+maSd+fgKyN1HQoYbc=)
3: TgCNYCVBJe7DHibK2wEIBWCuz98.roa (hash: QIFBXUnI5cHb70d+ToykREH9LNgrc+X3rqWxt+px7zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:34:ea:2e:e6:06:d3:92:13:80:46:c1:6f:a1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Mar 29 02:00:27 2026 GMT
Not After : Mar 30 02:00:27 2026 GMT
Subject: CN=38a28122ce2f2abdd871cc555ce926f5ca23cd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:29:6b:71:4c:b6:4c:72:9c:f6:f9:b5:1a:
9f:aa:08:d8:c3:6a:0f:5a:31:d4:c3:f2:fd:f3:08:
34:32:bf:1e:56:68:bc:41:de:87:7e:39:af:8b:6c:
1c:4e:04:3e:b9:39:eb:34:f7:8b:26:fb:68:18:1c:
cd:c2:e9:49:cc:2d:04:db:f5:89:08:aa:cc:e4:fa:
0a:22:7c:66:7c:d6:80:78:12:8a:e0:0a:8b:d7:28:
8a:ce:51:ee:92:fb:6b:ff:5d:e5:80:45:08:76:22:
f1:da:26:b0:ad:b5:a9:d3:6d:96:7f:7f:9c:41:5b:
bf:4d:7b:54:12:01:80:8e:20:e1:0e:ae:3e:2c:e4:
b2:d6:90:5b:24:a4:78:5f:6e:00:df:69:d9:69:a8:
d2:08:f4:bc:a3:99:9d:3d:d8:e2:0a:9b:62:f8:06:
bd:dd:98:97:0d:60:88:be:7e:b9:5e:ee:8b:89:0d:
90:8b:cc:a8:d7:15:7d:b3:ac:33:6e:7b:5f:e7:34:
7e:cb:a2:1f:8d:6e:8d:6b:79:fe:9f:24:76:4a:cc:
05:2a:0e:91:ac:3c:b1:4b:17:48:fb:82:bf:b6:73:
58:14:2c:fc:82:8d:7b:2c:da:a3:41:1d:15:c2:9a:
7c:dd:f8:66:3c:65:7f:8e:39:76:22:db:b1:bc:9f:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A2:81:22:CE:2F:2A:BD:D8:71:CC:55:5C:E9:26:F5:CA:23:CD:65
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:53:e7:2a:9b:8a:33:e8:39:3e:88:cb:75:5c:2b:61:f4:a9:
f1:b2:91:f9:d7:60:34:b2:82:43:82:3e:f8:be:cd:21:73:f6:
2e:64:2a:70:ec:5c:b7:e4:0e:f7:98:6a:e8:d4:e9:fe:78:17:
15:d2:dd:e2:67:a0:90:7e:1d:27:10:be:8a:dc:7f:4a:64:26:
42:d7:1d:2a:2d:fe:27:95:da:d9:85:9f:4e:d7:70:af:d8:3a:
df:5d:9e:fc:21:75:30:38:4c:32:8f:8b:e2:74:ce:09:da:88:
ca:eb:32:6b:b3:1d:44:4e:bd:ee:fd:0a:b4:ec:4a:09:a0:ca:
79:ea:5c:4e:21:5f:3a:89:96:0b:95:2c:3f:39:7b:76:de:3e:
0f:44:00:1e:3b:28:bd:88:aa:65:bd:b8:c3:2b:ab:bb:03:94:
bd:f9:c9:f8:c4:e6:f5:2b:7c:f6:4d:59:95:37:21:5f:30:66:
39:83:b5:73:07:c0:32:56:86:e7:28:00:4f:ff:78:92:93:c3:
f5:e2:14:70:f3:c4:f1:5c:67:4a:78:70:47:5c:cb:45:14:f7:
7b:c4:7c:cd:55:18:88:4d:ab:88:bc:5c:bc:6d:c2:5c:ea:e2:
e8:6b:2d:0e:86:6b:5d:71:29:b9:dc:e4:1f:b3:4f:e2:89:d9:
06:f7:01:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:35 2026 by rpki-client