Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
File: GckQlAa9oSZuVvZm6MmDWNdD3XY.mft (raw, json)
Hash identifier: QvVVRRZgdc0wdqLuN1PE+qOU1Evbtq5X7lf4Y9HaZoE=
Subject key identifier: E1:D6:89:0E:51:D0:70:1C:CD:0E:A9:05:D5:4C:E4:A8:19:F0:0B:D0
Authority key identifier: 19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
Certificate issuer: /CN=19c9109406bda1266e56f666e8c98358d743dd76
Certificate serial: 019D38669A426641386EF7EA458DE7AC51BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
Manifest number: 0FEF
Signing time: Sun 29 Mar 2026 07:02:21 +0000
Manifest this update: Sun 29 Mar 2026 07:02:21 +0000
Manifest next update: Mon 30 Mar 2026 07:02:21 +0000
Files and hashes: 1: GckQlAa9oSZuVvZm6MmDWNdD3XY.crl (hash: 8MHnSqC/GKMwKD+zXF9ugZkwsORX3oHW2DGkaYAhQBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:9a:42:66:41:38:6e:f7:ea:45:8d:e7:ac:51:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c9109406bda1266e56f666e8c98358d743dd76
Validity
Not Before: Mar 29 07:02:21 2026 GMT
Not After : Mar 30 07:02:21 2026 GMT
Subject: CN=e1d6890e51d0701ccd0ea905d54ce4a819f00bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:4b:f4:05:9e:e9:92:47:93:0a:79:fe:0c:
7c:70:61:1a:40:b4:ec:7b:53:c3:c6:50:e7:0c:83:
16:e6:3e:e3:e3:a6:d6:83:e6:de:2a:c6:e5:55:03:
e2:39:7b:f7:64:de:8f:94:ae:b9:65:dd:b6:01:60:
78:8a:3e:e2:10:8c:1d:81:08:70:b8:1f:43:bf:ca:
f7:b1:23:cd:e5:1b:8e:32:21:49:4d:77:42:6c:8f:
8e:1c:f9:c9:19:c7:65:d4:40:29:a6:8c:14:dd:e2:
de:c8:e7:ac:c3:7d:08:21:28:be:c0:4c:2f:5d:0e:
ec:25:e2:17:43:86:ec:c7:29:2f:50:a7:77:c8:be:
2a:3c:e3:28:3e:e2:db:65:70:61:60:25:e4:bf:18:
29:f4:4a:ea:7b:db:7e:a3:83:02:64:02:8a:e8:0b:
8c:aa:e6:9d:7f:bc:d1:71:4f:94:d3:78:c5:6b:ca:
c3:85:10:57:07:99:10:5a:12:b6:59:fa:00:a1:b1:
2d:10:64:c0:6c:f1:06:13:21:21:b0:4a:4a:8c:2d:
39:9b:7e:b9:7d:66:1e:c1:c9:d4:33:e2:42:cc:58:
35:e3:04:af:91:8f:3e:31:c0:4e:93:e7:11:b6:18:
e5:96:04:12:02:f7:84:c9:54:52:22:2a:aa:4f:d8:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D6:89:0E:51:D0:70:1C:CD:0E:A9:05:D5:4C:E4:A8:19:F0:0B:D0
X509v3 Authority Key Identifier:
keyid:19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f1:9d:5f:9a:83:84:b8:53:9b:93:6d:f1:00:f6:63:e2:96:
aa:d9:c6:23:03:ab:6c:8e:3f:32:ef:a8:26:c8:a7:13:85:3e:
eb:05:4d:7a:99:ae:a9:35:de:a9:cb:6f:f6:0c:66:16:9b:d6:
c5:fb:bd:23:6c:10:8e:21:6e:0c:02:e8:5d:47:22:9d:e9:37:
fd:71:82:08:44:65:c8:2f:4a:74:a8:96:3e:94:e4:64:a5:ba:
c0:a4:a8:56:e8:15:de:2d:99:10:8b:be:93:47:ee:d7:07:c1:
9d:14:32:c4:ba:6d:75:0b:85:db:f4:ff:8b:15:75:2d:e3:77:
55:b7:12:06:c7:f4:f7:5d:b8:d8:64:ea:08:6f:83:2a:a7:b0:
19:49:61:79:9f:fc:90:99:a0:a6:bc:58:67:18:e1:8d:69:35:
fc:1f:1f:ae:7c:7c:da:7b:be:be:7f:94:b2:e6:59:e4:50:6a:
69:3e:a8:88:8b:81:54:b4:dc:f1:98:9e:f3:b2:74:fb:0f:63:
25:91:45:9b:01:a9:af:5c:db:b1:e9:69:18:e1:20:1e:1b:d7:
f0:5d:40:19:e8:f7:94:ec:7c:87:ec:84:c4:1f:73:a1:85:ef:
60:40:e7:fd:30:e0:a8:85:6d:6d:1f:0d:af:19:80:38:dd:d3:
b5:92:cc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:21 2026 by rpki-client