Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
File: GckfHLCHQjKgT7wJK6poiszsydc.mft (raw, json)
Hash identifier: ttnMmOctdbZBmYnRYWr5lMAYMmZTD/CA5/VRnLi/wwU=
Subject key identifier: FD:E5:BF:EE:DD:DB:C1:1A:F2:26:B9:0D:CB:19:E3:6A:25:72:EB:86
Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
Certificate issuer: /CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Certificate serial: 019D38D33F07F9C30D9A69FB7A32C891F826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: GckfHLCHQjKgT7wJK6poiszsydc.crl (hash: O8I6pa3No+Jc/Z3gnvpFO2q6wNlzLuIpPLLU8epqF7Q=)
2: SoVU9F3W3Bai3qKtYef_WnEk3Mc.roa (hash: qPqyEDMPhVctrtsifGL512rIc3cU9LPj65aKHgKyOGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3f:07:f9:c3:0d:9a:69:fb:7a:32:c8:91:f8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=fde5bfeedddbc11af226b90dcb19e36a2572eb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:78:0c:97:8a:5f:e0:60:d8:1a:80:d7:3d:
ee:c4:a7:c4:5d:d6:a3:74:6a:1f:4e:94:ff:75:03:
85:4e:c1:21:2a:bb:26:35:81:b2:98:f0:6a:37:d7:
da:40:19:24:72:be:74:19:a1:04:38:2b:5b:39:1b:
75:e3:05:e5:ff:a8:f7:ae:02:ff:ca:f8:82:bc:f0:
14:0b:75:a7:e8:60:d0:d3:9a:f4:3e:2f:e3:eb:33:
ba:9f:fd:4d:7d:d5:af:c3:77:ef:00:8a:77:e7:e5:
96:90:50:e0:96:72:5e:cc:9b:95:9f:a2:04:10:c7:
f1:56:df:ed:9f:58:89:6f:67:e2:11:6a:eb:bb:12:
c6:84:d5:17:b6:d2:2b:23:fb:ff:b8:c2:3b:76:d2:
f8:8d:dd:b2:f5:d9:35:8c:70:9e:4a:7f:bd:00:75:
89:7a:17:a4:ac:62:7d:fa:54:85:20:16:76:c3:d2:
31:29:78:34:da:6f:12:07:24:12:7e:59:9a:6d:cd:
fd:52:92:66:66:bd:2b:f8:4f:0c:dc:e9:37:dd:b0:
52:35:bd:05:00:03:b4:e1:11:58:c7:1d:07:c0:db:
d6:21:0c:2a:63:c9:c9:05:08:d5:8b:b9:24:01:04:
67:64:fd:3f:5e:d4:b3:90:c5:5f:d0:ea:d3:99:00:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E5:BF:EE:DD:DB:C1:1A:F2:26:B9:0D:CB:19:E3:6A:25:72:EB:86
X509v3 Authority Key Identifier:
keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c4:bb:2a:88:40:0c:5c:aa:fc:d9:8d:cb:83:e1:c0:22:db:
f8:b9:e3:da:a5:a3:c0:02:07:26:1d:70:e9:d1:51:04:65:0b:
43:4a:f8:97:12:70:af:97:8d:40:ef:d5:49:75:fc:cb:46:4e:
7f:d2:44:08:62:10:08:5f:58:9c:bf:38:6c:84:57:18:06:92:
a6:fa:22:95:4e:0a:6f:a7:4e:2f:b3:83:c3:00:39:9b:0a:b7:
98:d9:28:cf:67:2d:22:93:4a:b5:bc:52:05:11:08:0b:d7:41:
f5:51:41:7e:49:85:59:79:a9:07:57:80:37:fe:89:5d:06:4f:
c1:45:4c:65:64:f6:91:6a:27:58:6e:1b:9e:02:b9:6a:17:01:
73:35:92:de:63:f7:c2:0b:98:d7:3c:99:f6:a5:58:f5:a5:fd:
ca:f5:5a:48:bb:65:2c:f4:de:1a:6a:63:75:57:de:4e:94:6d:
43:9c:56:06:ee:e5:d1:9b:c7:b9:47:6b:16:7d:67:ad:78:64:
5f:77:67:44:13:40:1a:cd:6a:4f:c2:0d:7c:9f:3a:1e:24:41:
6a:dc:1b:39:8c:48:f0:ef:97:e6:42:a5:38:a1:fb:2e:64:2f:
f7:40:2f:c5:e1:16:cf:3b:9c:a7:9e:0e:05:6c:d1:6e:88:39:
b9:b0:70:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:11 2026 by rpki-client