Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
File: GNl5-JL-uBmXaiX-lH9devN-zH0.mft (raw, json)
Hash identifier: gATa8mZku673MlWA4n38x/xU5JE8sJynH2sYiEBd204=
Subject key identifier: 4E:37:01:95:69:C7:99:44:7E:31:AF:F5:A6:CE:67:86:87:0B:DD:79
Authority key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Certificate issuer: /CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Certificate serial: 019D3865953A79558A03A610A02CC9826492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:14 +0000
Manifest this update: Sun 29 Mar 2026 07:01:14 +0000
Manifest next update: Mon 30 Mar 2026 07:01:14 +0000
Files and hashes: 1: GNl5-JL-uBmXaiX-lH9devN-zH0.crl (hash: jGWoPBCqMDffXDXzSc7WHGf9WRc4q5eWDPRUl4jdsro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:95:3a:79:55:8a:03:a6:10:a0:2c:c9:82:64:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Validity
Not Before: Mar 29 07:01:14 2026 GMT
Not After : Mar 30 07:01:14 2026 GMT
Subject: CN=4e37019569c799447e31aff5a6ce6786870bdd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:14:87:45:8e:b6:2e:9a:13:e1:fa:3c:10:
62:51:44:7d:16:0f:1a:16:83:6f:f0:0c:fb:af:d7:
dd:6f:c9:cc:10:f5:3d:05:15:34:c9:4f:0b:0a:2b:
eb:97:d2:fd:d2:2b:6a:76:c5:24:7a:f4:2e:9d:7a:
e0:7b:d7:05:4d:59:52:0b:5c:5d:40:44:d7:d8:42:
32:63:0b:3f:4f:6d:a8:00:32:05:1c:7c:be:ea:b0:
11:22:c7:6f:68:33:f1:ff:ef:6f:a4:be:1d:21:db:
6f:f6:ed:64:fd:13:9d:58:59:b7:f7:43:16:f6:cf:
12:07:41:38:4a:01:f0:8f:18:b8:bb:b4:94:71:d1:
fa:f6:2d:ba:70:e9:4b:ed:7c:84:94:08:fa:f8:dc:
10:c6:3d:07:7a:2f:1d:f8:18:ea:5d:d7:8d:d1:ee:
60:2c:3d:93:ad:ef:d8:2a:31:b0:d5:e3:95:71:bb:
74:dd:45:36:3d:ac:6a:c1:e6:68:ea:2a:72:45:b0:
50:ae:4e:d3:40:c4:16:7a:c1:1d:72:24:c1:de:91:
26:62:26:1d:0d:2d:20:63:0b:f5:60:63:84:27:e6:
c7:48:af:f6:3e:b8:43:02:fe:bf:12:bd:49:23:56:
76:b8:e8:e6:24:fd:aa:f3:6d:5c:e3:76:47:dc:50:
01:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:37:01:95:69:C7:99:44:7E:31:AF:F5:A6:CE:67:86:87:0B:DD:79
X509v3 Authority Key Identifier:
keyid:18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:19:2b:76:9d:3a:c7:44:93:e0:ca:cf:48:72:99:a5:39:27:
80:90:00:62:0a:bd:ed:22:5c:23:b0:80:7d:63:6e:b3:d2:2a:
7f:97:e5:ab:df:9d:5c:84:d0:15:2f:db:38:56:bc:1a:8f:d0:
15:c7:51:ee:ff:92:8f:b8:c9:22:51:a1:3a:ac:be:13:2e:72:
76:97:e6:33:89:0f:df:87:d7:46:ef:f2:60:69:3a:cf:75:20:
08:77:f8:a1:c5:b7:d2:46:45:c0:6e:64:00:f3:dc:c7:a9:c0:
0e:c2:20:26:ab:24:75:17:3f:02:1c:f3:be:79:3b:ad:b6:43:
f8:32:0e:c9:94:7f:83:3c:e9:84:c5:7c:da:f9:ef:63:0b:4e:
35:8d:01:ab:d6:16:b1:89:be:1e:69:5b:09:3d:55:d6:a4:39:
0a:b8:b1:95:dd:af:fa:58:dd:9d:21:75:98:ac:2d:d4:66:fa:
49:c5:e5:33:3d:bf:ef:fc:0e:5a:3e:5c:b8:82:9b:50:0e:6c:
ff:5d:c6:7d:47:60:55:a9:d2:7d:96:2f:bd:ae:75:61:d5:35:
e7:8d:18:cb:81:97:b1:e4:ed:71:00:60:a3:23:ea:3b:c6:cb:
d1:16:17:1f:fa:22:ef:61:ee:a8:2f:a4:d9:fa:67:f7:9a:97:
10:f2:2b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:23 2026 by rpki-client