Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
File: GNl5-JL-uBmXaiX-lH9devN-zH0.mft (raw, json)
Hash identifier: Y4Fxuk3UBvO6Brdb1y4GONcvtnko5KiTwbgJv7Cwty4=
Subject key identifier: 6A:FD:74:98:9B:B5:94:FE:20:6E:AA:61:35:EF:08:0F:CF:B2:B4:CB
Authority key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Certificate issuer: /CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Certificate serial: 01A181506FEDA1015171B2ACEC01F1109B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
Manifest number: 1AC3
Signing time: Wed 28 Oct 2026 07:01:34 +0000
Manifest this update: Wed 28 Oct 2026 07:01:34 +0000
Manifest next update: Thu 29 Oct 2026 07:01:34 +0000
Files and hashes: 1: GNl5-JL-uBmXaiX-lH9devN-zH0.crl (hash: PiL5GdyYWWSwWcWd50A2uWmZ78+oR+VNyWVGISXFuvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:6f:ed:a1:01:51:71:b2:ac:ec:01:f1:10:9b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Validity
Not Before: Oct 28 07:01:34 2026 GMT
Not After : Oct 29 07:01:34 2026 GMT
Subject: CN=6afd74989bb594fe206eaa6135ef080fcfb2b4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:d2:e9:11:56:e8:01:d7:0f:98:73:ec:4c:
9f:ef:c3:72:64:55:d7:77:6d:5b:ec:2d:41:0b:1e:
59:0c:85:3e:5e:57:2b:94:7b:e6:61:f0:ae:f8:bb:
c3:87:5d:4a:93:58:d5:37:6d:d2:49:ec:04:14:cf:
84:28:e4:89:a7:c1:a5:5a:29:59:91:ee:12:3d:3b:
45:7b:1b:8d:0d:0f:e3:f6:ee:ba:5a:a9:19:f0:8d:
8d:a1:7e:d5:09:fe:a8:81:23:5a:d6:67:eb:f0:5e:
18:03:91:95:33:f3:cf:01:29:1c:5e:10:e4:75:3a:
3b:8b:26:77:af:09:11:41:52:fd:5d:43:01:31:16:
c8:b5:95:43:e2:97:8f:37:63:8c:85:27:c3:8c:84:
20:38:e4:24:b4:6b:97:6c:ba:54:ae:90:01:b2:94:
cd:61:5b:02:27:b4:0b:52:3a:bd:13:a2:22:d7:86:
61:0b:26:70:c8:a5:6d:93:9f:a5:b9:14:b6:02:45:
88:c6:79:a3:03:fd:f2:3a:18:fc:ec:9d:df:a4:fe:
05:b9:fd:82:fd:b8:74:cb:6a:5c:1c:d1:bc:67:b9:
8f:ea:aa:63:b3:e8:cf:37:37:50:14:30:26:c3:31:
78:5f:d8:51:f7:f4:4e:e1:65:79:cb:7b:c0:fd:d9:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FD:74:98:9B:B5:94:FE:20:6E:AA:61:35:EF:08:0F:CF:B2:B4:CB
X509v3 Authority Key Identifier:
keyid:18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:37:d3:89:e9:10:90:fc:5c:7a:e3:75:63:53:33:7a:39:0f:
1f:2e:f6:c5:0c:b3:85:46:1f:42:0f:6f:59:74:91:72:ed:4c:
a8:50:1a:c3:e6:d7:c4:a7:8e:0c:63:b0:41:79:67:c2:39:0c:
13:00:f6:fe:1a:1f:54:aa:c9:d8:27:c9:72:96:f8:0d:f8:57:
72:cc:9a:c1:7c:9c:c0:02:a3:e1:02:5c:00:5b:7d:2a:10:15:
15:7a:e7:33:8a:0f:da:9f:01:d2:79:f4:ed:10:09:0c:ef:2b:
c4:dd:23:7e:e2:a0:41:e6:58:1d:b3:5c:7e:74:23:12:ef:16:
ac:cb:e4:6c:1b:89:f2:e4:fa:fb:71:79:2e:e4:99:a5:50:6a:
be:a7:f2:eb:5f:56:d5:7d:88:ca:90:9e:e4:43:11:46:60:ee:
65:f7:3f:b3:20:e6:03:dc:a3:4e:68:8a:e4:0d:0d:8d:70:0c:
01:66:b0:61:a4:ab:1c:35:43:84:05:b0:ac:29:1f:d3:93:08:
8d:17:20:c3:73:22:4a:fa:5c:e1:0a:3b:e0:a5:55:5a:e9:44:
79:6f:24:2d:57:33:9f:bd:1d:17:db:c8:62:bd:a6:f2:18:51:
d0:61:9b:fb:1c:a1:9f:c3:65:9c:46:59:ae:4d:d6:8f:35:0a:
c3:9b:b8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:36:42 2026 by rpki-client