Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: CJccW5onBhQzJcCoYMNbN2TuZlk+m5B63DUFpw8YR/A=
Subject key identifier: D7:EC:D5:62:C8:6C:11:20:AE:81:C1:6C:38:FC:9B:52:A2:A9:2E:27
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 019DCCE1A625484E33009F7CF06DA6028DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 033E
Signing time: Mon 27 Apr 2026 03:00:33 +0000
Manifest this update: Mon 27 Apr 2026 03:00:33 +0000
Manifest next update: Tue 28 Apr 2026 03:00:33 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: wxmcBrspNUGkmkt+t8KnfIa+8K95zBDvoSwZTkM5vko=)
2: t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa (hash: Gojw7FbJO6oLOCFdJ+IonU5RAeRQTmH3d/fqvSSbRko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e1:a6:25:48:4e:33:00:9f:7c:f0:6d:a6:02:8d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Apr 27 03:00:33 2026 GMT
Not After : Apr 28 03:00:33 2026 GMT
Subject: CN=d7ecd562c86c1120ae81c16c38fc9b52a2a92e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:00:69:48:8b:87:32:01:da:45:7c:c2:b6:
a7:df:53:d4:51:83:d5:a4:4d:24:16:ac:48:3d:6c:
7f:2e:e9:5d:7a:0d:fd:ef:42:14:49:90:95:7d:d4:
1a:61:25:00:3a:10:0f:83:6b:54:40:67:a6:01:51:
71:7a:f3:18:b7:fc:39:cc:7b:01:d7:9e:71:b8:ed:
0b:10:fd:cd:54:36:a4:e3:5b:aa:f5:c4:9f:25:ee:
e3:19:36:07:a4:f9:9e:4d:53:f7:25:fb:c9:46:08:
fa:41:f4:1c:56:c0:a2:ab:a3:41:0f:f8:34:62:e7:
f0:b0:25:38:4e:4a:7b:0e:69:01:5e:b6:ce:15:81:
da:ea:74:90:c6:83:ca:25:42:39:fc:58:c3:2c:da:
e6:55:ff:90:68:64:62:43:78:e9:db:7b:15:98:4c:
06:7f:77:30:0f:8f:33:a7:ab:c5:4a:37:8d:6b:0a:
41:f6:a7:91:4e:ed:2f:ae:ea:92:f2:cb:93:00:37:
6a:0a:c2:8d:7c:b7:2c:1d:ba:de:4f:69:e8:d6:41:
39:c3:2b:a6:6d:68:b7:28:54:31:c2:f7:b6:7b:91:
22:6a:d6:4d:54:9f:85:86:e0:d5:d7:5e:52:1a:b1:
b7:80:94:3e:87:d4:11:59:73:26:93:15:61:b0:19:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:D5:62:C8:6C:11:20:AE:81:C1:6C:38:FC:9B:52:A2:A9:2E:27
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c9:64:2e:10:2f:43:79:3d:0a:35:54:d1:be:48:0b:1f:8d:
64:0e:ef:ae:00:81:f6:d7:0a:5b:7a:89:2c:d9:e0:26:5e:fa:
95:19:bc:0f:81:14:3a:a4:fe:93:2a:49:b6:ce:e3:06:9f:9a:
d1:80:95:82:76:f9:21:de:94:25:2a:db:d7:2c:83:24:13:91:
6f:4f:a0:a1:cc:a5:6a:2e:22:4d:84:35:1c:a8:1a:59:87:25:
5b:73:ef:8b:50:86:56:2f:f5:03:80:51:e8:84:64:1f:a7:c8:
b6:58:d0:51:dd:76:45:bc:5b:d3:59:81:c5:47:7f:66:f8:0b:
b4:1e:f0:c1:3c:73:11:e5:b9:b3:bf:31:56:91:93:b9:10:4c:
10:d0:cc:61:f4:6a:df:a6:ff:27:94:00:2c:08:43:c5:46:33:
6b:b1:f9:e6:44:97:f8:94:70:82:bb:93:ba:b4:44:18:b2:c8:
36:cf:62:83:4f:ee:d9:55:70:a8:9c:9c:ea:b7:34:c6:ff:62:
76:d5:f7:f4:d0:ec:58:a5:da:d3:33:98:d7:9d:6e:d0:02:e4:
b4:fa:57:ca:92:58:82:39:db:3e:9b:f8:5d:26:1e:cf:32:2e:
f6:92:5d:61:f3:94:7b:53:c9:e1:77:be:2a:e5:01:86:4f:29:
51:4d:76:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:56:26 2026 by rpki-client