Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
File: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json)
Hash identifier: nIA1OzhmCBAkKndYPbjmmYlZsjtpbOq07i+w3qU56NY=
Subject key identifier: 8A:DE:D6:9C:3D:1D:8E:5D:15:05:F8:17:46:AF:7E:E7:99:70:28:EA
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Certificate issuer: /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial: 019D39414CA15EB4F7BDA382D66B18A7C1E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:13 +0000
Manifest this update: Sun 29 Mar 2026 11:01:13 +0000
Manifest next update: Mon 30 Mar 2026 11:01:13 +0000
Files and hashes: 1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: /7md3tZTR7JwgLp8NHEdEME0jeR25dPyduXWGOSGLo8=)
2: abbbV0XVk995UrsAzYOq3iQxcEk.roa (hash: 4xNlKWkY5oZiKT7584PwOX/H1wHQW2fuOn1s1+Y8Eus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:4c:a1:5e:b4:f7:bd:a3:82:d6:6b:18:a7:c1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Validity
Not Before: Mar 29 11:01:13 2026 GMT
Not After : Mar 30 11:01:13 2026 GMT
Subject: CN=8aded69c3d1d8e5d1505f81746af7ee7997028ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:81:56:71:a5:00:c5:b1:47:7e:e0:9d:4a:15:
e4:80:1f:fb:29:70:8b:79:d7:0a:31:7c:90:11:5b:
b1:e4:fa:9c:03:36:82:93:76:09:65:13:71:bd:d2:
7b:cd:d8:9c:77:a2:b8:45:e1:c3:b5:ea:9a:54:69:
67:d6:d0:ea:ec:ad:31:7d:dc:a1:3c:e7:52:00:88:
98:62:72:84:60:d4:63:41:a3:54:87:c5:3d:47:47:
f8:79:d6:ca:4e:0b:9d:de:f3:c6:7b:f5:35:72:16:
83:d4:da:3a:d5:76:cc:a6:26:27:11:a3:4d:f1:4d:
10:b2:a6:b0:d7:04:d7:91:ac:70:03:ff:72:79:c8:
6c:b7:30:c1:40:76:da:49:d4:0c:c5:c2:21:c0:9d:
16:28:6b:6d:b2:4d:07:95:60:c5:c6:20:5c:f1:d2:
76:5f:76:75:94:be:6e:51:d9:42:a2:2d:ec:47:93:
fd:c3:95:e3:be:8b:76:50:7c:41:34:f6:a9:be:b3:
be:81:42:44:41:d1:92:e2:cd:0b:c1:a2:6b:21:fc:
df:7a:b0:a7:14:ce:ab:5a:fd:ba:e4:fc:8b:52:fd:
2e:4d:bb:6e:6d:9e:0f:49:a4:dc:4d:3d:96:32:43:
b6:96:9d:c3:93:1a:11:d7:82:2f:35:63:be:23:57:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DE:D6:9C:3D:1D:8E:5D:15:05:F8:17:46:AF:7E:E7:99:70:28:EA
X509v3 Authority Key Identifier:
keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dc:eb:ee:2c:80:de:f6:2e:3f:4a:38:69:84:f5:a2:26:19:
35:8b:3c:72:f1:60:e5:de:c1:1d:b2:36:5f:83:41:cc:93:e7:
75:f9:03:ae:a4:c0:12:9b:5a:0b:fa:6b:7a:5f:7a:ad:21:7c:
ca:9d:11:f9:d2:56:f5:70:26:f7:66:a5:c2:56:c7:62:58:04:
8c:15:22:06:2a:4b:29:95:f4:b7:b2:b9:18:93:29:83:e1:4c:
58:93:97:4b:42:d8:08:fb:66:99:3b:5b:d2:c4:23:50:f8:8b:
8e:15:87:00:8f:cd:e2:ce:e0:57:04:37:b3:4f:c5:4a:8a:71:
44:9e:26:04:3a:c4:fa:4d:0d:f4:d4:23:4d:08:d8:a1:d2:b3:
d6:68:6a:1e:f1:17:27:7a:8a:5b:1d:1a:33:b4:eb:5a:94:0d:
47:ce:13:c2:eb:a4:2a:b6:d3:83:a7:36:40:7d:73:6e:d1:e6:
57:16:cc:79:7e:f9:9e:63:c3:9e:da:bc:f7:c4:f7:af:af:7e:
b3:c6:33:92:41:47:0a:80:4f:98:44:71:4f:e0:31:3a:04:11:
11:ec:47:bf:ec:b9:f9:b4:20:4e:a7:39:de:41:08:04:98:ad:
48:80:e8:16:21:6d:f6:64:27:20:b9:c4:7e:6d:0c:b2:64:9c:
87:53:cc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:17:17 2026 by rpki-client