Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
File: GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json)
Hash identifier: gGd1okK69sTgp3sijk75pPLJgE/QgtlNoVWwGTW6iek=
Subject key identifier: 16:57:13:60:FB:86:04:56:07:5A:0C:66:58:30:A1:99:54:18:7B:5F
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 019D39AF1FEC28283187AF47DA71937CD800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
Manifest number: 0CFF
Signing time: Sun 29 Mar 2026 13:01:11 +0000
Manifest this update: Sun 29 Mar 2026 13:01:11 +0000
Manifest next update: Mon 30 Mar 2026 13:01:11 +0000
Files and hashes: 1: AuWKANhvxq9kHiTgy1f7DHg4G9Q.roa (hash: d6Pp0aQuhZMtZL83upp5lwXAgjd29VSzR+vb2YU7l5s=)
2: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: KEimmXCFHxrkclD/fHE56yA6XCPwcrO3pIRiFsFJr1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:1f:ec:28:28:31:87:af:47:da:71:93:7c:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Mar 29 13:01:11 2026 GMT
Not After : Mar 30 13:01:11 2026 GMT
Subject: CN=16571360fb860456075a0c665830a19954187b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:74:c4:3f:ed:7a:d2:6c:cc:15:bd:34:4f:
87:dc:97:ca:01:2d:72:1d:25:86:19:e7:38:c2:d8:
c1:e5:92:ad:ac:8c:74:7d:50:ae:ea:40:67:3f:1a:
4a:00:9c:b7:4f:b8:6b:38:05:5b:78:32:85:46:00:
c4:6f:d2:3a:bc:1f:69:d0:c2:0a:c5:74:e1:49:2e:
50:17:c9:4e:a9:d4:a2:38:c3:e6:3c:75:a8:26:b6:
c3:a5:6f:87:56:02:1c:5e:1e:91:bb:78:35:08:29:
d1:58:f5:99:51:70:77:25:bc:9e:05:36:eb:6d:db:
0b:61:d2:8d:ed:f1:22:e9:31:41:7a:77:0b:58:c3:
1c:23:1b:5e:09:f6:00:94:26:87:d0:64:d6:18:b3:
b8:a8:49:6c:1e:9f:8f:a1:1b:f3:9d:4b:97:50:5f:
93:a4:63:43:38:e3:a5:93:e7:7a:31:3b:d5:05:6f:
06:cd:23:c1:41:2e:77:7b:b3:fa:8d:5c:37:24:06:
04:8d:e7:f0:fc:3e:e8:a8:e1:37:85:fe:22:9c:6d:
a4:70:ed:58:5a:55:4b:8d:14:19:86:bb:4b:f5:6e:
7e:79:8c:cc:26:24:31:77:f2:fe:de:0e:af:fc:fa:
3b:b3:9a:e0:e6:7b:67:8c:47:b1:5b:ec:e5:23:df:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:57:13:60:FB:86:04:56:07:5A:0C:66:58:30:A1:99:54:18:7B:5F
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f0:40:5b:67:a5:32:2c:f9:26:00:9a:5e:74:dd:52:d4:13:
b6:0b:7a:ea:a9:8c:ca:df:3e:a2:f2:5b:19:34:33:59:28:3a:
da:5d:ee:0c:6e:c2:8a:50:5c:b2:32:35:8a:c4:e4:09:78:16:
d4:c4:9d:06:7d:72:99:08:54:a6:3f:de:8a:42:66:ee:ec:cc:
49:7c:70:25:90:b9:93:98:da:dc:6d:6d:98:c1:c6:95:2b:3c:
e6:36:fb:1c:9b:29:74:44:57:33:5f:3f:61:2c:4a:40:88:d0:
b7:9d:93:e3:4c:c6:1e:48:1d:aa:e0:c7:1d:63:82:ec:bb:b5:
37:a4:3f:0b:05:5e:06:f0:fc:e2:ad:85:de:d4:8e:3f:36:dc:
78:7a:c4:58:58:b6:79:6c:8f:54:e6:f2:5e:48:34:83:c5:50:
d5:b8:c2:43:72:2c:06:dd:8e:20:f6:20:6e:ee:9e:ab:16:1a:
cc:57:61:fb:eb:60:30:04:2d:61:5f:bd:ee:ff:f1:fb:da:cf:
8c:32:d8:a5:e6:81:cf:46:6c:8b:4d:25:b3:d4:73:70:87:ab:
7d:ba:ff:f2:a2:5e:ca:de:12:ba:97:56:f2:d7:c7:0f:96:11:
1c:45:d7:1f:96:1b:b0:3e:ab:92:4e:65:ac:4e:50:1b:6d:f2:
e7:b5:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:16 2026 by rpki-client