Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
File: GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft (raw, json)
Hash identifier: 0iH5xNk8HGxsPywNgzcGGBMB0zpooIIuD5BPXkbjA9Y=
Subject key identifier: 7E:DE:85:E2:8A:F5:78:E5:E5:FA:9F:24:E1:CD:2F:16:ED:DE:A3:9B
Authority key identifier: 1A:66:81:9E:D6:2A:71:09:0C:F4:37:E4:26:30:12:D4:C0:35:06:7D
Certificate issuer: /CN=1a66819ed62a71090cf437e4263012d4c035067d
Certificate serial: 019D38D31B64FF35E852ADF28EEB809119F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:52 +0000
Manifest this update: Sun 29 Mar 2026 09:00:52 +0000
Manifest next update: Mon 30 Mar 2026 09:00:52 +0000
Files and hashes: 1: GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl (hash: JQlOV7YKcrYUkSPF0HSg9GYZFV9vuUYfNkYiyHt72bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1b:64:ff:35:e8:52:ad:f2:8e:eb:80:91:19:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a66819ed62a71090cf437e4263012d4c035067d
Validity
Not Before: Mar 29 09:00:52 2026 GMT
Not After : Mar 30 09:00:52 2026 GMT
Subject: CN=7ede85e28af578e5e5fa9f24e1cd2f16eddea39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:52:14:d5:bf:98:5b:32:aa:65:30:f4:c1:3f:
2c:b1:73:7c:b1:3d:4a:40:14:0d:01:2a:97:76:40:
f4:89:d7:92:25:bb:33:a0:d3:25:bb:49:f4:8d:14:
b3:30:18:da:8d:02:e9:3f:60:75:c0:52:43:d8:8b:
b8:f4:6c:7f:d9:70:c1:b8:c0:01:13:e2:d6:86:df:
77:fa:0b:a2:08:16:40:3c:f3:38:57:ba:02:2b:2c:
56:ae:c7:f6:98:14:04:18:ed:6e:19:db:d3:ea:86:
bb:1f:c4:db:6a:91:03:2f:ca:2d:ba:2e:40:77:f6:
ce:ba:d6:96:51:3b:3e:35:d3:a5:5f:fd:13:74:e4:
92:17:31:94:32:2a:8e:8a:f9:a2:c4:20:1c:73:3b:
05:41:eb:71:23:90:9d:82:29:95:47:b4:d4:7a:ac:
51:96:23:76:0e:34:45:d4:ed:22:c1:c9:de:b6:c0:
5b:0b:49:cb:c5:d4:c4:9e:72:aa:c9:c3:27:13:61:
44:96:f3:da:e7:63:52:82:e5:67:9d:1b:ce:d3:21:
bb:6b:b7:d5:d1:b7:cb:af:9b:a2:bf:45:77:eb:53:
18:17:5a:6c:f7:03:89:d5:77:6d:b8:62:ee:5a:f7:
a0:37:a5:41:9d:00:0d:a3:8e:e0:c6:ef:b1:01:a5:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DE:85:E2:8A:F5:78:E5:E5:FA:9F:24:E1:CD:2F:16:ED:DE:A3:9B
X509v3 Authority Key Identifier:
keyid:1A:66:81:9E:D6:2A:71:09:0C:F4:37:E4:26:30:12:D4:C0:35:06:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b1:38:20:97:41:bc:de:c2:df:02:9e:f4:2b:7a:ab:4d:7b:
05:03:4b:f7:09:5a:65:db:9a:e7:7b:29:fd:e8:60:09:e0:9d:
b0:3c:95:bf:da:b1:65:51:09:b9:c3:03:6a:14:7e:60:2e:7e:
42:6f:dd:1b:94:61:ea:f4:0f:b8:02:68:89:00:59:76:13:7c:
09:e8:b5:84:d5:27:5f:73:59:0a:08:0e:c9:88:cb:d1:79:21:
78:e2:32:0a:3c:22:20:32:83:01:61:2a:52:4f:e4:15:04:6f:
b2:4f:c6:68:c4:2d:f7:13:99:c2:80:63:1b:dc:ae:5f:51:78:
05:6d:a9:18:0e:73:47:a0:b2:95:a8:d2:70:00:a9:83:5e:f1:
61:72:e6:a5:17:0d:40:7c:45:b8:27:f5:b3:fb:5f:ae:87:82:
cb:18:b4:c5:c4:41:80:79:fe:3d:5e:90:bc:db:bd:23:ae:76:
41:cd:af:45:e6:79:0e:cc:8b:96:a8:ef:c4:58:3f:b3:3f:7e:
80:de:e0:11:13:5f:e3:8d:11:35:6d:7f:07:f2:f5:69:ea:8d:
8c:00:5f:a3:99:18:af:cb:85:b7:4b:2e:21:37:9d:02:b1:51:
0d:94:57:41:82:47:a0:8d:50:b1:11:e5:11:de:f6:5c:05:b5:
dd:75:3c:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040xtk/zXoUq3yjuuAkRn1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNjY4MTllZDYyYTcxMDkwY2Y0MzdlNDI2MzAxMmQ0YzAz
NTA2N2QwHhcNMjYwMzI5MDkwMDUyWhcNMjYwMzMwMDkwMDUyWjAzMTEwLwYDVQQD
Eyg3ZWRlODVlMjhhZjU3OGU1ZTVmYTlmMjRlMWNkMmYxNmVkZGVhMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lIU1b+YWzKqZTD0wT8ssXN8sT1K
QBQNASqXdkD0ideSJbszoNMlu0n0jRSzMBjajQLpP2B1wFJD2Iu49Gx/2XDBuMAB
E+LWht93+guiCBZAPPM4V7oCKyxWrsf2mBQEGO1uGdvT6oa7H8TbapEDL8otui5A
d/bOutaWUTs+NdOlX/0TdOSSFzGUMiqOivmixCAcczsFQetxI5CdgimVR7TUeqxR
liN2DjRF1O0iwcnetsBbC0nLxdTEnnKqycMnE2FElvPa52NSguVnnRvO0yG7a7fV
0bfLr5uiv0V361MYF1ps9wOJ1XdtuGLuWvegN6VBnQANo47gxu+xAaUUTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7eheKK9Xjl5fqfJOHNLxbt3qObMB8GA1UdIwQY
MBaAFBpmgZ7WKnEJDPQ35CYwEtTANQZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR21hQm50WXFjUWtNOURma0pqQVMxTUExQm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82OTNlMzgtMWM3ZC00Yzg0LWEwNjQt
NzY0ZjgyMmRkYzU3LzEvR21hQm50WXFjUWtNOURma0pqQVMxTUExQm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82OTNlMzgtMWM3ZC00Yzg0LWEwNjQtNzY0ZjgyMmRkYzU3
LzEvR21hQm50WXFjUWtNOURma0pqQVMxTUExQm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrE4IJdB
vN7C3wKe9Ct6q017BQNL9wlaZdua53sp/ehgCeCdsDyVv9qxZVEJucMDahR+YC5+
Qm/dG5Rh6vQPuAJoiQBZdhN8Cei1hNUnX3NZCggOyYjL0XkheOIyCjwiIDKDAWEq
Uk/kFQRvsk/GaMQt9xOZwoBjG9yuX1F4BW2pGA5zR6CylajScACpg17xYXLmpRcN
QHxFuCf1s/tfroeCyxi0xcRBgHn+PV6QvNu9I652Qc2vReZ5DsyLlqjvxFg/sz9+
gN7gERNf440RNW1/B/L1aeqNjABfo5kYr8uFt0suITedArFRDZRXQYJHoI1QsRHl
Ed72XAW13XU8sA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:07 2026 by rpki-client