Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: Uq06h4c39Up++wtd8MphW6j7Ci73/TebO2CEVbwgYzw=
Subject key identifier: 56:F5:CA:83:18:EF:3B:88:68:6A:82:38:6B:6F:35:D4:E9:9B:EB:9F
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 019D37C086705AA0AC05F1E575EACB76B563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 1040
Signing time: Sun 29 Mar 2026 04:00:57 +0000
Manifest this update: Sun 29 Mar 2026 04:00:57 +0000
Manifest next update: Mon 30 Mar 2026 04:00:57 +0000
Files and hashes: 1: 9PZjCn76gwRRUpq9MvbclVXkdOU.roa (hash: CaqNlJNQ1Ni2aWKqDPfoQcAYDuSQhepNqZ+uo297E2U=)
2: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: yzd2dmSwIQ2FqXF7Jf7wbJE90+G2eqYiHoqNpwvXxK4=)
3: ur76ehndzl2-pGTHmrbh1qcAWBI.roa (hash: Sb+oNrAUwZsJERFHDlGdgS7sblzKLRz12cNiy1csEgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:86:70:5a:a0:ac:05:f1:e5:75:ea:cb:76:b5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Mar 29 04:00:57 2026 GMT
Not After : Mar 30 04:00:57 2026 GMT
Subject: CN=56f5ca8318ef3b88686a82386b6f35d4e99beb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:79:74:7b:ff:40:6e:44:3b:bb:4f:b2:33:
71:25:fc:4a:80:d8:7c:cf:66:e4:23:05:b1:de:79:
0e:69:e2:41:af:61:c5:c4:63:f5:5b:92:7f:a9:81:
d3:19:ae:3e:e5:5b:09:29:10:77:08:1a:da:9b:7e:
01:fe:e5:08:76:e1:9e:f7:2d:9c:33:89:43:ef:7e:
fd:80:5c:0a:81:79:5d:01:67:51:9c:94:18:a4:a1:
83:ee:f1:50:2c:f0:a2:af:69:db:ad:d5:09:b3:1d:
4b:90:e6:ae:63:1d:b5:a5:44:4e:e9:c1:ab:81:0a:
24:61:e7:94:50:64:f4:77:dc:15:59:2b:6c:d0:d6:
b7:ef:48:73:1f:c2:63:66:41:1b:50:c6:a6:45:e2:
6a:25:01:6f:69:16:dc:7f:39:d8:1f:bf:92:e9:63:
16:80:d8:e9:c4:3e:af:44:ea:67:28:0d:fa:a8:61:
c9:d6:25:c3:ba:4c:f7:dc:fb:cd:65:9e:eb:0c:cc:
db:af:c0:f5:a6:02:21:a7:04:1d:77:a9:bd:20:11:
3b:52:1b:d7:48:91:b8:3c:d7:cd:93:98:02:e9:57:
b0:fd:4b:7d:30:6e:42:be:c2:b7:c1:81:e8:e1:85:
63:bb:64:f1:28:9c:76:8e:eb:30:52:a3:c5:0a:1e:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F5:CA:83:18:EF:3B:88:68:6A:82:38:6B:6F:35:D4:E9:9B:EB:9F
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d9:5d:bb:71:a5:d2:35:3c:bf:51:19:85:6a:f3:71:dd:85:
6b:42:a3:05:ef:2d:a0:fb:fe:2d:b1:8e:cc:4d:a8:07:f5:cb:
51:c9:33:8a:7e:e2:af:57:55:70:6d:5b:ca:d0:f2:e8:f1:89:
c4:d2:a2:a9:c8:84:c2:74:17:09:c2:bb:f8:fb:1f:1a:b0:0d:
81:5f:8e:65:b3:4e:69:04:37:e9:17:bc:34:d7:3c:3c:e5:95:
f4:0a:78:dc:55:17:25:53:32:b8:88:b1:b3:6d:91:3b:6f:02:
bd:ed:71:83:8d:70:60:62:8c:b9:62:dc:77:c1:c4:49:13:e1:
16:51:30:7c:b1:f3:94:62:e2:21:72:f8:6d:eb:d1:17:40:1c:
1e:e0:52:55:5f:ca:f6:ef:47:98:71:6b:ae:a8:38:a6:e0:e0:
94:9f:ef:ff:50:a4:eb:a7:67:53:5e:5d:d9:19:9c:5e:1f:32:
48:9b:8f:00:0d:5e:6c:eb:4f:2d:72:e6:3b:d4:26:d6:b0:f3:
34:af:b5:1a:80:88:42:7a:cd:59:89:de:7a:74:9f:6e:b1:09:
a8:ca:cc:d7:ee:c7:61:df:a8:ec:83:d4:22:7d:e4:bd:14:66:
17:57:91:31:17:49:2d:7f:6b:ed:e0:36:17:2b:ec:9e:28:22:
5b:9e:ed:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:59 2026 by rpki-client