Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: j+gC4oterW+xmFMjc41LsfTd38p3D129ZkwC98cC6pg=
Subject key identifier: 75:54:B2:34:D2:9A:B4:36:9D:D7:0F:48:F5:EE:20:C1:32:E9:54:34
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 01A001A5B84ECF6378F4B9B6553C8EC07943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 19:00:32 +0000
Manifest this update: Fri 14 Aug 2026 19:00:32 +0000
Manifest next update: Sat 15 Aug 2026 19:00:32 +0000
Files and hashes: 1: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: 7te660lh3Uk4WXWvt9ysWVxeQJzK4wB7JvLqdAGqhiE=)
2: f8VlKt8JzCNAPxp24L1Yki6OYWM.roa (hash: pdFJm+KiuiR3o4ERryoXHrfDwKAIlg8iSODri6S35nw=)
3: qLXb67dE1EAchhK-STW3jwCdYVI.roa (hash: drU9BCSr2spJludNeni+Da0l+Sz7+7Ab8hUqNLHYgcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:b8:4e:cf:63:78:f4:b9:b6:55:3c:8e:c0:79:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Aug 14 19:00:32 2026 GMT
Not After : Aug 15 19:00:32 2026 GMT
Subject: CN=7554b234d29ab4369dd70f48f5ee20c132e95434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:6a:04:ff:02:28:77:8b:76:32:27:c7:42:
0d:49:cc:19:c4:33:2c:78:76:45:af:32:a0:0d:a0:
d0:ed:18:c8:8d:a7:3a:e1:e9:1f:01:13:82:50:78:
48:cc:c8:99:ad:e0:1e:c5:f9:dd:f5:5b:83:fd:30:
63:fc:da:53:42:fc:20:51:e7:40:de:97:8b:09:d8:
7b:cf:c2:4f:b7:cd:65:29:35:f2:b1:f7:96:d0:95:
00:b8:b1:7c:33:c8:61:e8:e4:40:7a:54:82:84:81:
de:10:f4:bd:95:8e:aa:0a:e8:31:28:b9:81:68:1b:
28:c2:27:45:bb:5f:e0:ff:12:cf:54:1d:68:8d:36:
fd:ba:74:60:b5:bf:af:20:7a:68:47:0e:e8:58:0f:
4a:d5:6a:d5:c3:5f:0c:3c:c9:d8:91:ea:1c:68:d5:
8d:fc:22:27:05:78:f2:23:01:69:61:02:9b:85:5c:
41:99:1b:10:a1:1f:fa:9f:cb:4e:3f:a9:b8:8e:e5:
0a:56:9c:c4:8a:98:59:e0:ac:fb:28:e2:e4:41:f8:
8d:15:8c:45:6c:fa:66:f3:75:34:4f:63:b8:7a:7c:
8b:a8:2f:f4:14:75:3c:92:21:00:33:35:47:cd:6d:
50:74:8e:07:a0:45:5f:11:2f:8a:ad:6a:ca:84:1b:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:54:B2:34:D2:9A:B4:36:9D:D7:0F:48:F5:EE:20:C1:32:E9:54:34
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1b:e8:5f:d5:64:bb:d6:ad:d5:62:de:bf:22:8e:54:6c:08:
30:c8:e4:9c:df:2d:e9:12:d8:1e:15:cb:b2:07:ab:54:2e:60:
86:30:5f:49:9a:81:ab:c1:7c:45:ec:1f:e5:2d:c4:65:af:a5:
7c:b2:44:d5:6c:e9:79:2d:a0:e7:bd:49:9b:04:eb:97:ef:91:
16:9b:56:81:99:57:c0:78:d1:d8:fc:02:07:85:95:69:ed:1c:
00:19:b9:86:cc:06:2e:0f:13:ff:e4:6b:e4:25:ed:ab:1b:d8:
5d:61:e2:c7:75:81:52:5b:5c:68:e6:58:bc:bd:f2:2c:0d:b6:
7e:62:fb:7a:1d:21:c4:66:26:1e:0e:a3:1b:2c:55:b7:ae:49:
6e:0e:f1:72:ab:dd:bb:dd:92:56:2f:cf:ce:bf:e4:10:40:c8:
53:10:fb:5c:27:b2:34:20:9b:bf:b7:f5:8f:73:ed:9e:de:aa:
92:1b:1c:0e:74:59:02:4e:56:ca:8f:fb:5e:26:54:32:7b:0b:
ec:ad:80:e9:a2:1b:88:2d:0b:13:08:78:40:3e:9e:14:b8:97:
77:76:d3:ea:11:e5:de:05:c5:7b:3d:35:2f:76:c7:f6:4a:34:
50:3c:56:2f:01:2f:5b:2b:d8:46:0e:40:bf:83:2a:67:d4:b7:
5d:e7:05:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:14 2026 by rpki-client