Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: 15MswaWqc8QLuw5aZOS1UtqHwMetlAElezz5cF5HHyU=
Subject key identifier: 1E:3E:C8:A5:3A:38:30:E3:8B:F4:5A:D7:CD:5F:3C:F6:5D:82:5A:51
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 019D3909C15452029FDDEE55B29101D5E5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: V6qXy3gIEZ9jrpDhV+w3plcMfLCy+9OvhJQ0qEqA5ck=)
2: f8VlKt8JzCNAPxp24L1Yki6OYWM.roa (hash: pdFJm+KiuiR3o4ERryoXHrfDwKAIlg8iSODri6S35nw=)
3: qLXb67dE1EAchhK-STW3jwCdYVI.roa (hash: drU9BCSr2spJludNeni+Da0l+Sz7+7Ab8hUqNLHYgcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c1:54:52:02:9f:dd:ee:55:b2:91:01:d5:e5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=1e3ec8a53a3830e38bf45ad7cd5f3cf65d825a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:c6:71:63:9c:bc:c8:53:bd:e4:eb:81:aa:
ef:3c:d1:68:ba:44:de:80:ed:32:d0:ef:53:50:e9:
6e:6a:cb:3b:21:a8:c4:c8:04:42:11:cd:ef:bc:20:
b7:f2:d1:82:ec:b5:28:3e:40:96:da:72:7c:3a:fb:
2d:ee:b6:f4:05:57:9c:11:b2:72:35:92:e1:5d:bb:
1d:b2:d7:eb:3b:5f:5f:8a:d9:8d:f6:6c:65:7e:68:
c8:30:a6:e1:bf:2a:4d:69:90:00:60:1a:29:6f:08:
1f:c9:89:b3:bb:56:0e:24:36:5a:3f:44:60:11:73:
37:b0:f3:8c:4b:82:fd:b6:90:f9:52:1d:42:39:79:
07:9b:00:8d:5d:0e:37:ef:55:0c:5f:ca:96:b5:fa:
0f:11:c7:84:44:26:48:6c:d6:ac:d2:a4:52:f6:6e:
81:2f:b5:60:ad:8a:99:09:e2:2b:6f:5b:d0:e5:b7:
8d:f9:d0:c5:99:24:86:55:e2:0c:e4:ef:62:2b:64:
7c:84:e1:6a:72:14:c9:e1:5c:8e:8e:0e:9f:8c:59:
b1:a3:3d:85:07:5f:36:df:c7:31:0c:e7:d1:b9:39:
7d:75:98:34:0a:43:e0:dd:5d:9b:92:23:1d:fe:48:
f1:10:74:d9:60:1c:dc:ef:cb:1f:68:cf:8c:ae:a8:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3E:C8:A5:3A:38:30:E3:8B:F4:5A:D7:CD:5F:3C:F6:5D:82:5A:51
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8b:c1:b1:79:36:c6:1a:df:29:12:73:cf:5e:aa:8c:ee:75:
52:49:7a:28:07:a9:6e:ec:3c:08:25:17:67:bb:ff:ca:8d:fa:
7e:7e:9f:6c:b6:73:91:d5:5a:99:8b:17:b8:7b:f8:97:b3:b9:
fd:48:a4:a9:f5:e1:79:f0:85:63:60:68:78:f3:a2:11:87:43:
ad:aa:ad:0c:f3:63:d0:91:77:28:22:3c:09:e3:ce:69:c0:43:
5e:b5:6e:95:57:45:31:4e:7a:90:5c:d1:21:12:b3:ba:84:d5:
40:2a:a4:9b:2b:1c:42:50:de:39:cc:08:33:9c:df:b8:5f:e4:
22:17:d9:be:b6:a8:65:cc:0a:9c:e3:41:9b:88:83:5d:13:a0:
7f:12:7f:1b:b4:c1:a9:26:e4:0a:22:2b:0f:d4:25:f1:55:80:
2e:9e:b5:fc:48:48:90:ab:9d:05:42:ab:b9:2d:e5:20:45:2d:
f1:63:84:a7:e6:5b:dd:62:f3:a4:77:3f:df:32:71:48:21:52:
59:46:51:82:75:1b:05:87:6d:a5:8d:38:10:a1:8a:ee:67:9c:
6d:bc:dd:61:b7:b3:38:d4:ca:60:78:14:6f:f1:87:82:63:22:
38:d6:c0:9d:0e:24:59:f3:c1:1f:b2:78:f4:3f:f0:49:97:bb:
04:60:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:18 2026 by rpki-client