Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
File: GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json)
Hash identifier: T0+sWV/pf2aXwV6U4WodE0TCwUfaJmLwMUFo6TRtJQw=
Subject key identifier: 2F:45:D9:F6:A5:2E:06:2C:0A:08:C1:A9:DB:F9:BF:D2:30:A0:51:B8
Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
Certificate issuer: /CN=19337ca56de7c3b977875369ecde53852515746f
Certificate serial: 019D37C021C76E409209815B8B41BAD90B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
Manifest number: 13DE
Signing time: Sun 29 Mar 2026 04:00:31 +0000
Manifest this update: Sun 29 Mar 2026 04:00:31 +0000
Manifest next update: Mon 30 Mar 2026 04:00:31 +0000
Files and hashes: 1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: ZJ1Rrr8AgWUnSOC9mT5WAi3KlFHpVtA4/sZ/MF0YAIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:21:c7:6e:40:92:09:81:5b:8b:41:ba:d9:0b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19337ca56de7c3b977875369ecde53852515746f
Validity
Not Before: Mar 29 04:00:31 2026 GMT
Not After : Mar 30 04:00:31 2026 GMT
Subject: CN=2f45d9f6a52e062c0a08c1a9dbf9bfd230a051b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:3c:e6:5b:c4:9b:cb:93:df:48:81:ac:6e:
56:3f:45:a7:6e:4c:33:56:e6:8c:bc:10:69:6b:5d:
09:c3:c1:af:50:73:80:84:1d:12:7d:31:0a:f7:7d:
64:e0:92:f8:22:cb:d8:0e:be:2a:45:18:4f:3f:dc:
fc:89:cd:49:ad:c1:40:4e:17:32:59:e9:b3:0d:10:
ae:00:31:68:4b:6d:bd:3b:3c:8e:ea:29:5e:6d:68:
81:78:be:8a:22:f6:55:3c:94:47:a1:67:83:5f:c0:
2c:1b:cb:3b:f9:b3:3b:88:a4:d2:2e:3e:1c:73:5d:
29:fa:66:f3:25:9f:08:00:01:84:96:1e:fd:e1:c3:
2c:47:14:8b:c8:2d:37:75:90:59:ba:31:51:05:26:
92:32:a6:76:be:82:c5:bf:41:12:6f:40:61:8b:93:
02:2b:86:08:2a:b5:1f:f5:72:0f:83:90:71:bc:68:
56:06:19:6a:3a:94:7d:fe:a7:1a:b5:f3:45:71:9c:
46:09:c1:65:e8:3d:5a:93:30:57:48:cc:62:e5:39:
f6:1d:37:5c:86:6b:50:51:99:d6:df:bf:80:54:b9:
ec:f4:22:d2:36:77:3e:e1:90:e5:fd:a6:fa:3e:7c:
bb:37:10:e9:d4:40:47:30:7d:d5:dd:6a:a1:bc:35:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:45:D9:F6:A5:2E:06:2C:0A:08:C1:A9:DB:F9:BF:D2:30:A0:51:B8
X509v3 Authority Key Identifier:
keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:01:80:fc:46:99:33:19:97:11:8d:2e:a2:b3:94:93:6d:a3:
75:da:e0:51:10:34:ea:ff:ad:44:17:61:2a:12:68:45:c9:75:
73:fa:8e:b6:7a:d3:04:55:ee:65:64:a4:c9:a7:3e:06:b0:7b:
ad:c4:c9:3f:4d:5c:22:0f:28:ad:f5:43:32:d1:77:d0:9b:3c:
66:a3:f9:b9:90:55:76:8e:97:72:92:07:6d:d9:7c:bd:c4:67:
55:3e:fd:fc:bb:71:8d:6e:1c:f2:8e:92:47:ce:8f:f9:49:c8:
93:ef:1c:2b:e8:0b:f9:12:7c:65:b1:6b:c9:33:a9:c0:86:3f:
bd:d4:59:66:d8:2e:65:78:a3:bf:94:0d:69:2d:b6:13:61:93:
64:ea:3e:8d:b4:ae:bf:b0:b3:ec:20:ed:28:13:09:a3:9e:e2:
d0:c5:ca:08:6f:d1:68:4c:1b:c7:6e:d9:a2:d0:6c:f5:77:c6:
50:71:df:ee:5a:ba:4b:42:ae:f6:a8:1f:1f:79:7d:9d:fb:3f:
a8:89:51:4f:be:38:04:b9:b7:e8:89:8c:21:a5:30:52:70:f6:
00:ec:4c:ed:c7:1b:4c:1d:b2:c8:ad:13:c2:be:7c:9f:96:40:
13:2e:52:6e:bd:3d:ab:63:ed:65:14:1e:2b:9b:66:ad:61:7f:
ee:ec:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:17 2026 by rpki-client