Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
File: GPe8sFBdSWl9bFFzJBWGc257DXA.mft (raw, json)
Hash identifier: oFCD9xzTfjF1F9CKoheMxcx0KXChoed4sz3awoCarts=
Subject key identifier: BE:4D:8B:96:33:7D:7C:D2:C8:1E:04:2B:24:CB:95:86:C8:5D:54:A5
Authority key identifier: 18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
Certificate issuer: /CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Certificate serial: 019CAA8F72AB64825077397C6417BE32EF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 18:00:53 +0000
Manifest this update: Sun 01 Mar 2026 18:00:53 +0000
Manifest next update: Mon 02 Mar 2026 18:00:53 +0000
Files and hashes: 1: GPe8sFBdSWl9bFFzJBWGc257DXA.crl (hash: fX3wJhZslznsZ3IXldPR91LOSoT5HC60rynboF7IamQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:72:ab:64:82:50:77:39:7c:64:17:be:32:ef:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Validity
Not Before: Mar 1 18:00:53 2026 GMT
Not After : Mar 2 18:00:53 2026 GMT
Subject: CN=be4d8b96337d7cd2c81e042b24cb9586c85d54a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:e8:17:cd:eb:40:d7:06:05:0b:07:44:b5:
31:26:09:6c:93:99:f6:09:e9:be:fb:b6:a7:6f:d6:
27:54:f7:b0:41:ae:de:cb:18:29:6b:d1:e3:03:aa:
f6:91:d0:78:eb:b1:d2:0d:9e:76:c1:28:49:90:19:
0a:02:07:92:d6:25:a4:f2:fc:0f:0d:84:61:35:64:
c1:76:05:14:1b:7f:3b:b6:21:95:02:2c:55:b9:ee:
2c:ca:51:8f:11:ec:66:ae:72:92:d0:f5:da:f5:c5:
b9:87:64:eb:08:23:cc:0b:ab:c3:7a:6a:61:44:81:
c7:a2:e2:fb:6e:eb:ba:cf:2d:84:d2:9e:3a:d8:a5:
0d:8f:65:60:0a:fc:f5:73:25:a2:d0:99:d8:26:f4:
04:c0:b7:cf:2e:72:34:0c:db:b9:70:0e:fb:3e:d2:
17:51:2c:51:3c:98:aa:34:f7:b9:e5:e1:1c:34:85:
93:be:c4:64:2b:84:23:0c:e3:64:10:93:84:28:8c:
10:1b:83:98:3a:56:b2:2e:02:32:fb:61:9f:58:89:
52:6d:a0:02:bd:e5:04:2e:e9:1b:a2:ff:98:61:aa:
3c:55:39:59:5f:13:03:cd:c6:0a:03:1b:c8:fd:33:
ca:c7:1e:b1:b3:31:2a:b3:f0:d6:ba:62:81:12:0f:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4D:8B:96:33:7D:7C:D2:C8:1E:04:2B:24:CB:95:86:C8:5D:54:A5
X509v3 Authority Key Identifier:
keyid:18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a3:3b:b8:ff:50:f6:69:da:24:15:39:c4:e4:da:be:cd:b6:
f6:b5:a4:02:9c:16:d9:d1:8d:3b:87:1f:d9:46:58:b3:9b:e7:
06:f2:a1:8e:9e:3e:19:f2:98:91:48:0c:dc:0c:b5:40:03:c0:
51:4e:b6:40:73:53:e3:08:4c:dd:d9:b4:4f:c6:e8:da:e9:4d:
8b:19:d9:dc:dc:9e:79:b1:b2:04:a9:57:2b:83:3f:93:84:8b:
24:ba:94:09:f3:22:9b:31:89:e7:68:cf:0d:c3:53:ca:13:dd:
62:13:56:f0:94:b2:ff:4b:af:9b:7b:53:0c:b4:57:42:0b:fc:
f7:ee:16:d8:dd:64:33:ea:ee:59:f4:d0:78:e5:da:4d:ff:cf:
5f:16:34:92:d7:56:ed:a4:a4:2b:e3:1c:c6:68:aa:1d:05:90:
1d:b7:85:9f:e5:99:6c:10:e4:31:36:de:2e:28:96:19:4f:6f:
5a:38:cd:18:a4:2d:54:44:c5:5c:76:f9:f6:a1:06:3a:9d:60:
ea:21:a1:c8:33:a9:3d:7b:00:44:4f:7c:1f:0a:18:ce:89:78:
86:30:04:54:ff:df:b7:d0:d6:35:ad:d1:cc:67:bd:fd:03:76:
8d:db:d4:bc:25:c1:f0:c9:77:6b:d7:27:b8:c1:e7:c4:3b:3b:
d4:08:08:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:15 2026 by rpki-client