Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File: GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier: GyRCNU7vvdpjO9IAT60waqhNX9U/Uh19v++p74U6/gE=
Subject key identifier: 16:E7:9A:46:D8:2E:12:03:75:77:86:59:00:33:4F:3A:88:E3:29:CA
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 019CAD592AAEF74F39B58041882EAB05A2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number: 0CFD
Signing time: Mon 02 Mar 2026 07:00:27 +0000
Manifest this update: Mon 02 Mar 2026 07:00:27 +0000
Manifest next update: Tue 03 Mar 2026 07:00:27 +0000
Files and hashes: 1: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: 7gim82zbaav5DJLmNNr7FRmBAcvMzMyOdKbpgJoGgQ8=)
2: HS3nZ0zy9rnKNuUQJIH2lNuhV3s.roa (hash: AgTDhdZgzXbDinGCbfeqfnNTye+ByZ5TlKKfMLNM5jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:2a:ae:f7:4f:39:b5:80:41:88:2e:ab:05:a2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Mar 2 07:00:27 2026 GMT
Not After : Mar 3 07:00:27 2026 GMT
Subject: CN=16e79a46d82e12037577865900334f3a88e329ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:20:09:cf:be:cb:65:89:5b:76:eb:27:1c:
af:ba:b3:73:5b:fb:58:3f:46:fe:a3:be:f2:3c:cc:
3d:86:37:f6:f3:6b:15:92:10:1e:93:77:c5:e3:17:
55:f2:ba:fb:1b:82:22:4b:5e:2a:96:f2:12:14:10:
48:ff:78:fa:9b:a4:35:d4:98:a2:0d:d7:d1:76:d1:
58:38:98:7e:f6:8b:81:eb:5f:cd:21:11:cb:f2:5f:
d0:40:8f:0e:74:5a:eb:c8:24:3d:fb:8f:36:44:ac:
33:5b:29:24:92:26:6f:b6:4c:8e:79:ae:48:87:72:
91:af:be:70:c6:55:d8:44:b3:4e:3a:12:be:0e:82:
50:b5:8a:24:58:7f:74:8f:ae:80:90:fe:6a:d5:8c:
03:9a:e5:5f:ff:5a:49:8c:7b:bf:d1:1b:ca:cf:7c:
0a:a8:db:cf:94:85:73:4b:97:fe:76:b9:99:15:9e:
fc:af:de:c8:ca:25:b8:76:78:72:7a:71:f7:c1:6b:
01:43:2c:dc:64:cc:78:d0:6f:41:5b:0e:a1:8a:ff:
91:04:07:46:76:66:6f:df:10:73:af:15:6e:34:6f:
e7:41:3e:71:57:46:e6:e3:99:c9:65:b0:09:b9:31:
df:5c:43:7f:bd:d1:20:bd:e7:25:03:97:58:1a:7d:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E7:9A:46:D8:2E:12:03:75:77:86:59:00:33:4F:3A:88:E3:29:CA
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d5:61:a5:3f:cb:4e:a7:6b:14:c3:44:6a:d1:4a:0b:89:12:
09:3d:66:b5:2b:86:95:40:23:fd:a0:43:43:29:44:57:a0:d5:
bd:86:96:ec:5b:90:1c:38:3f:65:b6:70:ee:d8:41:2a:43:70:
5d:13:f6:7e:a3:c1:87:a0:12:68:35:99:6a:28:2f:0d:c1:b8:
fc:fb:8d:fa:6f:f8:e9:e9:57:95:40:8d:8a:64:b3:04:aa:e2:
38:70:bb:8a:63:b8:bb:86:ff:8c:0c:2d:cc:50:a3:d4:88:0b:
50:83:81:46:7a:52:e3:2d:92:47:82:59:4b:10:e2:ad:67:11:
b0:b1:ef:f2:45:4b:ba:7e:47:92:39:db:07:de:61:16:88:5c:
af:50:23:e4:4c:f7:70:b0:d6:e1:a5:d1:27:de:1f:27:3f:ee:
58:54:62:1c:22:10:64:6a:09:88:11:4b:ad:da:33:30:22:f9:
46:da:32:b1:33:b2:83:cc:ab:96:0f:60:4c:94:cb:f1:74:1c:
53:f2:be:b7:3a:1c:ec:80:5e:c7:02:ef:ac:bc:6c:ac:e7:27:
2b:25:ad:dd:59:9d:55:0d:3e:e0:f2:b8:de:3e:50:e6:b5:2d:
51:cf:e3:b3:26:d6:58:a4:f1:58:f8:79:a6:97:c7:74:63:80:
7d:b4:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:30 2026 by rpki-client