Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
File: GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json)
Hash identifier: m+lmbbfjcnauzhTuWgvAnPR8xG4czkRbAdiDo/RKUcE=
Subject key identifier: 30:7B:8F:E7:E1:0B:C4:5A:EE:90:19:11:61:A7:AF:B9:A0:3C:BF:0B
Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
Certificate issuer: /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Certificate serial: 019CABA1E8368B998208D97A0E93938985C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
Manifest number: 04AC
Signing time: Sun 01 Mar 2026 23:00:40 +0000
Manifest this update: Sun 01 Mar 2026 23:00:40 +0000
Manifest next update: Mon 02 Mar 2026 23:00:40 +0000
Files and hashes: 1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: ZpnCyfY0sXXN7iAitHQ1SCUHkJ4LiyVIjUgL+gLadoc=)
2: UFE842JQ7HXlV4O8ypyYJqZjKxo.roa (hash: d4GAUahRXjgUNYF+NjmfLkIgWSJGMgXblr9oMS3knEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e8:36:8b:99:82:08:d9:7a:0e:93:93:89:85:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Validity
Not Before: Mar 1 23:00:40 2026 GMT
Not After : Mar 2 23:00:40 2026 GMT
Subject: CN=307b8fe7e10bc45aee90191161a7afb9a03cbf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:df:17:67:83:95:bf:8a:fc:b4:59:0e:ce:
d4:50:d0:45:28:e6:1b:eb:0c:79:9c:de:78:b1:b1:
55:89:a8:71:2b:13:bb:74:df:73:e0:57:d7:cc:aa:
63:44:a4:c6:e8:b9:d6:fc:1d:b7:06:5f:15:42:2f:
8e:30:fd:38:a9:80:e9:22:68:d9:d8:f2:82:1f:d8:
b1:5e:74:f9:46:2e:de:54:a9:10:f8:77:d6:56:0f:
d8:81:ba:00:13:7f:f3:29:98:a9:63:99:45:d3:d6:
eb:df:ad:9d:c5:bc:58:cf:eb:33:88:a2:16:05:c0:
10:76:9a:d9:51:71:e9:a7:af:9f:4d:5b:e8:14:53:
4a:1d:ab:6d:aa:e6:49:6f:60:5a:e5:ab:00:63:ef:
28:ab:10:1d:9d:4e:84:8e:cb:95:fb:66:81:ad:5e:
49:55:f3:6e:f0:47:b4:21:80:a7:5e:8f:9c:98:13:
8a:8e:5b:aa:b0:21:37:fd:d4:d9:a1:aa:a0:ff:15:
4d:be:2d:2f:9a:6d:28:84:ed:e0:96:bc:f7:a1:50:
b1:7a:d3:25:bd:23:04:a4:8c:93:a2:ee:b5:26:df:
bf:60:7c:34:2b:c5:15:76:05:b2:a0:f5:6e:df:b9:
4d:a4:51:8f:6a:4d:fc:11:af:40:19:b6:5a:d3:00:
a7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7B:8F:E7:E1:0B:C4:5A:EE:90:19:11:61:A7:AF:B9:A0:3C:BF:0B
X509v3 Authority Key Identifier:
keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:61:f2:b0:cc:09:4c:b4:ae:dd:69:2d:26:80:58:20:c8:b3:
c8:0b:d7:12:70:9d:3f:f7:0c:04:3d:a2:52:7f:d5:11:fc:49:
f8:df:5c:ed:7e:e4:fc:04:8f:ed:61:76:3a:56:ce:be:66:63:
78:38:b2:f7:29:7e:03:f4:e6:58:f6:eb:27:1f:9d:c1:f3:e8:
e2:41:83:f8:9d:ed:26:a5:e0:8f:e5:6e:53:55:84:77:c1:a1:
96:35:bd:ff:ae:23:5a:88:4c:56:db:21:e1:98:0d:ce:1c:c9:
57:bc:65:9e:e0:92:2e:a8:3b:54:7f:8e:c3:23:a4:3e:59:c5:
56:dd:35:7e:00:e7:06:38:d1:b1:21:01:53:49:3c:f2:dd:ca:
a2:29:84:d2:7b:b4:0f:e6:4b:2c:c5:be:5e:ca:f7:e3:8f:53:
4f:40:ad:ba:15:7f:eb:77:2f:cf:9e:0d:63:cd:b8:91:88:f6:
03:68:df:18:17:30:14:b8:de:5f:88:52:3e:66:aa:cd:55:3b:
5e:c5:9e:fa:0e:04:e4:0b:dc:05:c3:1e:bb:93:df:1c:2b:b0:
88:3b:94:00:01:9c:ad:e7:22:6c:a9:17:1e:00:c3:4e:da:93:
ee:be:c3:92:8c:b6:e7:32:ec:0e:4a:45:cc:ee:b2:76:e8:9d:
14:c4:0c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:22 2026 by rpki-client