Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
File: GkIazkbF3ViinUbNkfso_DnFb-4.mft (raw, json)
Hash identifier: WxATQLkJX2DKqEfO/th+Z7f5quBr//8rS8zU2Vd5d+M=
Subject key identifier: 82:5D:43:E9:49:DC:A9:86:FF:AE:2C:91:A7:8B:B6:B3:F2:16:46:B3
Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
Certificate issuer: /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Certificate serial: 019CA9B3C90845FEA4F8B04D98FBCDDC81C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 14:00:57 +0000
Manifest this update: Sun 01 Mar 2026 14:00:57 +0000
Manifest next update: Mon 02 Mar 2026 14:00:57 +0000
Files and hashes: 1: GkIazkbF3ViinUbNkfso_DnFb-4.crl (hash: NWzoRr9vqNDC0tKMPoG0JBqQJgYaC6EY707sX1fpTSU=)
2: yKhioiAI6-4jdwcerEQCLkvTbbQ.roa (hash: AKG0EdZvwdWd5/g3X8141KYxu5/oFF9spVOegmiaXd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:c9:08:45:fe:a4:f8:b0:4d:98:fb:cd:dc:81:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Validity
Not Before: Mar 1 14:00:57 2026 GMT
Not After : Mar 2 14:00:57 2026 GMT
Subject: CN=825d43e949dca986ffae2c91a78bb6b3f21646b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:e9:37:98:e5:42:72:9c:94:97:87:1d:8b:
0a:02:df:55:b3:c8:0d:8c:b8:be:9f:ce:03:53:a9:
11:03:62:8c:36:a1:3b:1b:b2:26:13:c1:93:02:c0:
12:96:5a:0e:48:31:31:31:af:e3:cb:db:cd:90:69:
16:05:1a:5e:b6:94:23:bc:25:90:fe:5b:7c:da:8c:
0a:96:58:83:db:c2:2f:d2:3d:6c:f3:ef:fb:7d:e3:
b2:bc:94:4a:8a:b2:f1:59:17:1c:36:9a:3f:d6:b3:
d9:2b:c7:d7:56:47:6f:cd:be:ce:c4:e6:63:38:2f:
50:9f:99:28:9a:7e:1a:fc:b8:fd:89:5c:5a:a3:ba:
5e:1b:e6:67:2e:fc:6a:37:2f:a1:dd:99:7c:49:c8:
bb:9a:69:d3:05:8b:58:f0:9f:c5:15:19:8e:71:aa:
57:16:a5:ae:13:ab:f6:6c:49:2f:f7:3d:cd:50:88:
1c:92:ec:44:f8:43:61:22:6a:10:ff:d8:6a:44:ae:
4b:d6:ae:0c:bf:7e:d7:95:4d:8b:f9:bd:7f:1d:3c:
b2:0d:6f:dd:4c:59:c1:89:62:8d:5b:30:cb:9e:e1:
d5:59:44:ff:08:dd:c8:29:e3:f7:18:8b:be:5b:26:
58:a9:9e:5f:20:9f:79:a3:63:b8:08:a3:c8:38:00:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5D:43:E9:49:DC:A9:86:FF:AE:2C:91:A7:8B:B6:B3:F2:16:46:B3
X509v3 Authority Key Identifier:
keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:87:5c:c8:bb:33:9e:b5:cd:2a:07:31:7c:54:ff:71:5a:e6:
74:7d:2f:a3:5e:d8:6c:17:77:7f:d8:da:8a:a7:f4:b7:33:ab:
ac:27:35:ab:57:82:03:c8:b6:e0:cb:11:9b:f4:4b:75:40:ef:
c3:b7:4b:62:aa:34:0e:13:49:28:8c:bf:b1:1a:fb:7e:6b:7a:
75:67:6e:f1:3d:ab:bb:d2:1e:70:2c:0d:5a:34:f9:8e:b2:87:
be:fb:7c:b2:2d:f0:01:da:96:be:4b:13:e7:0f:a9:88:a7:36:
88:d2:2e:13:5f:97:16:61:66:45:38:f4:c2:cc:fa:c5:1a:2a:
f7:9b:ff:26:42:c9:df:63:6a:63:9b:b0:0a:95:cf:68:5e:77:
c4:fb:c6:9c:fe:cf:8b:7b:b9:65:d3:a0:3f:b5:fb:a0:57:7e:
c1:73:68:6a:53:4f:a0:bc:e7:3a:66:cb:23:88:16:d9:a9:94:
77:99:c4:39:15:37:23:2b:e2:81:fa:ee:3c:dc:ee:88:9d:41:
a1:52:f8:35:47:a5:ce:cd:7a:87:b8:ec:c1:0b:4a:8a:92:d9:
54:95:67:36:46:e6:6f:ee:12:2a:87:c0:d5:21:23:e8:99:90:
2d:e9:01:17:e2:23:82:96:42:7d:a9:68:d1:50:9b:00:91:6f:
57:b7:b9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:17 2026 by rpki-client