Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier: aJ2O1JinoNa7X0InB0kAd96CU3CSgvoS0wurWcN0hJ8=
Subject key identifier: 60:86:06:34:04:DD:8B:A3:9F:F3:DC:D0:7D:6D:A7:91:79:C6:74:A4
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 019CAC46D1E7A3F25F4697F5C00E9AF4FA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number: 09B7
Signing time: Mon 02 Mar 2026 02:00:48 +0000
Manifest this update: Mon 02 Mar 2026 02:00:48 +0000
Manifest next update: Tue 03 Mar 2026 02:00:48 +0000
Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: jE+8r3NkR3vMehfLrGvSNK89Fcz9tr5Z2ja1PbVnjpw=)
2: IjGrmYJ01VhSBHqQt8lEwuCam0E.roa (hash: wRhA0UxHh3OEkpsw+jN2w//ZJrtHgK8+FbKZBNihmv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:d1:e7:a3:f2:5f:46:97:f5:c0:0e:9a:f4:fa:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: Mar 2 02:00:48 2026 GMT
Not After : Mar 3 02:00:48 2026 GMT
Subject: CN=6086063404dd8ba39ff3dcd07d6da79179c674a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:56:84:03:7c:f4:fd:e7:63:34:67:1b:1b:
1f:3e:f3:23:e0:ab:5f:60:08:06:c0:72:26:1f:77:
98:ed:fc:a5:5e:93:46:4c:08:c4:0b:a5:cf:d5:55:
80:c2:c2:5b:9d:7c:d9:a6:ad:cb:29:fb:ca:b5:c1:
93:d6:3c:56:67:8a:b2:da:ca:24:5a:1c:fa:24:bb:
de:86:2e:5c:65:c1:cb:93:a3:37:55:3b:04:0e:7d:
90:28:4c:96:07:f1:c6:a5:f6:04:3e:33:6a:4b:7c:
a0:d6:1e:3d:83:38:9e:4d:b6:cb:33:6f:3f:91:fb:
e5:03:dd:ad:01:30:3b:f5:3d:b6:50:a8:a7:30:ce:
0b:96:3a:b1:31:f1:22:d9:4f:cd:52:b2:a6:d3:0f:
76:57:3b:12:34:fa:42:4f:79:b2:23:f4:37:7d:fc:
fd:27:f4:74:52:ea:7c:f9:33:93:a8:15:8f:c5:04:
f9:9b:f3:c6:9c:2a:00:d8:48:b7:32:85:76:af:f8:
27:cd:e2:f2:a9:cc:1d:b3:d0:cc:b8:33:89:6e:98:
de:0e:17:f5:16:25:88:3d:30:34:0a:61:ec:05:78:
0b:67:e8:65:55:bb:1e:0a:eb:78:a1:3d:15:73:1d:
92:64:9c:d0:da:c2:18:ce:a8:ef:82:05:02:16:0b:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:86:06:34:04:DD:8B:A3:9F:F3:DC:D0:7D:6D:A7:91:79:C6:74:A4
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9c:99:28:05:e9:3f:d0:0e:56:56:ed:6f:b4:b4:aa:d4:17:
d7:01:5a:d7:ce:ce:b4:c6:35:66:ed:24:e9:5c:56:66:62:0a:
77:3a:0f:0a:17:60:8b:b5:fe:96:5a:1a:d4:d4:56:e6:a0:77:
b8:38:b1:bb:60:47:96:69:58:b9:41:d7:91:bf:78:08:58:92:
54:31:b6:c8:24:84:cf:4b:1d:27:95:38:ee:53:25:9b:79:37:
ea:9a:e9:65:e3:58:6d:d5:16:48:6b:db:6f:59:90:7b:39:0f:
4e:c4:d4:35:63:39:59:68:66:41:15:c6:72:4b:4b:94:f8:17:
a3:71:fc:49:22:11:b0:90:c4:a7:ae:8e:25:f2:ed:af:a9:19:
ed:b6:20:1e:ce:b8:de:ba:2a:39:b7:b1:43:b8:b5:2d:a4:67:
84:7d:46:02:31:9b:2d:28:6a:81:dc:bc:c2:18:14:99:65:39:
8c:bd:0c:f9:9c:c0:5e:7f:2b:63:81:3b:28:a3:ea:ad:bc:85:
91:f6:8c:14:4c:62:73:61:04:b5:af:6a:f6:ad:29:f9:e0:bc:
4f:58:37:67:44:cb:a4:30:cd:8b:4e:62:b5:a1:6f:13:02:c9:
e2:c4:d5:f5:a3:14:8f:7b:27:2f:4b:a2:c7:45:24:c8:66:d9:
2a:ac:d7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:45 2026 by rpki-client