Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json)
Hash identifier: XdpYpALudOW9OLDcyf1Z32Q+ng73gWwBzjovsdrVnes=
Subject key identifier: 4C:81:D9:5A:D2:52:8B:DD:B7:43:05:61:29:AD:56:5E:A6:EB:6C:4A
Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c
Certificate serial: 019D9AE309F906E22275F84A62347C4BA410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:01:03 +0000
Manifest this update: Fri 17 Apr 2026 10:01:03 +0000
Manifest next update: Sat 18 Apr 2026 10:01:03 +0000
Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: DA6BUhD1yetdleoq7a+mcCgAYL6ucbry6DiqJ5iPxic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:09:f9:06:e2:22:75:f8:4a:62:34:7c:4b:a4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c
Validity
Not Before: Apr 17 10:01:03 2026 GMT
Not After : Apr 18 10:01:03 2026 GMT
Subject: CN=4c81d95ad2528bddb743056129ad565ea6eb6c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:d2:3d:d1:ef:57:25:82:1f:b1:13:60:e1:
84:b7:aa:d0:34:10:a7:8e:72:55:9e:8d:aa:4a:3e:
49:af:7f:9a:fe:c3:07:de:5f:bd:7e:56:a7:4d:89:
02:6a:25:dd:76:f4:dc:73:98:4d:3a:a4:1c:3c:9f:
fd:01:23:29:ce:61:b1:0c:11:45:a2:53:b3:80:be:
ca:35:c9:4c:0b:18:69:dd:3e:b9:fe:da:37:86:3e:
25:75:ab:6b:5f:4c:8d:da:59:d1:68:c8:ea:63:a7:
0c:72:e7:27:48:7f:82:3d:dc:b2:39:d4:c0:7c:f5:
84:8e:08:1d:08:72:93:41:60:0e:5d:a5:b8:b5:e8:
95:fe:2f:23:f7:3a:be:15:74:3d:2c:8f:a0:1e:3f:
ec:f4:e6:3e:12:d7:fb:15:fd:29:45:fd:e9:c8:4b:
5c:d9:0f:b0:1d:cc:8e:64:94:1b:cd:0f:a2:78:86:
a5:38:ae:fa:60:b5:19:a3:66:66:51:03:9d:d3:98:
3e:09:92:64:e9:2c:79:d2:9f:8a:5e:41:6d:77:41:
b5:16:95:59:3e:a8:c2:1b:18:04:50:51:d4:15:11:
ce:85:d1:fd:c1:19:d0:1f:42:36:ba:78:c8:76:bd:
11:6e:9d:e2:16:39:0b:f8:dd:7f:d4:d7:c1:f5:c4:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:81:D9:5A:D2:52:8B:DD:B7:43:05:61:29:AD:56:5E:A6:EB:6C:4A
X509v3 Authority Key Identifier:
keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b5:72:ed:b4:b3:af:03:88:61:25:c4:84:55:a9:c1:a9:c6:
07:4d:63:dd:f7:5c:7a:ee:6b:a5:96:01:3d:30:65:43:6d:6d:
0d:78:c8:c3:71:03:ad:eb:23:3c:ac:64:b5:b4:73:2e:14:b3:
a6:36:47:b9:3c:49:03:4a:ce:08:21:a7:e4:96:b4:4f:3d:2f:
d5:ca:7f:4d:bd:7c:b9:6d:f8:5a:22:38:23:0a:39:81:63:4f:
35:cb:35:0d:82:aa:b6:ff:8a:cd:77:a9:86:e4:71:51:e7:7c:
50:6b:ac:65:d8:0e:10:2f:df:91:e5:68:01:a1:b2:f6:4b:74:
45:52:ee:28:cd:42:94:ca:73:5c:8b:ac:01:0a:21:6c:9b:67:
1f:95:9d:67:85:dd:49:83:bc:75:d3:fd:1e:cb:8a:25:4b:6a:
4c:54:95:6c:71:a7:ee:a3:7a:d2:7b:26:41:07:4a:02:9a:b0:
91:5d:61:1d:5d:ac:98:49:6f:c1:fc:3a:f1:83:85:1e:86:dd:
40:dc:a3:cd:a1:b0:42:f8:14:87:d0:65:c2:dd:ed:e2:59:ae:
51:18:e1:32:f3:dc:fb:05:1b:11:8b:f1:6b:a1:08:cd:6f:e7:
ef:64:f3:46:52:56:87:41:02:2a:35:59:84:8d:82:17:da:16:
56:4f:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:27:41 2026 by rpki-client