Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
File: GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json)
Hash identifier: SUOcE2hwLisnkeeHRvFdzB/0rgEYLqefBaEZBCOMLSs=
Subject key identifier: AA:AC:71:86:20:B4:A5:08:1B:B7:E7:2E:23:C2:98:24:3E:06:03:96
Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
Certificate issuer: /CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Certificate serial: 019CAF484E6810A9E2F38A2EF88EBC7BCDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
Manifest number: 1477
Signing time: Mon 02 Mar 2026 16:01:17 +0000
Manifest this update: Mon 02 Mar 2026 16:01:17 +0000
Manifest next update: Tue 03 Mar 2026 16:01:17 +0000
Files and hashes: 1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: BfG2cLkE1XoAi3KwUT9/qg3uj65od1Of/qQvsZVzHUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:4e:68:10:a9:e2:f3:8a:2e:f8:8e:bc:7b:cd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Validity
Not Before: Mar 2 16:01:17 2026 GMT
Not After : Mar 3 16:01:17 2026 GMT
Subject: CN=aaac718620b4a5081bb7e72e23c298243e060396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:ee:be:3c:b8:b9:b4:11:cf:7a:fc:f5:b9:
b8:ba:7e:35:cb:d3:89:a6:27:d4:31:9c:e6:d5:af:
23:56:08:c7:5c:f8:1e:8c:1a:43:06:3f:67:1b:59:
74:98:08:07:58:67:7d:d3:4b:77:cd:c9:f6:7b:23:
13:46:2b:1a:bc:84:07:e5:a9:d8:e6:98:3f:2e:4c:
d6:23:cc:c5:b6:5d:8a:b5:14:c4:00:66:95:8d:57:
eb:29:cf:43:19:c0:5e:8c:15:cb:55:c9:d3:3d:96:
50:f0:bb:0a:93:da:f1:d1:e8:56:7e:5b:3d:5d:6d:
98:47:ea:ea:18:5b:f6:65:ab:96:3b:60:7b:9e:b8:
ae:df:e4:df:69:3d:08:64:5d:27:b6:11:b1:64:d7:
7d:4d:5a:ee:3e:38:bb:7b:1e:41:dd:22:4d:78:3a:
76:9d:b8:a3:3f:23:0a:10:ac:7f:a2:58:b8:d9:89:
48:c7:34:50:ed:c8:62:c1:bc:88:f5:6e:e4:b0:2b:
72:eb:5a:88:a4:cf:40:eb:38:7c:78:47:a2:9c:d7:
09:d6:58:74:88:e7:0f:d8:6a:77:d2:c9:30:a4:8d:
1c:8c:90:29:94:40:9d:50:b1:a3:dc:2a:3c:f8:63:
03:b9:9f:84:08:55:59:58:c2:a8:dd:41:bd:da:6e:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AC:71:86:20:B4:A5:08:1B:B7:E7:2E:23:C2:98:24:3E:06:03:96
X509v3 Authority Key Identifier:
keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d7:e4:cf:7b:70:ee:49:21:af:c0:be:c2:1d:a1:81:f8:6c:
93:7c:b9:28:24:86:ef:6b:f1:a3:5f:a9:17:9d:9b:bb:92:f3:
f0:16:78:e8:9f:22:34:31:e9:30:76:eb:1d:b0:a8:d9:b8:21:
95:b2:8f:c6:ea:83:f4:e7:d0:3e:26:d6:f5:00:86:13:e7:78:
39:75:21:6f:4b:5e:bb:fa:d4:ca:8e:2f:1a:05:c7:87:6d:74:
20:da:ed:92:74:2b:76:86:06:9a:1f:60:dc:74:33:00:5d:a3:
5f:1d:46:e4:87:63:cb:a0:65:44:b2:ca:25:09:3e:0f:90:5c:
5f:32:00:f3:0f:fc:f3:a5:ae:39:77:fe:37:5b:69:fb:2c:9b:
59:7a:b7:16:6b:42:79:12:b4:d4:8e:c5:ff:55:c6:7a:df:1e:
f9:40:2f:2d:86:68:9b:16:3d:ae:84:cc:36:17:ee:ae:58:73:
61:42:31:09:1c:c4:65:e7:ea:64:02:d8:42:02:d3:39:17:c0:
4f:70:8c:c2:0a:67:74:6f:ad:8a:07:3d:bd:c5:ba:64:44:58:
6b:b3:19:d5:8f:ed:fb:9e:61:fa:51:a0:c0:e6:a8:25:ed:25:
33:56:1f:78:d7:d8:4f:dd:11:8d:ad:00:f9:c2:5f:c0:e2:57:
70:9d:78:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:10 2026 by rpki-client