Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier: 1XOd2WOcQviKAdMPxt2PzPj3OVWgiAR3hDeUVaAm29Y=
Subject key identifier: 99:5A:5A:60:E5:3D:84:0F:21:07:5C:B8:54:CD:BA:B0:F6:A0:CF:03
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 019CAA8FE44AFBE2CE64ECDA433E0CAD73B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:01:22 +0000
Manifest this update: Sun 01 Mar 2026 18:01:22 +0000
Manifest next update: Mon 02 Mar 2026 18:01:22 +0000
Files and hashes: 1: 1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa (hash: J9DAvhv9r0Mlaj2FFrH7O2ik+AlszrMRbhAMQDYeWAs=)
2: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: V8Lbszgqma1Gw82M44DYo3BJINQnN0MXoKrLGi8c/lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e4:4a:fb:e2:ce:64:ec:da:43:3e:0c:ad:73:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Mar 1 18:01:22 2026 GMT
Not After : Mar 2 18:01:22 2026 GMT
Subject: CN=995a5a60e53d840f21075cb854cdbab0f6a0cf03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:71:c9:af:fb:38:f5:47:ad:a5:08:32:eb:
51:83:06:ae:0f:93:16:dc:8d:4b:b7:82:91:c1:da:
dd:ed:63:93:64:c3:42:b1:bf:87:6b:d4:58:2e:12:
d1:77:42:78:97:59:98:a2:b5:53:d9:26:0c:e8:b6:
94:46:f8:08:7d:09:7c:e9:41:0e:56:af:65:08:22:
b9:c1:87:48:89:b5:23:d1:c9:57:88:b2:d6:f6:6a:
40:3b:65:c7:cd:8d:d9:46:ef:bc:31:b2:4f:29:1f:
b7:93:fe:4b:f0:c2:9b:10:51:d2:77:b3:d3:a8:31:
91:59:0b:26:b1:fa:00:db:cb:5d:04:8e:ba:ae:06:
31:c4:72:2c:74:d6:52:12:d0:4d:d8:5f:51:fc:a9:
fd:f7:51:cc:b0:0e:4a:3a:39:cf:82:84:5f:4d:5c:
17:bc:90:ed:00:60:74:1f:10:63:6b:5a:8b:a1:41:
9e:c8:4a:f3:d9:f5:c0:53:02:94:a0:80:de:5d:86:
83:52:23:79:5f:fd:f0:05:9c:59:c9:b7:b6:ac:33:
b0:a2:5f:78:2b:54:95:55:86:d0:79:28:b6:48:6c:
2d:15:30:18:94:12:7f:41:d5:21:18:b7:29:15:2f:
3a:85:a9:d3:a4:4d:eb:db:6c:a2:63:e7:6b:89:8f:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5A:5A:60:E5:3D:84:0F:21:07:5C:B8:54:CD:BA:B0:F6:A0:CF:03
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:22:59:7f:dd:92:f1:65:d3:c2:63:9b:05:c8:64:93:ac:51:
fd:3f:0f:f2:1b:c9:ac:ce:82:a6:cf:5b:ff:5c:3b:35:8c:2a:
7b:0a:4f:79:37:c9:1d:0c:ae:0a:0a:0e:aa:a0:0f:bf:7a:d7:
92:c6:de:4c:c5:43:ac:b1:3f:2b:1d:9e:ca:9b:39:37:18:4a:
72:b5:fc:f0:c4:9f:9a:f7:bf:64:49:32:f1:de:fb:57:71:0d:
20:f2:44:df:fa:05:00:21:bb:9d:69:ff:8d:1c:64:1d:6b:9b:
b2:2a:64:37:26:4c:c5:57:28:15:7b:87:d4:60:21:e7:eb:5c:
55:48:a3:84:46:f0:96:47:51:ff:97:c1:37:55:b0:3e:3e:e1:
35:b5:01:e6:b3:a9:cf:c5:81:a6:43:21:c2:61:63:91:ae:58:
02:57:29:90:cf:8f:4a:10:3f:be:ec:48:03:ae:10:3b:0f:3f:
4a:9a:d3:17:51:e9:a0:54:43:10:3b:01:35:73:44:eb:18:01:
32:74:fc:32:04:88:02:22:e4:75:d1:59:ef:2d:11:47:7d:d6:
df:25:9b:ea:05:76:7d:e4:ce:1f:be:a2:02:73:1d:dd:9d:da:
b4:8b:43:f8:e1:66:2f:79:b6:59:95:09:43:8b:77:27:9d:9f:
68:b4:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:31 2026 by rpki-client