Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier: UyLS7Qqj94YrrXSpVO2WuQhNs6QQXB0nETTMzv2uX0A=
Subject key identifier: 68:F9:1B:C0:42:F8:AF:E6:2E:AC:92:D7:45:4A:0F:D8:2B:37:6B:51
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 019D9A073B7E1A66EDFC96F3909CF7DDF1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:00:58 +0000
Manifest this update: Fri 17 Apr 2026 06:00:58 +0000
Manifest next update: Sat 18 Apr 2026 06:00:58 +0000
Files and hashes: 1: 1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa (hash: J9DAvhv9r0Mlaj2FFrH7O2ik+AlszrMRbhAMQDYeWAs=)
2: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: DyW1p8l/qreHa4tRw23aVgJhd6R6SFc1mRa7t1+HWvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:3b:7e:1a:66:ed:fc:96:f3:90:9c:f7:dd:f1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Apr 17 06:00:58 2026 GMT
Not After : Apr 18 06:00:58 2026 GMT
Subject: CN=68f91bc042f8afe62eac92d7454a0fd82b376b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:18:5b:cd:4f:bb:63:c1:1e:b8:1b:75:06:
63:be:8b:cf:10:65:8d:11:4c:db:d3:e9:53:80:52:
a8:89:ed:51:8e:4d:63:63:14:c1:08:f3:27:e9:65:
96:41:e5:44:6f:3d:d9:14:8d:57:96:f6:cc:a9:c9:
fd:15:ad:f1:02:34:06:be:32:84:1a:1a:c8:df:60:
d5:05:b5:8e:48:75:40:79:fb:43:ce:b5:e6:4c:25:
ac:e3:4d:07:73:19:c3:a8:02:1f:02:d2:e1:09:e2:
8c:07:8e:bf:0f:46:0e:0d:24:13:77:74:aa:e3:ad:
e0:74:f4:45:cc:6e:26:6f:1e:dd:8a:5b:aa:db:85:
c5:5e:4e:09:b1:cd:25:3a:27:06:15:29:85:fc:f7:
b2:cd:ed:21:63:c6:9d:6e:49:2e:27:fe:7e:11:10:
65:32:12:44:bc:14:a4:bd:a9:9c:9e:02:f6:9a:7a:
4d:ae:86:58:06:a0:5f:24:17:9f:00:fd:8d:66:79:
a9:6b:e5:f9:84:c7:c6:fa:b6:55:2f:c8:d3:6e:36:
87:e0:62:9d:34:a9:cf:6f:49:92:bb:20:42:c7:cd:
b5:47:c1:b2:e9:d6:bd:ed:f8:c3:f6:82:c4:01:33:
16:d3:da:1a:f1:ff:b1:26:15:15:bd:bf:6a:d2:1a:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F9:1B:C0:42:F8:AF:E6:2E:AC:92:D7:45:4A:0F:D8:2B:37:6B:51
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bb:fa:1a:06:aa:83:83:96:87:a1:87:6d:ae:2d:aa:04:1b:
83:16:1a:2a:67:82:a3:19:6a:d1:32:2e:d9:0f:85:ef:5a:4d:
db:c8:87:35:13:0e:33:0b:7a:f2:5f:f7:ce:fd:2a:7a:bb:1c:
74:5d:ce:1c:50:a4:7b:bf:88:2d:37:38:d4:db:67:d8:44:d9:
f3:d4:52:a9:99:36:a8:dc:28:b7:aa:d0:c7:bc:93:fe:eb:18:
3e:42:1d:06:ea:b3:6d:63:e8:45:1a:de:68:10:71:8e:82:40:
86:c2:50:19:ac:76:be:2a:3a:76:0a:01:74:08:f3:8a:43:55:
14:78:8a:4e:d7:d2:fc:36:61:9b:95:0c:21:57:e9:43:60:da:
4a:0c:2d:12:17:e0:92:e0:35:f2:1a:04:93:7f:aa:03:d9:9d:
37:e3:52:92:b6:4a:7a:64:d6:56:7d:db:46:a3:59:ce:21:4e:
bd:df:2c:eb:1a:e4:7b:02:94:da:f4:6f:00:26:37:57:bf:a3:
99:c7:74:64:8b:46:2d:8f:9d:6d:ca:db:88:5a:3f:4b:46:17:
c1:7b:cf:89:03:cf:e3:66:ff:07:cd:48:9c:a6:79:e9:12:db:
43:6d:7e:c5:a7:0e:c3:c0:ae:30:84:9f:99:a0:a2:f1:9b:d5:
91:08:9b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:35:05 2026 by rpki-client