Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json)
Hash identifier: IScE9kLP75TPsPckNreNwws/jsgiydCDZKyCuK7orJM=
Subject key identifier: 6E:40:DD:6E:B5:8F:6D:60:D5:A1:20:55:6F:C6:A7:86:CD:C0:44:63
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 019CAA584C62E1189CECC7575F1BFC7AF5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 17:00:39 +0000
Manifest this update: Sun 01 Mar 2026 17:00:39 +0000
Manifest next update: Mon 02 Mar 2026 17:00:39 +0000
Files and hashes: 1: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: R00sthoD2YAQZgq/Pi83ZEqZ4qKTZlA7HZOnCHzTmJ8=)
2: T9LuV_lKN_28uDuP4XufTzMSbP4.roa (hash: RqEiAiqPldTyuCtIL3PVLaEYZ+maSd+fgKyN1HQoYbc=)
3: TgCNYCVBJe7DHibK2wEIBWCuz98.roa (hash: QIFBXUnI5cHb70d+ToykREH9LNgrc+X3rqWxt+px7zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:4c:62:e1:18:9c:ec:c7:57:5f:1b:fc:7a:f5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Mar 1 17:00:39 2026 GMT
Not After : Mar 2 17:00:39 2026 GMT
Subject: CN=6e40dd6eb58f6d60d5a120556fc6a786cdc04463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:58:26:e7:1e:ba:a2:2e:57:1b:9e:ac:96:
2f:8f:af:c9:93:65:24:0e:12:f1:8d:c5:2c:ec:e5:
09:5c:65:8d:96:27:5e:ea:0f:3e:1e:0f:31:17:3c:
0c:0a:22:49:66:d2:97:c8:ad:e3:8c:3a:47:86:b6:
7c:1a:e0:92:2e:65:7b:61:d5:99:ef:75:41:fa:1d:
cd:b9:5f:6a:72:8c:37:ef:a2:9e:f1:b2:0a:a5:6f:
b1:af:72:25:0b:71:33:3a:71:f8:70:3b:47:01:31:
0a:17:10:b7:8f:43:b0:11:c5:9c:ce:ac:08:a1:39:
22:c2:c2:9d:10:56:e7:b6:de:25:de:b7:53:c8:5d:
b8:58:34:ce:16:54:38:5e:fb:d9:71:f4:cb:b8:07:
a5:be:94:90:8d:29:e6:e4:39:30:bf:37:28:dc:a8:
42:07:05:48:25:f3:7e:74:99:f4:6e:8d:48:97:81:
28:b1:9e:05:18:cf:22:16:34:4a:fc:2c:ae:42:2e:
f3:80:42:8e:ec:79:48:ee:9a:84:a0:2b:11:47:d3:
45:49:08:0f:e4:0e:26:ed:9f:02:b0:62:89:a3:6c:
17:83:88:eb:f7:41:fc:92:3d:be:2e:41:0d:f4:cd:
f8:7a:ec:72:6c:a2:82:28:19:81:09:de:20:12:03:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:40:DD:6E:B5:8F:6D:60:D5:A1:20:55:6F:C6:A7:86:CD:C0:44:63
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5f:be:cd:5b:91:f7:a0:01:18:6b:a2:87:f3:2a:94:34:c3:
84:c4:c1:6f:8a:09:d4:41:63:da:0f:51:40:d8:c3:14:d0:0a:
f9:85:a1:0e:a8:68:62:a7:6f:5d:59:fa:a4:f7:d8:15:a9:6f:
61:b2:fa:19:4a:ce:68:c4:24:5a:0a:56:44:38:6c:fa:c7:a5:
34:a7:7d:c8:23:3e:a8:25:5d:d3:29:54:af:8a:63:5e:7a:e0:
1c:3d:c9:b7:a4:9b:d7:55:3b:dc:ea:f9:06:f8:1f:6a:3e:69:
d8:99:92:6d:82:3e:0a:a0:91:49:dc:04:91:36:54:52:88:29:
f5:05:47:a6:bf:20:ba:d9:39:3a:2f:82:81:39:5b:db:47:56:
db:59:6d:0d:dc:e3:e2:7c:f4:95:0f:07:e7:43:39:95:69:05:
90:de:c4:bc:2e:d4:ee:af:fd:b8:e7:c7:97:23:77:ab:99:f3:
0d:07:d1:4b:69:73:e8:c6:ea:dc:f0:2e:9d:b6:ae:b1:42:a3:
fe:79:54:8e:d8:e8:a6:91:cf:22:b5:d4:71:9b:1b:87:0e:42:
6f:a0:d5:43:93:89:d7:6b:b6:08:a9:ee:d8:ad:8e:7b:2e:89:
c0:70:80:41:2a:6e:c9:99:58:bf:c1:43:6e:a9:41:29:3d:13:
b1:77:7b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:39 2026 by rpki-client