Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: EsJcwTfXehFO6sIyw7YIG22sSXet9dD9ERO17p3K67E=
Subject key identifier: 17:7D:33:FD:74:AC:DB:5A:AB:1E:6B:8E:80:38:CF:96:54:5F:D4:D0
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 019CAD223FAB47D345195B38379E983AD270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 02A9
Signing time: Mon 02 Mar 2026 06:00:28 +0000
Manifest this update: Mon 02 Mar 2026 06:00:28 +0000
Manifest next update: Tue 03 Mar 2026 06:00:28 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: e7+DFjQSXe8tDFK0djxyP170DzU6sqgSfMEDNXkP6cQ=)
2: t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa (hash: Gojw7FbJO6oLOCFdJ+IonU5RAeRQTmH3d/fqvSSbRko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:3f:ab:47:d3:45:19:5b:38:37:9e:98:3a:d2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Mar 2 06:00:28 2026 GMT
Not After : Mar 3 06:00:28 2026 GMT
Subject: CN=177d33fd74acdb5aab1e6b8e8038cf96545fd4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:b0:71:b3:f6:ee:83:66:c2:c3:9d:a4:fe:
44:45:ab:d6:80:c0:cc:fb:3d:54:96:3d:ec:23:8c:
5a:f8:b8:6c:1c:03:72:3f:35:cf:13:80:48:c2:22:
96:7f:cd:a4:6b:40:43:08:d3:86:8c:9b:c6:f5:a2:
e9:94:d9:47:e8:59:4b:97:f6:03:24:e4:90:bc:d9:
67:06:9a:e8:a0:a5:93:4d:c1:e9:a8:40:26:c3:ad:
fc:dc:55:fb:c1:9e:9e:9e:b9:84:bb:08:25:2d:a2:
5c:f5:8f:bb:fe:8d:1d:03:be:44:75:2d:0d:e5:67:
8d:9d:40:fe:bf:e2:8b:f5:59:ef:fe:ec:00:54:02:
c6:30:bb:0c:69:66:b9:9a:05:b8:91:08:2c:f6:dc:
16:87:66:39:c0:9f:14:51:43:8f:b4:67:e7:12:15:
85:ff:31:aa:65:15:c3:db:b9:80:b4:c7:e0:6c:eb:
af:43:04:7c:09:eb:65:81:6d:9f:f0:71:44:46:50:
3d:a9:69:82:4f:34:a7:89:d7:27:a6:16:2a:dc:ea:
f0:0a:7e:1c:53:7f:58:d4:63:6c:8f:ad:5c:5e:d3:
d6:12:1e:d7:32:00:18:53:e0:c7:aa:89:12:f3:2b:
a1:73:33:c9:76:7e:05:1c:5c:3a:36:80:76:1f:c6:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7D:33:FD:74:AC:DB:5A:AB:1E:6B:8E:80:38:CF:96:54:5F:D4:D0
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:13:f3:7b:9e:0f:4c:f3:cc:4a:fc:f5:6d:ca:90:62:76:f1:
ae:c2:95:ac:43:ef:7a:3a:98:cb:14:03:04:4c:20:21:22:4a:
99:15:15:e3:9a:ea:59:8a:f6:c8:db:bb:67:ab:49:18:2d:b8:
af:52:8b:39:51:80:a6:06:9d:9d:ee:00:51:14:7c:85:d2:ca:
20:16:3f:c0:76:8d:ac:c8:6c:f7:ba:83:97:95:65:42:fd:14:
12:9a:28:c4:4f:ec:dd:f8:34:1f:15:4a:b9:0e:94:a8:db:af:
46:eb:30:7a:de:0d:2f:5f:e6:48:fc:60:0e:70:4b:82:4d:f1:
a1:7e:18:4a:af:cf:04:1e:35:10:38:1e:b4:61:aa:b2:0c:2c:
a7:08:96:5e:86:5f:6c:0b:df:01:33:fd:24:d0:2d:08:10:85:
6c:e5:b1:46:8e:7a:52:a0:e8:7e:d4:72:bb:5d:cb:4c:a9:6a:
86:e2:8c:88:34:50:12:58:12:f8:5b:ed:32:5e:af:8e:b9:c2:
f4:fc:5f:d5:3e:1e:68:38:5c:e3:95:21:32:4a:6c:75:fe:49:
75:4e:de:18:04:ac:3c:52:02:a1:db:1f:e1:a4:9f:45:2a:5c:
d9:8c:b5:7b:b6:b9:c5:f6:47:84:b0:b5:f3:f4:c4:9b:12:1a:
4e:63:6d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:39 2026 by rpki-client