Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
File: GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json)
Hash identifier: qwR25gXfhC49YGhxKwkjzXbHNZ2MmPVyQ8iETtF8QH0=
Subject key identifier: 24:52:B1:B4:45:8B:5A:53:05:32:59:CE:3B:7E:49:CD:F8:33:F6:AA
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 019CAAC6CE5F6590756B974EF4FBFBF3FE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
Manifest number: 0CB5
Signing time: Sun 01 Mar 2026 19:01:21 +0000
Manifest this update: Sun 01 Mar 2026 19:01:21 +0000
Manifest next update: Mon 02 Mar 2026 19:01:21 +0000
Files and hashes: 1: AuWKANhvxq9kHiTgy1f7DHg4G9Q.roa (hash: d6Pp0aQuhZMtZL83upp5lwXAgjd29VSzR+vb2YU7l5s=)
2: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: 7o6ZCBfEwikLU6JFj4vRrcPC37WATSnrEjSg35sxd2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ce:5f:65:90:75:6b:97:4e:f4:fb:fb:f3:fe:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Mar 1 19:01:21 2026 GMT
Not After : Mar 2 19:01:21 2026 GMT
Subject: CN=2452b1b4458b5a53053259ce3b7e49cdf833f6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:d5:c6:1e:2e:e8:2b:c6:76:13:70:7a:cc:
e2:9e:3a:1b:13:da:d5:fa:1e:ef:40:f0:d0:24:53:
85:68:b1:92:c4:e1:69:5c:46:c8:16:d7:db:73:95:
53:2a:94:c3:3b:5a:b3:ae:75:57:08:c8:4c:af:25:
22:9c:0d:4c:ff:4e:67:d1:25:b9:5a:bc:cb:a3:ca:
c0:71:2b:9c:7d:fb:1d:6e:29:92:be:84:8d:8b:48:
8e:7b:c7:6f:22:ed:f0:32:b5:14:e6:da:1b:f8:63:
e9:9c:2b:dd:9c:7c:3a:2d:55:d7:54:ea:19:c7:16:
75:0b:1e:e6:52:d6:51:24:dd:ba:dc:de:37:80:d4:
60:80:cc:70:22:61:8a:b9:e5:f8:54:92:37:4d:88:
72:af:99:72:39:fd:91:e1:80:d6:12:94:04:0d:7a:
9c:d8:c3:85:c4:bd:d4:ab:8a:e3:c8:b4:4a:36:6e:
0d:09:68:55:64:d7:aa:24:d4:e9:73:a4:6f:e7:69:
1c:47:92:d0:4d:bf:60:76:4a:90:ea:34:dc:02:42:
28:a9:6f:6e:44:2d:79:e7:9b:78:ed:d0:ff:81:55:
18:b5:a7:fa:a0:d0:8a:9a:7d:53:2b:d6:c9:ab:73:
c0:30:82:50:7f:dd:78:79:04:56:36:4a:d1:99:04:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:52:B1:B4:45:8B:5A:53:05:32:59:CE:3B:7E:49:CD:F8:33:F6:AA
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c9:4b:bc:e8:54:3f:df:af:af:6e:d1:36:de:e7:66:53:5a:
75:e3:c5:d5:e0:63:d6:fc:8a:57:90:5b:ef:8a:bf:63:a0:33:
d9:c8:ae:60:db:c2:cd:47:4f:ef:fc:15:6a:00:cb:61:8e:df:
43:7d:48:cc:da:0b:4e:d6:5d:c9:6b:74:e8:70:ff:bc:c8:e7:
0b:81:3f:c5:e0:e7:4b:f2:ec:20:4b:37:5c:c7:52:d3:05:97:
6f:72:b1:31:06:e1:20:9a:78:a1:e1:a4:a0:2d:fc:4d:01:24:
05:d5:cd:49:c2:40:eb:78:b8:29:70:58:1e:79:82:0e:77:1d:
87:13:60:b9:7f:5d:f0:95:5f:5d:0f:84:04:87:73:46:94:c5:
f0:53:d3:87:ab:c2:37:df:cd:68:51:02:d4:41:ee:f8:e9:26:
d4:a0:dc:e4:e5:ff:82:c0:b5:e9:ba:77:a3:ee:8d:ee:9f:c7:
88:26:91:49:3d:6b:ca:c7:56:b6:f1:43:ba:b3:7a:dc:9d:90:
8e:bb:4f:7c:41:d5:5d:b7:15:db:1a:5b:6e:31:b7:15:ae:c7:
7f:8c:5e:c8:5b:16:45:f2:ae:3d:4c:69:1e:6d:3d:c7:f3:6c:
51:6e:04:87:12:d8:34:f7:73:53:16:16:43:93:5e:98:52:30:
68:96:db:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxs5fZZB1a5dO9Pv78/51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMmE0YmZkMmMwYzY5NzY1YTgyOTllZjc0OTY1Zjg2MmE3
MTQ4YjcwHhcNMjYwMzAxMTkwMTIxWhcNMjYwMzAyMTkwMTIxWjAzMTEwLwYDVQQD
EygyNDUyYjFiNDQ1OGI1YTUzMDUzMjU5Y2UzYjdlNDljZGY4MzNmNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPnVxh4u6CvGdhNweszinjobE9rV
+h7vQPDQJFOFaLGSxOFpXEbIFtfbc5VTKpTDO1qzrnVXCMhMryUinA1M/05n0SW5
WrzLo8rAcSucffsdbimSvoSNi0iOe8dvIu3wMrUU5tob+GPpnCvdnHw6LVXXVOoZ
xxZ1Cx7mUtZRJN263N43gNRggMxwImGKueX4VJI3TYhyr5lyOf2R4YDWEpQEDXqc
2MOFxL3Uq4rjyLRKNm4NCWhVZNeqJNTpc6Rv52kcR5LQTb9gdkqQ6jTcAkIoqW9u
RC1555t47dD/gVUYtaf6oNCKmn1TK9bJq3PAMIJQf914eQRWNkrRmQSZFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRSsbRFi1pTBTJZzjt+Sc34M/aqMB8GA1UdIwQY
MBaAFBoqS/0sDGl2WoKZ73SWX4YqcUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUt
YmI3MDgwMGMyYTY1LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUtYmI3MDgwMGMyYTY1
LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMlLvOhU
P9+vr27RNt7nZlNadePF1eBj1vyKV5Bb74q/Y6Az2ciuYNvCzUdP7/wVagDLYY7f
Q31IzNoLTtZdyWt06HD/vMjnC4E/xeDnS/LsIEs3XMdS0wWXb3KxMQbhIJp4oeGk
oC38TQEkBdXNScJA63i4KXBYHnmCDncdhxNguX9d8JVfXQ+EBIdzRpTF8FPTh6vC
N9/NaFEC1EHu+Okm1KDc5OX/gsC16bp3o+6N7p/HiCaRST1rysdWtvFDurN63J2Q
jrtPfEHVXbcV2xpbbjG3Fa7Hf4xeyFsWRfKuPUxpHm09x/NsUW4EhxLYNPdzUxYW
Q5NemFIwaJbbqg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:10 2026 by rpki-client