Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
File: gbv0m8K-YG6m9Ivb-WJX3natfMA.mft (raw, json)
Hash identifier: FKlhZ7mHaHCOXIPytugesnNIJtzMn2GWMjtODw/P/Wc=
Subject key identifier: BD:17:D5:8F:AC:C7:28:89:1F:AF:5F:1A:49:33:EE:5C:E5:78:39:AA
Authority key identifier: 81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0
Certificate issuer: /CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0
Certificate serial: 019CAB6BCEB3CF29731EF6B52FCB000608F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:01:35 +0000
Manifest this update: Sun 01 Mar 2026 22:01:35 +0000
Manifest next update: Mon 02 Mar 2026 22:01:35 +0000
Files and hashes: 1: gbv0m8K-YG6m9Ivb-WJX3natfMA.crl (hash: oFpv7axZ4TA5Lvx1eQUX1UwEmfJk+keltDqnP/gFGvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ce:b3:cf:29:73:1e:f6:b5:2f:cb:00:06:08:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0
Validity
Not Before: Mar 1 22:01:35 2026 GMT
Not After : Mar 2 22:01:35 2026 GMT
Subject: CN=bd17d58facc728891faf5f1a4933ee5ce57839aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d6:58:ea:83:18:94:57:51:5d:d9:74:e2:46:
e1:f9:3b:09:d4:e3:01:f6:9e:a7:69:e7:f3:1a:a1:
cc:84:58:6b:df:8f:71:81:2b:8d:15:30:91:16:38:
4f:05:f9:d0:ef:00:10:c3:08:30:d4:26:66:c3:58:
08:0d:a8:07:48:68:8c:ae:d8:30:5c:3d:61:26:d6:
c4:40:f6:d7:29:50:3b:fb:b2:b9:b5:9d:16:d5:d5:
d7:41:1f:be:f7:53:1a:8e:8e:a7:0a:de:ea:8a:14:
b6:dc:25:d7:91:a7:3a:d1:83:aa:01:98:46:59:16:
8f:d3:2f:48:32:7e:c3:12:37:ef:ae:cb:67:77:f3:
1f:1e:c8:70:12:9d:0a:66:97:ca:da:12:3d:d5:8b:
4a:d2:46:29:54:08:23:28:bd:4f:b3:2d:f9:82:c6:
d2:cb:6e:87:7f:1b:67:9e:6a:ff:76:fa:fb:fc:05:
25:f0:77:ee:ab:94:e3:03:6a:bd:43:09:b9:6b:05:
6c:d8:31:18:1a:20:26:33:66:8e:26:19:68:d0:88:
49:56:f7:65:cc:04:e5:ff:c9:b6:2f:d9:28:33:51:
15:cf:cb:5f:7b:fa:d7:c2:95:8e:20:cb:42:b2:fe:
ed:14:1a:d2:e8:fa:a0:85:05:7e:8b:31:ca:2c:48:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:17:D5:8F:AC:C7:28:89:1F:AF:5F:1A:49:33:EE:5C:E5:78:39:AA
X509v3 Authority Key Identifier:
keyid:81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6c:7d:b6:85:31:86:24:89:7e:2d:41:e4:13:24:0b:8e:7b:
a2:92:ce:e1:3c:15:65:fc:e1:97:55:a1:c8:28:c3:3d:d1:ad:
13:28:e7:76:0b:a1:61:f2:b2:56:ac:0b:fc:24:1b:92:2f:7d:
ed:08:9a:6d:73:0b:51:97:d5:5a:b0:cc:75:b5:5d:98:b5:ed:
0c:49:53:c9:9a:b6:a9:8d:40:ea:8b:2b:61:81:a7:de:ad:07:
87:9c:75:18:f0:21:b8:a3:ba:dd:2d:d7:94:2b:a7:73:9f:4a:
d1:52:5e:79:44:d7:bd:4f:fc:6c:db:2d:87:91:df:eb:05:e7:
cf:1d:d4:f8:6d:35:a6:33:93:06:1d:74:20:63:a8:9c:1f:a9:
52:0b:fe:7e:33:ab:01:92:9c:6d:ae:41:79:4f:fd:04:76:f7:
21:3f:bb:04:dd:81:b2:35:e8:e1:44:9b:2d:75:07:50:e8:29:
fd:ec:8c:27:ce:db:c1:b8:35:05:67:02:a0:c3:39:51:08:c7:
ea:3c:99:5a:a8:89:2e:5e:39:5a:9b:08:66:00:de:d2:22:e0:
51:32:08:3f:1d:5a:89:79:59:6e:ea:1c:b9:b5:f4:4f:e6:d4:
d1:ba:61:90:17:3b:2f:05:32:a3:22:07:57:6d:a3:5b:ea:58:
37:e2:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:50 2026 by rpki-client