Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
File: GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json)
Hash identifier: mhxKfdH/MXKGH3BQmjlwdusnoNm4nKgcCv8YtJVU+zQ=
Subject key identifier: 39:0E:0D:45:A7:E2:76:95:69:FE:1D:F9:AD:62:F3:59:64:DF:8D:92
Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
Certificate issuer: /CN=19337ca56de7c3b977875369ecde53852515746f
Certificate serial: 019D9C2C860D87FFF9E08C7496035F24017B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
Manifest number: 1412
Signing time: Fri 17 Apr 2026 16:00:56 +0000
Manifest this update: Fri 17 Apr 2026 16:00:56 +0000
Manifest next update: Sat 18 Apr 2026 16:00:56 +0000
Files and hashes: 1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: FtVLMck5xFNXQY9RECS9z7iw+X/ldQyrp4wI4+HaMsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:86:0d:87:ff:f9:e0:8c:74:96:03:5f:24:01:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19337ca56de7c3b977875369ecde53852515746f
Validity
Not Before: Apr 17 16:00:56 2026 GMT
Not After : Apr 18 16:00:56 2026 GMT
Subject: CN=390e0d45a7e2769569fe1df9ad62f35964df8d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:bb:f4:eb:99:35:81:9c:11:3d:78:3f:d4:
47:13:9e:64:0e:e4:ed:42:fb:41:35:88:20:05:0c:
32:f0:c7:30:ad:ab:05:41:88:01:51:f0:89:2b:7c:
d0:3a:95:f2:20:0b:61:a8:7f:66:c1:2b:2d:dd:33:
9d:ae:e2:f9:e2:ae:15:f1:96:a8:1b:d6:42:4f:c3:
e2:de:4f:44:d8:ac:47:ee:78:f8:88:b2:ad:5d:1b:
12:6b:3b:76:6c:d6:83:9e:77:20:76:b2:56:05:9d:
e7:d1:ae:66:98:cb:7e:44:f4:3e:28:41:55:1a:5d:
a6:b6:a0:81:26:2c:47:a6:3e:da:96:39:78:2c:c1:
00:bf:b1:63:df:0b:5f:36:bb:08:24:4f:55:f7:6b:
e0:b3:c2:41:48:b4:69:dc:00:2c:5c:b3:cb:1f:be:
f7:d2:4b:73:a0:c3:7f:23:8e:34:76:a6:a4:4d:4b:
30:ac:45:eb:51:ff:c8:30:ff:c0:8b:29:48:1d:35:
b5:43:bf:66:3f:b2:53:c5:fb:28:f8:3e:8d:9f:b8:
98:f6:c7:78:29:70:da:98:87:1b:90:c8:b8:74:29:
be:22:18:be:08:b1:33:aa:dd:f9:e3:c6:7f:5f:c6:
97:a9:f0:60:34:7b:b2:c2:3e:36:3a:4e:c6:40:f5:
2b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0E:0D:45:A7:E2:76:95:69:FE:1D:F9:AD:62:F3:59:64:DF:8D:92
X509v3 Authority Key Identifier:
keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2f:e8:d4:4e:5c:0a:df:d4:17:6e:f3:53:a4:d4:98:0e:95:
9f:51:b2:32:fd:48:85:06:0d:59:67:1d:23:53:05:64:e2:06:
48:d3:5e:b5:89:a7:88:e8:1b:83:61:32:10:a0:0c:20:5d:91:
36:f9:96:cf:c9:39:04:d8:fd:15:fd:e3:b2:ae:44:94:b1:e4:
d7:9e:dd:fc:76:de:68:12:69:94:b3:4a:44:07:00:f4:f2:95:
2c:d8:f1:bf:c2:44:dd:f7:e7:07:74:49:c0:66:60:43:6e:f0:
c3:10:56:11:a0:f8:d2:b7:9f:2d:59:32:a5:1f:54:ac:db:59:
e0:c5:e8:7f:44:27:4c:d2:8b:47:28:5c:c0:79:d0:47:2c:d6:
f0:28:0e:53:e1:57:e1:b5:a1:66:9f:1f:01:46:66:ce:c4:4e:
04:38:10:10:56:ef:3a:04:76:04:5e:c3:09:7c:93:41:1c:17:
b1:fe:4b:f7:51:31:7a:24:6e:90:09:19:44:2c:e2:49:fe:0e:
b1:cc:18:67:52:22:cf:bf:b3:85:5f:d3:e7:34:f7:6f:ec:11:
6e:40:a7:0d:95:75:b4:e3:ad:a3:54:c0:1f:9b:ff:16:42:98:
75:de:4f:55:ef:de:38:c9:41:1a:92:52:ea:c2:e8:96:a9:b2:
c6:d5:69:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:27:53 2026 by rpki-client