Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
File: GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json)
Hash identifier: rGeo4hvsxGBmjsu4nZjJs1LyYO0xQc6outLIgxapaWE=
Subject key identifier: 89:D9:DF:DF:2C:8F:71:02:F8:53:9C:FD:E3:A0:12:08:6E:A4:7C:84
Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
Certificate issuer: /CN=19337ca56de7c3b977875369ecde53852515746f
Certificate serial: 019CACB586DA57212DEA4B65A6564E13694B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
Manifest number: 1396
Signing time: Mon 02 Mar 2026 04:01:43 +0000
Manifest this update: Mon 02 Mar 2026 04:01:43 +0000
Manifest next update: Tue 03 Mar 2026 04:01:43 +0000
Files and hashes: 1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: a4mABasRy6ZagFbkYy8W+xRAxNqmyf5lmt+VqABATwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:86:da:57:21:2d:ea:4b:65:a6:56:4e:13:69:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19337ca56de7c3b977875369ecde53852515746f
Validity
Not Before: Mar 2 04:01:43 2026 GMT
Not After : Mar 3 04:01:43 2026 GMT
Subject: CN=89d9dfdf2c8f7102f8539cfde3a012086ea47c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:42:fd:05:43:6d:b1:5b:3f:a0:de:4b:d0:
a2:b4:1d:94:b2:51:9d:02:e1:c7:70:93:ec:1a:ec:
7e:b6:2a:63:ce:38:1e:41:61:e6:55:5f:65:51:7d:
8e:71:51:87:49:6a:36:46:60:2d:47:e7:0c:86:1a:
e5:25:59:55:ca:35:e0:88:eb:68:d2:c4:88:16:11:
7c:1c:13:94:58:e4:24:53:ff:88:b5:ed:6c:61:96:
d5:b3:ce:5e:9b:a5:85:d6:c0:f5:41:98:15:9e:b4:
da:05:a2:07:d8:82:f3:ac:02:9a:92:f1:70:09:c7:
d1:18:50:8c:4a:2e:26:a6:bc:90:9d:17:0d:0f:60:
7f:3e:e4:79:d1:a0:29:bd:ab:58:e0:a4:22:6e:1f:
30:40:a9:50:6d:e5:87:b3:b8:a2:66:19:f6:a1:d1:
3d:65:0e:34:4a:c7:cb:67:c9:6b:7e:52:9b:7a:fc:
92:8b:fe:5a:79:fd:0c:1b:11:16:8e:5f:1b:5b:dd:
e2:dd:7f:67:b1:00:d0:e1:e1:44:ee:26:ab:a4:a9:
50:84:65:f8:8d:98:79:d6:5a:30:54:16:c4:6c:b8:
f7:7b:da:f3:f2:6d:49:53:e2:b7:d1:83:3d:a8:48:
e2:ca:55:b4:da:d3:08:e2:88:6d:86:70:46:3a:f4:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:DF:DF:2C:8F:71:02:F8:53:9C:FD:E3:A0:12:08:6E:A4:7C:84
X509v3 Authority Key Identifier:
keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:e7:7b:2f:18:61:dd:40:f8:12:ad:5f:c9:f5:ba:c3:a8:01:
21:f4:73:f9:0a:31:17:4c:20:91:ca:4b:f4:f6:ec:76:db:b9:
3b:30:d5:a7:fc:10:38:8f:99:fe:f7:1e:5a:80:3d:9d:22:4a:
c2:a5:3a:22:d8:98:e9:a1:b2:8a:56:67:4d:63:c8:e8:2a:6f:
1e:35:1e:62:52:17:1e:1c:e5:58:f0:8f:64:bf:ee:a3:0b:96:
de:6e:97:a2:90:4c:c1:e1:82:e8:62:8d:68:51:16:9e:1d:a1:
71:f5:41:e9:09:60:32:a4:fb:6e:2d:48:9a:4e:76:22:e4:ba:
2b:71:b6:cd:04:6d:c2:f8:ca:3e:1d:86:25:4a:63:42:17:13:
bf:48:4b:b5:4c:37:11:7c:ef:c8:7c:c6:1a:88:34:31:e3:86:
65:5b:72:c0:24:57:66:76:08:c0:64:b2:6a:3f:98:72:06:ae:
fb:cc:48:08:c2:98:72:27:ec:cd:0f:8c:1f:2b:61:c6:d6:2e:
49:41:fa:66:c3:6c:75:b3:b9:bd:83:cb:bd:ea:4a:da:1d:73:
fd:b2:dd:99:6e:09:a7:82:12:ea:44:d7:35:82:ba:1f:fc:14:
ee:fe:16:30:a2:99:1f:3f:58:93:c0:bb:3e:98:85:9f:4d:67:
f1:b9:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:29 2026 by rpki-client