Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier: vdBYgBIw80VJudhXeTUxMJhc7d/+ZDOTEi+LakmIhsg=
Subject key identifier: 98:2A:7B:0D:E9:BD:CF:29:F9:3C:AF:F3:2D:83:11:0A:D9:37:94:F9
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial: 019D2996CA791E5E6776B99FA26AC64EF4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 10:00:41 +0000
Manifest this update: Thu 26 Mar 2026 10:00:41 +0000
Manifest next update: Fri 27 Mar 2026 10:00:41 +0000
Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: f7Hiu5HenpNOqDVBaW2JP2etXoid0ygntvPiYuo/3us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:ca:79:1e:5e:67:76:b9:9f:a2:6a:c6:4e:f4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Validity
Not Before: Mar 26 10:00:41 2026 GMT
Not After : Mar 27 10:00:41 2026 GMT
Subject: CN=982a7b0de9bdcf29f93caff32d83110ad93794f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:75:b8:96:36:7d:71:4f:7a:9a:c9:cf:2c:9a:
27:a1:40:b1:40:7c:de:16:8e:10:ce:1b:b6:57:db:
91:0f:e1:73:11:87:8b:8e:85:6e:71:56:02:90:6d:
3e:04:d7:a3:df:6c:3b:5b:0e:eb:e2:0e:49:ee:0f:
58:1c:98:04:9e:e3:3a:fb:bf:bc:94:79:f0:8a:dc:
4c:33:24:7b:6b:19:1f:de:47:b7:fc:70:95:25:a5:
60:e5:64:f4:4c:33:19:e4:74:8f:25:7b:b1:f8:23:
b1:d6:e5:9c:b6:45:d2:84:b4:21:1d:84:66:0d:29:
e3:aa:a7:fc:af:cf:d5:31:d1:5d:dc:19:30:f2:26:
37:98:be:f0:39:3d:8b:51:7d:e9:b5:af:9d:2a:7c:
2a:fa:5b:91:a2:a5:1b:83:d7:4c:9e:7b:a3:e7:8a:
97:bb:5a:15:95:c0:18:36:c5:06:6c:09:6d:00:0f:
8c:0f:79:49:68:6d:6f:71:39:fa:e4:c8:a9:6b:4d:
ec:b4:b3:1a:d5:d1:9d:82:5c:c5:d9:a3:7c:fd:88:
02:f0:da:c5:5d:4a:60:0e:00:e1:79:8c:0a:cf:d3:
3b:0a:a9:31:a6:16:cd:8c:0e:b6:83:ba:70:b5:e4:
cd:92:79:f9:f6:b7:e1:59:94:63:68:4b:dd:cc:cc:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2A:7B:0D:E9:BD:CF:29:F9:3C:AF:F3:2D:83:11:0A:D9:37:94:F9
X509v3 Authority Key Identifier:
keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7b:50:99:07:84:12:9c:12:85:8b:d5:9e:24:42:33:03:3f:
b3:16:27:c5:cf:3f:e0:11:a3:32:7e:22:7e:a1:92:22:d5:72:
e6:57:70:d4:06:7e:ab:d8:56:f4:9d:12:91:ee:d1:58:d8:66:
2e:18:7b:a1:a2:a8:72:e9:ff:e6:b6:48:68:d0:04:aa:c7:62:
c9:8c:10:23:8d:fd:c6:63:c5:aa:4f:b6:c0:f4:d0:e9:57:f2:
9f:db:40:86:65:00:dd:9c:38:09:6c:9b:e6:35:5e:3b:79:fa:
14:54:1c:0d:94:f3:1e:67:db:91:f9:ff:c1:ac:85:5f:75:d5:
a0:30:82:bd:61:05:27:0c:56:b3:18:8d:ab:22:bb:5b:fe:5f:
9a:a5:13:56:96:f0:d4:b4:72:76:34:2a:d9:82:1b:89:92:1f:
bb:02:f5:77:b6:aa:4e:ca:8c:7b:98:03:fb:32:63:6d:0a:ed:
06:d8:20:d8:31:a2:f8:9e:33:80:5f:1d:66:75:46:3e:cd:1b:
f8:cb:78:ea:68:3e:f5:c5:d4:24:92:bf:eb:8a:59:e6:84:e7:
96:ca:4d:51:52:c0:99:8e:d0:d0:58:f7:a2:49:80:a8:2a:ce:
23:f0:16:c4:ea:f4:ab:e3:f4:f4:ad:a8:90:b6:66:9b:f6:86:
7c:fb:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:16 2026 by rpki-client