Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
File: GPe8sFBdSWl9bFFzJBWGc257DXA.mft (raw, json)
Hash identifier: TSNoiVyKQIU4pHxXJZd5RuoqOKBQTu8isXFyFwHVFo0=
Subject key identifier: C4:11:7B:27:51:7C:AC:88:24:2A:3A:C6:44:54:20:C1:5A:60:C4:69
Authority key identifier: 18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
Certificate issuer: /CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Certificate serial: 019D2A050F1C391FBA3724CE8738F3B3E557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 12:01:07 +0000
Manifest this update: Thu 26 Mar 2026 12:01:07 +0000
Manifest next update: Fri 27 Mar 2026 12:01:07 +0000
Files and hashes: 1: GPe8sFBdSWl9bFFzJBWGc257DXA.crl (hash: M07wEadOUODPeMYkf+XbPY0U1B9lukKJitBwS5RKAfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:0f:1c:39:1f:ba:37:24:ce:87:38:f3:b3:e5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Validity
Not Before: Mar 26 12:01:07 2026 GMT
Not After : Mar 27 12:01:07 2026 GMT
Subject: CN=c4117b27517cac88242a3ac6445420c15a60c469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:fb:5a:5b:2f:87:2a:43:45:c5:79:3b:c6:
5d:0c:8d:cc:d2:8c:a6:f7:07:3c:49:65:f6:42:3a:
43:dc:96:0e:bb:9f:9d:06:f3:ae:92:ea:f4:17:23:
21:2a:bc:a6:38:1c:cf:ca:51:58:cc:3b:32:4c:9f:
1f:09:8b:3a:62:0b:5e:7f:f9:bb:dd:a9:d4:ec:01:
c0:c2:28:a1:82:c7:67:46:79:53:b8:b6:b0:df:01:
86:47:c9:7a:97:ab:86:fc:73:9a:e1:d6:76:d3:7d:
98:da:c0:b2:f5:c0:49:d1:82:97:d8:f9:16:f5:30:
10:42:c8:ae:47:04:a2:1f:41:66:c8:26:fc:05:55:
3c:bb:0f:4e:11:63:b6:4e:c4:d8:e6:8b:0b:43:1c:
af:0a:d8:bd:5f:40:d9:0c:99:e4:58:a1:d3:6b:72:
e9:d4:2e:e3:4d:c9:c2:4b:93:e4:2b:a2:25:7e:1a:
bd:0a:a1:b5:28:51:36:7a:13:98:03:dc:7c:a9:70:
01:4b:a4:8a:2a:6f:eb:aa:53:61:ca:a9:ba:e1:89:
6f:06:c1:4d:98:b7:f4:d0:82:0b:6f:34:52:84:c5:
0b:7c:da:a2:1a:1c:88:36:da:4a:97:37:62:0f:d3:
f4:10:e5:d5:44:b4:9f:a9:31:3b:8c:d3:ce:86:31:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:11:7B:27:51:7C:AC:88:24:2A:3A:C6:44:54:20:C1:5A:60:C4:69
X509v3 Authority Key Identifier:
keyid:18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0e:d6:08:72:b5:ac:2a:24:88:18:c6:02:88:4d:60:06:d4:
6c:9e:85:26:db:3d:51:d8:2e:04:59:7c:3c:fb:3a:e9:1f:29:
5c:1b:4d:7c:0f:26:fc:e8:c7:6d:b5:e4:4c:f5:97:86:67:1e:
36:6a:b4:03:d4:18:2f:d4:97:e4:c2:88:c6:6b:e3:70:39:a8:
c4:ff:5e:c2:01:7f:a8:6a:31:97:15:08:1e:ad:fd:eb:8f:54:
eb:1b:54:73:90:d5:ae:53:64:0b:a1:99:16:83:25:d4:54:57:
21:18:cf:09:ea:be:1b:7e:fa:f8:1c:b0:d7:43:07:a6:a7:86:
fb:57:85:da:47:49:8f:bf:04:81:a1:0f:32:33:95:45:82:18:
d0:16:73:91:ee:ee:01:8c:32:17:b5:63:2b:08:0c:70:8c:0f:
77:3f:ec:89:0b:ab:99:3b:6d:1f:fd:f6:9f:24:f6:9f:b2:b6:
82:e1:e9:ae:2b:96:18:2a:53:70:6a:79:ac:a5:99:cd:a0:4e:
a4:0e:79:57:18:0d:09:ad:41:e4:1d:c1:45:ab:13:d5:26:61:
b7:a2:74:da:0c:a7:95:16:64:13:4c:4e:d4:ba:fd:8b:d5:c4:
22:ce:87:eb:66:e1:ad:7f:41:1c:9c:f5:59:61:b0:25:8a:b4:
17:51:8d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:36:06 2026 by rpki-client