Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json)
Hash identifier: AouLO6O/MyyMPLwLdn3uTcXpNqS0fZKbZ/7cNCeKOUk=
Subject key identifier: 8B:16:25:67:BF:37:B8:9A:B4:EB:6E:85:2A:3E:59:B7:6A:35:B0:5C
Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Certificate serial: 019D28166D538350CF0A70F1E45D30937131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
Manifest number: 0DAD
Signing time: Thu 26 Mar 2026 03:00:51 +0000
Manifest this update: Thu 26 Mar 2026 03:00:51 +0000
Manifest next update: Fri 27 Mar 2026 03:00:51 +0000
Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: /jbgmVWJ+UIjkRKfT0rsNZkfjMbO1hEcsthkeurrcpg=)
2: HnXupNyU6Ln1DvOJmDwyBCuBye8.roa (hash: e7NeeQetnUXIz/cPikG/o99FtcutUK+Ayg5ZE+4XzYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6d:53:83:50:cf:0a:70:f1:e4:5d:30:93:71:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Validity
Not Before: Mar 26 03:00:51 2026 GMT
Not After : Mar 27 03:00:51 2026 GMT
Subject: CN=8b162567bf37b89ab4eb6e852a3e59b76a35b05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:a5:7d:18:28:ea:16:a9:dd:db:7b:ba:6e:
39:ac:b8:f1:8d:19:aa:26:32:16:0c:f0:2e:77:b0:
a9:7e:7e:67:7a:42:f8:80:07:a0:47:9f:85:c8:12:
bc:d9:c8:51:28:75:2b:7c:8a:99:57:51:b4:cb:33:
17:db:2e:6e:22:7a:ac:4b:87:4e:99:21:a2:77:de:
b1:3c:7b:3e:e8:76:13:3f:2f:98:f4:e9:64:b3:01:
77:b7:3f:57:bf:7e:70:3a:dd:3b:9c:6f:9f:e4:3c:
aa:e8:fb:e2:58:68:c0:f2:a0:e3:1e:da:21:a0:1d:
24:50:58:61:5d:45:79:68:3e:e1:17:11:f4:fb:d5:
9d:e1:50:0d:b2:33:ae:f1:90:e0:0e:45:a6:89:9d:
28:68:3a:70:31:38:90:aa:c4:04:a7:f8:d3:c7:7d:
97:cd:f6:6e:43:3a:80:60:7e:6d:28:07:b0:81:0f:
a6:25:3a:fb:ea:49:30:46:fa:75:82:f9:fd:7c:00:
64:b4:ba:1b:4c:10:a5:ad:ec:fe:e9:e2:51:c4:27:
d2:f2:eb:59:a0:26:f6:66:f5:20:3a:d4:73:51:31:
42:b6:0e:eb:2b:c3:b7:33:f7:e4:06:bb:09:cb:0c:
73:cf:ae:5c:de:95:e5:2b:b7:2e:2f:b2:17:ea:99:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:16:25:67:BF:37:B8:9A:B4:EB:6E:85:2A:3E:59:B7:6A:35:B0:5C
X509v3 Authority Key Identifier:
keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b5:f8:0c:0b:6a:b6:bf:ef:15:1e:06:28:04:d1:5a:56:80:
5a:d9:af:42:64:6f:0c:49:b0:94:0a:f6:9f:7f:de:24:de:7b:
20:82:7a:f2:d6:f2:7b:f1:30:89:4f:03:a0:57:1b:2e:88:0b:
75:3a:9f:17:ff:be:c4:dd:64:ca:18:ea:34:85:b3:c1:c3:01:
4c:9b:ed:6d:a3:17:f9:7c:9b:05:35:fc:a3:b3:da:58:24:82:
8b:e7:c6:a3:8b:75:02:d3:fa:39:fa:01:1a:8d:a0:56:82:f9:
2d:69:de:9a:97:23:77:42:9e:21:a3:c2:38:9d:16:11:ac:92:
44:f1:f9:8b:17:77:7c:c2:d8:5f:8e:68:72:6d:e3:f6:b9:72:
89:bb:4b:eb:b6:c3:c7:28:94:53:31:cb:bb:c0:e6:f5:d7:e1:
7e:d1:f9:21:78:3a:f4:bf:43:b8:ba:5b:be:3c:fc:2b:3c:d4:
94:21:82:b8:a1:ad:f5:8a:19:4e:2f:de:60:bf:8c:07:cb:3f:
3e:2e:79:9f:48:f2:a3:51:f7:97:11:52:b6:a0:55:77:d6:fa:
bf:88:93:c7:7d:0d:40:a1:3d:19:06:11:30:da:63:e9:ab:62:
33:7f:c9:44:f1:82:35:2f:7b:61:f4:ad:66:17:6f:e5:77:79:
45:7d:da:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:25:38 2026 by rpki-client