Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier: NJKpILANI1IesTFQkywXHM2cYLJxhmYPgofWt35nnqY=
Subject key identifier: 86:25:CF:F3:D7:D8:03:09:F3:34:EA:B7:35:42:46:CE:85:98:05:9C
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 019D27E009190C1A9C91935D99EB1C3E6DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number: 09F7
Signing time: Thu 26 Mar 2026 02:01:26 +0000
Manifest this update: Thu 26 Mar 2026 02:01:26 +0000
Manifest next update: Fri 27 Mar 2026 02:01:26 +0000
Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: sOqaaMGhZ6hxdf3fD6HhSHA/WMre4TdKtHQpOipCANQ=)
2: IjGrmYJ01VhSBHqQt8lEwuCam0E.roa (hash: wRhA0UxHh3OEkpsw+jN2w//ZJrtHgK8+FbKZBNihmv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:09:19:0c:1a:9c:91:93:5d:99:eb:1c:3e:6d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: Mar 26 02:01:26 2026 GMT
Not After : Mar 27 02:01:26 2026 GMT
Subject: CN=8625cff3d7d80309f334eab7354246ce8598059c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:33:54:71:22:7e:d2:83:4c:d1:51:c2:40:11:
ce:f8:51:dc:43:d6:67:2c:86:b7:d5:7a:69:55:c5:
52:56:90:26:cb:84:69:7f:8f:8b:1a:79:86:40:2b:
9b:5e:20:bf:0e:06:09:98:de:1e:a8:f9:4c:a9:9d:
ea:bc:43:1a:f1:75:57:1c:bc:a1:c1:a4:b3:d3:b8:
e9:a1:99:c0:4f:01:6a:84:28:66:67:0d:36:ba:0b:
26:b7:69:04:dc:89:e1:a6:bf:6e:84:a2:ea:08:09:
95:d0:da:d7:31:9b:49:24:e0:3c:3e:8c:f7:63:70:
0a:a0:9d:2a:a4:c8:b9:7c:1f:fb:5f:d5:24:fa:2e:
fa:80:5d:6e:ce:f7:01:b3:47:cc:2b:a7:eb:19:d8:
bc:f7:7b:5e:87:0b:cd:63:90:99:88:2d:ef:9e:66:
f2:60:89:1c:1c:3a:0c:a4:15:f9:17:b6:73:3a:67:
30:a2:36:74:ba:47:13:47:51:55:89:bf:26:17:16:
23:3f:dd:9c:e5:a0:3d:a4:b2:8e:de:f0:91:c3:98:
ad:e6:c8:ae:f6:ac:cd:56:39:57:c8:78:7e:fe:bf:
f4:a5:f9:5e:25:16:2f:09:bf:6a:96:26:64:a8:96:
e2:f7:07:49:69:57:76:50:3a:22:01:f1:78:85:9d:
81:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:25:CF:F3:D7:D8:03:09:F3:34:EA:B7:35:42:46:CE:85:98:05:9C
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ba:cc:88:a8:d7:78:f5:7b:2d:4b:b4:1f:d4:42:98:ab:59:
83:cb:f5:3d:5e:8f:0c:f8:80:f3:a1:21:ce:50:7b:3e:ca:51:
26:8f:79:9a:e2:77:b6:d0:45:8f:21:8d:f4:05:45:89:0a:45:
a5:d1:06:2a:2c:54:62:e8:25:a4:55:17:b0:03:8a:4c:ae:8e:
25:3e:5f:dc:a4:b3:d6:e3:19:8b:a2:fa:ba:9f:c5:b1:45:59:
f4:6e:75:c8:47:48:ca:e0:ed:d7:b8:1d:10:7b:da:fe:44:4b:
8c:97:17:b6:73:99:32:f4:54:56:7c:2a:62:26:c2:ca:98:47:
55:2e:0e:b6:3e:d2:f6:87:a1:b1:f5:b6:ce:39:45:0f:cf:74:
4c:e8:4f:66:19:30:6f:13:6e:18:c3:be:03:cd:e2:74:46:cd:
85:28:7d:74:6e:42:fa:00:87:aa:b0:77:9e:ef:aa:dd:39:95:
46:a2:e5:36:b7:c4:3f:3f:e6:3b:80:21:75:f9:fe:e2:42:ee:
27:b4:a0:95:30:02:b4:50:b4:78:39:af:a2:38:79:e2:e3:f5:
22:07:77:a6:90:e6:81:66:00:62:75:27:6b:97:e7:69:11:49:
ae:5a:51:6d:c5:c1:68:f1:fd:04:e2:21:45:0c:67:0f:fb:86:
70:1c:95:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:12 2026 by rpki-client