Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json)
Hash identifier: 56UbtD7Ecp3+gTfpJDxMDBb86jI7ihQwkXCmSihcCL4=
Subject key identifier: C8:38:0B:13:E9:69:51:93:D4:49:BF:75:2C:3C:44:01:99:C4:DB:CB
Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c
Certificate serial: 019D329B15137AC9B0591CD7092DA2454BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
Manifest number: 1888
Signing time: Sat 28 Mar 2026 04:01:57 +0000
Manifest this update: Sat 28 Mar 2026 04:01:57 +0000
Manifest next update: Sun 29 Mar 2026 04:01:57 +0000
Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: EmKRiBRPLZU8EEamYrUiW/E/vBhLbH6R5KQcxyiIhGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9b:15:13:7a:c9:b0:59:1c:d7:09:2d:a2:45:4b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c
Validity
Not Before: Mar 28 04:01:57 2026 GMT
Not After : Mar 29 04:01:57 2026 GMT
Subject: CN=c8380b13e9695193d449bf752c3c440199c4dbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:68:e2:6a:ec:81:d4:24:a7:75:79:d3:47:
85:43:24:70:58:c2:7c:9b:e4:97:41:ad:ff:53:3a:
09:8a:72:83:8b:7d:39:4b:73:ed:81:c5:51:56:64:
9d:6b:a7:02:1f:1a:58:05:73:e1:fd:bf:06:76:e1:
ba:fd:a4:56:25:26:d5:a5:d8:5b:7d:bb:71:50:b1:
17:08:73:69:59:5e:75:12:a9:5a:8b:86:45:34:f6:
54:ea:8c:46:bd:4f:f7:10:31:41:97:93:5d:01:eb:
d2:d0:82:4a:9a:06:f4:90:51:fa:8c:25:f5:71:c6:
47:fa:ed:16:fe:44:36:80:00:63:e3:9a:59:81:a2:
ef:fc:f6:7c:2c:8d:98:61:3f:d7:9b:5c:51:1c:8a:
72:50:b7:72:71:05:59:ec:4f:c6:05:ed:ab:23:e0:
8d:0e:8e:7f:c8:81:01:30:ae:9a:40:2a:0e:1f:67:
b4:60:01:59:41:20:24:c0:c7:22:ac:b5:23:d0:8c:
fd:62:c6:eb:68:bc:a1:f1:ef:ca:0e:e6:92:2c:9a:
bf:30:2f:6c:d7:b3:f1:f4:b8:6e:17:77:6c:cb:ce:
97:92:2e:bc:f8:17:1a:b6:fb:f3:39:64:47:a0:57:
16:c7:81:ea:6c:d4:b6:47:3a:21:6a:67:ae:e4:4b:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:38:0B:13:E9:69:51:93:D4:49:BF:75:2C:3C:44:01:99:C4:DB:CB
X509v3 Authority Key Identifier:
keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dd:87:f4:ac:5d:c5:62:f4:58:7a:c7:99:4d:68:69:67:6e:
c8:54:bd:d9:e0:1a:2f:05:1e:b4:09:e2:09:8c:73:fb:22:f1:
e9:21:11:b0:6e:91:83:e4:ff:fe:8f:a2:8a:9d:54:ea:7b:f3:
1b:12:6f:1f:d9:f2:ce:7a:db:19:9d:b0:02:9c:98:7c:ec:d1:
e1:44:77:dc:54:62:7b:68:af:25:a1:77:5b:68:f1:aa:f9:32:
dc:67:70:c0:05:f6:b9:00:16:8e:1e:c5:eb:d2:bd:24:fd:4d:
3c:5d:58:f0:02:ba:4c:20:f3:ef:66:8f:a0:4c:2d:89:b7:cb:
df:17:25:f3:df:72:cd:ba:b3:9c:b3:50:23:ce:4f:ce:69:65:
3e:45:27:30:63:b0:63:32:37:ad:16:cc:48:f1:7f:be:69:99:
cb:0d:c9:3f:b5:8d:d3:55:f2:83:20:93:54:88:51:06:df:80:
0b:08:d3:fb:e6:b6:cd:c3:dd:61:53:1a:3b:f9:8d:ef:e0:96:
93:ed:32:4d:87:b0:1b:e6:c4:61:d7:e1:ca:93:12:b2:48:fe:
71:1f:49:a1:57:cd:e8:d4:cc:a5:64:4f:6c:5d:62:05:ff:59:
9b:2e:e2:e8:37:8a:be:b9:3e:67:b1:a3:8f:d6:88:7b:b5:6e:
54:51:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:01 2026 by rpki-client