Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
File: GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json)
Hash identifier: zkBoRTZ8sXixJGkJLu2TkJX3kiqNRelf3uYPUF3kVBo=
Subject key identifier: 2A:26:6C:25:DC:E0:D6:CC:F4:62:14:44:F0:FB:AE:B2:53:5F:CC:A1
Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
Certificate issuer: /CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Certificate serial: 019D2703EAAB280D3603711F5A35C42376BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
Manifest number: 14B5
Signing time: Wed 25 Mar 2026 22:01:01 +0000
Manifest this update: Wed 25 Mar 2026 22:01:01 +0000
Manifest next update: Thu 26 Mar 2026 22:01:01 +0000
Files and hashes: 1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: EYvHVC2xi1WxXt7FaSZVIeIe/BH12TyBCll3pCVcqKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ea:ab:28:0d:36:03:71:1f:5a:35:c4:23:76:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Validity
Not Before: Mar 25 22:01:01 2026 GMT
Not After : Mar 26 22:01:01 2026 GMT
Subject: CN=2a266c25dce0d6ccf4621444f0fbaeb2535fcca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:4b:2c:96:25:a0:3f:ed:83:6c:f6:76:c3:
a7:6a:9c:9f:8e:80:c5:20:a4:92:2b:2d:b6:f9:ff:
e5:d6:41:ab:d5:dd:2b:5f:83:69:21:dd:e9:fa:18:
1e:68:1a:a9:b1:08:dd:d7:ef:87:a6:69:7f:9a:9a:
35:eb:31:c8:5e:d4:e8:44:fd:67:9b:e3:56:14:2f:
e6:bf:0b:06:b6:23:c2:17:ee:95:bf:c1:df:89:1d:
33:dd:10:4a:18:09:15:18:69:c7:b6:f6:77:18:b4:
a0:6b:f1:3f:63:d4:cd:4f:60:4b:1c:ad:f3:7c:72:
61:ae:2d:66:aa:8b:5c:7e:c4:74:ff:a9:c7:5c:9e:
f4:20:f6:52:63:ab:c1:25:fd:c1:65:34:f0:af:4f:
7d:b7:2d:eb:4c:4c:e3:c1:ea:40:a8:f1:c2:10:9b:
f9:f6:f8:48:ae:cc:f9:eb:26:fd:0e:84:5e:4a:cf:
6e:f1:8f:04:79:fb:4a:61:88:fe:50:8f:59:bc:7a:
a2:8e:53:19:61:f4:a1:25:26:09:77:4a:73:d4:f3:
55:cf:21:bb:3a:86:b9:b9:66:ff:5f:99:70:f8:32:
24:d1:c3:4d:81:80:73:43:d6:b2:3d:14:38:64:e0:
71:90:40:8a:47:65:4a:a5:c4:33:8e:2e:9f:96:99:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:6C:25:DC:E0:D6:CC:F4:62:14:44:F0:FB:AE:B2:53:5F:CC:A1
X509v3 Authority Key Identifier:
keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:c7:cf:7a:ff:7b:ad:92:0a:dd:ce:ae:12:07:98:97:cf:56:
f1:51:08:ce:41:11:8b:d1:d7:0c:af:31:ff:e9:ab:0c:a0:fc:
6f:0c:65:4d:68:c3:41:fd:37:4c:19:5e:7c:d9:8e:d4:c8:82:
1c:08:2c:49:00:bf:24:0e:42:b8:f8:9e:56:bd:44:df:a0:72:
3f:3e:c0:f4:e1:e5:4a:2e:0d:14:af:a4:2f:a8:27:5c:fe:74:
53:08:23:a6:96:ab:67:8e:0f:7e:5e:57:af:0d:1b:d5:65:a4:
55:aa:65:dd:81:96:27:04:69:5e:d6:2b:83:82:e7:24:51:e7:
d6:fa:03:67:cf:61:6e:96:98:6f:1d:9e:d6:93:54:1e:f5:89:
6a:76:51:aa:88:07:21:cd:86:c0:09:4d:2a:28:af:6c:3e:46:
57:9d:73:9e:20:ae:88:79:c7:81:6c:e9:91:84:a5:e5:24:fe:
d3:d4:8f:74:72:3a:c7:7e:3f:c8:45:6b:07:3b:db:2d:40:9b:
0d:ce:e1:f7:99:3c:9e:4d:58:60:0e:aa:21:c4:d4:11:3b:38:
d0:2f:db:32:67:94:1b:a3:0c:f8:36:d6:23:d9:69:db:7b:d5:
b4:d4:de:41:2b:db:2a:ce:cb:5b:ad:bb:93:2a:b3:19:46:ab:
f6:20:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:44 2026 by rpki-client