Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier: oiOrZqPX/gGJdMk+tIeQFHA0y1A1d4GosjdT/FfXR98=
Subject key identifier: 40:9C:68:20:92:E2:3E:2E:7C:6A:EA:D4:B3:9B:27:9D:6F:8C:FA:CE
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 019D2816B4525DD74D7B98C9DB273E5CBDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:09 +0000
Manifest this update: Thu 26 Mar 2026 03:01:09 +0000
Manifest next update: Fri 27 Mar 2026 03:01:09 +0000
Files and hashes: 1: 1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa (hash: J9DAvhv9r0Mlaj2FFrH7O2ik+AlszrMRbhAMQDYeWAs=)
2: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: 9WXuX7qK2LG7tE7ApCD1CvwVWB5aqoOAbS2EgsgrMoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b4:52:5d:d7:4d:7b:98:c9:db:27:3e:5c:bd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Mar 26 03:01:09 2026 GMT
Not After : Mar 27 03:01:09 2026 GMT
Subject: CN=409c682092e23e2e7c6aead4b39b279d6f8cface
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:74:0b:ba:cf:83:4d:74:cb:19:88:f3:89:
25:cc:d6:e5:7d:d8:ec:a8:cb:5e:d9:ac:d8:c1:84:
42:d1:40:f1:1d:56:d8:89:a6:e5:1d:09:72:6e:2b:
30:a4:0a:61:4b:31:61:7f:7e:b6:5a:20:a4:c9:a2:
c5:fd:44:8a:e7:da:52:88:c1:20:9f:05:d5:5b:81:
c4:32:1f:41:4f:c8:e3:f4:8e:6e:b4:e5:7e:bf:00:
99:3d:86:c9:38:ac:26:27:bc:83:7a:96:04:e6:8e:
00:e4:f0:0b:8e:ca:c7:d4:b5:b7:58:62:cc:a5:38:
46:c3:62:e2:9d:48:a0:fe:b6:80:98:5a:f5:a2:46:
03:3f:07:c0:03:31:97:fc:c2:61:7f:c1:41:0e:1e:
29:5a:be:5d:ce:6d:58:e5:94:51:73:1f:77:20:fa:
84:6c:a6:5f:1f:da:4c:84:db:1d:1d:11:c7:f1:f9:
a4:90:f0:15:40:09:85:74:c0:37:a0:0c:8d:4a:af:
a8:c7:8c:e6:37:55:d8:20:8d:34:66:04:a9:1f:af:
9b:29:0c:ca:a7:e9:3e:ec:03:51:f4:f8:fa:e8:48:
58:de:68:18:01:8b:33:0e:1b:ce:3c:69:c0:b7:7a:
b0:84:79:cf:68:8b:7c:64:d0:22:b7:ca:da:58:58:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9C:68:20:92:E2:3E:2E:7C:6A:EA:D4:B3:9B:27:9D:6F:8C:FA:CE
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c3:8e:78:91:ce:50:c1:b6:99:c6:7f:6f:25:fe:62:e5:fe:
68:ae:32:19:06:70:59:63:e5:ad:e9:13:bc:aa:0a:d2:dc:2b:
af:72:c3:91:1c:fc:3c:1c:f9:dc:b4:2f:5d:19:37:8d:80:00:
9e:8b:2f:83:3b:c8:0b:e3:8a:22:79:ba:9e:49:6f:18:6b:88:
14:31:99:d0:7e:ec:9d:bb:8b:4a:45:15:10:a5:1c:77:3b:da:
79:52:16:11:26:27:d0:cb:59:03:27:04:da:6c:4a:5e:19:1c:
6e:15:7d:21:c7:d8:11:36:9d:2b:d6:7d:39:19:63:f9:76:7d:
57:77:ef:08:2b:a1:f8:50:ef:00:da:3a:80:26:20:8b:b2:46:
ff:fb:5d:ee:8e:e6:a8:a7:c4:26:96:1f:ad:d5:41:da:9b:51:
4e:fc:28:a4:ad:e6:6d:5b:71:42:68:31:68:dd:57:0b:2a:41:
9e:46:62:cd:b0:a1:2e:73:5f:0d:ef:a8:6d:6f:94:4f:e1:45:
eb:af:b3:5c:c8:23:4c:76:bc:07:6a:09:2c:dd:f6:44:a9:10:
1a:6a:f4:a7:e1:1d:eb:e2:9b:bc:d8:ca:ff:74:15:ab:fa:d7:
3e:de:9c:7c:d5:79:90:3f:12:63:53:c9:4a:1c:70:a0:ed:17:
7d:86:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:11 2026 by rpki-client