Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier: vb2mCBxTipK0nPHCilRmoVOw1IT9YseAfwsOqV0OOA4=
Subject key identifier: 50:7B:CF:72:0F:B7:D6:77:29:AB:FE:F2:A7:15:AA:CC:88:04:07:C2
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 01A0D9BAA4FD6F47C4F18991A899C42CEE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 18:01:22 +0000
Manifest this update: Fri 25 Sep 2026 18:01:22 +0000
Manifest next update: Sat 26 Sep 2026 18:01:22 +0000
Files and hashes: 1: 1-DpKaTkiKfHzg5Dwo2ODGyEj3C8.roa (hash: J9DAvhv9r0Mlaj2FFrH7O2ik+AlszrMRbhAMQDYeWAs=)
2: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: VN8lkBxH3hPesDoIjVDcAHxZ+/vjhn0aKt9Hzy/dwfk=)
3: sTs-6prOh5q4wA6a1OyyqtZ74q0.roa (hash: FFPnuFxlEdQJXEK42gi4uhiZA2nfgoW67T20PySbZn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:a4:fd:6f:47:c4:f1:89:91:a8:99:c4:2c:ee:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Sep 25 18:01:22 2026 GMT
Not After : Sep 26 18:01:22 2026 GMT
Subject: CN=507bcf720fb7d67729abfef2a715aacc880407c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:b2:7a:bf:d5:16:da:7b:75:78:3b:74:a6:
24:66:4e:20:c0:81:2e:55:b6:16:c5:1b:36:f0:71:
fe:d8:d2:c6:2f:88:69:71:e6:cd:36:af:68:c2:87:
84:45:2c:d3:07:8c:4a:19:40:53:6c:80:1f:d7:c0:
b7:99:e3:f6:10:98:51:b5:0d:46:a8:53:c9:47:f7:
55:67:55:fe:52:c4:b6:46:67:cc:2d:2d:d4:69:e8:
95:77:57:5d:10:6c:1a:c7:0b:80:2c:a1:90:fc:25:
44:0f:c6:c4:15:b1:5b:db:3c:ac:a3:cc:06:6d:0b:
c0:3c:39:d9:77:af:38:65:24:ee:32:fa:5d:92:c6:
3b:cd:21:b2:35:4c:9d:3b:a3:97:d9:85:70:92:91:
38:0b:75:c6:68:52:d7:45:55:90:f3:1c:2a:a1:93:
6b:9c:ef:0f:9b:e5:a6:26:7c:3f:b9:7e:0c:c6:58:
8c:f5:c9:aa:75:97:10:27:6b:2f:9c:24:bc:3c:ca:
90:54:a2:eb:b9:b6:94:44:b4:a0:b9:32:10:21:27:
5f:0c:fb:d2:d4:36:01:2b:da:a7:c8:c0:19:f2:53:
4c:0c:73:51:7a:a5:b2:f9:96:09:37:4b:5e:3e:f7:
5b:b2:89:8b:be:c3:fb:ef:3f:27:78:fe:f0:0c:99:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7B:CF:72:0F:B7:D6:77:29:AB:FE:F2:A7:15:AA:CC:88:04:07:C2
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e4:fb:72:14:84:bd:81:33:bb:03:cd:b1:01:64:c7:e0:2e:
c2:c8:7a:61:a7:2d:12:f2:f3:87:e2:3f:09:10:4c:a4:19:4e:
9c:df:44:62:f2:70:3a:bf:88:84:03:b0:e7:f0:6d:49:8a:9d:
f8:1b:95:c0:c8:e9:93:cb:98:65:4f:d5:f3:d7:19:cb:80:86:
0d:45:7e:23:68:a8:ed:82:bf:72:17:7e:62:bc:61:5b:70:76:
99:66:c1:22:bc:34:fc:12:19:2c:17:b9:a1:e2:65:4e:09:e1:
ec:8e:7c:cb:9e:e7:16:64:73:84:b2:fe:7d:87:26:19:d0:d8:
27:77:90:76:2c:50:56:1b:2a:45:67:3b:2f:f6:b7:9b:ff:0d:
76:3c:67:1b:92:40:86:7d:89:eb:56:76:ae:ee:57:a8:27:12:
3c:82:fd:6e:88:84:92:29:08:b3:5f:53:58:6b:b3:64:b3:7b:
84:ca:e0:21:75:9e:8b:19:fc:cf:bd:fc:cd:37:d9:90:50:26:
de:49:8d:2f:c6:7f:6d:76:65:a3:7e:0a:cd:ac:56:88:f4:a4:
a9:c8:6a:41:54:63:e8:44:0a:6b:8f:53:f5:58:8d:5d:b0:59:
09:dd:cd:28:45:14:ca:a9:79:ca:bd:50:45:b0:f3:b6:48:53:
a8:47:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:11:24 2026 by rpki-client