Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
File: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json)
Hash identifier: CkpXxJlCU//BbucqUp8Icbl8a0JverZc1IA49ZnE9r0=
Subject key identifier: 7E:31:D3:8B:18:0D:3C:9E:B3:D9:AC:B3:97:25:C5:4B:A7:08:99:53
Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
Certificate issuer: /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Certificate serial: 019D25BA6ACDA48710BC5B23C7ED47125A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
Manifest number: 15F1
Signing time: Wed 25 Mar 2026 16:01:07 +0000
Manifest this update: Wed 25 Mar 2026 16:01:07 +0000
Manifest next update: Thu 26 Mar 2026 16:01:07 +0000
Files and hashes: 1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: IGbYm6nn89qSr4nRLcchwwM6pwwh3F8k+R5e/pE26p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:6a:cd:a4:87:10:bc:5b:23:c7:ed:47:12:5a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Validity
Not Before: Mar 25 16:01:07 2026 GMT
Not After : Mar 26 16:01:07 2026 GMT
Subject: CN=7e31d38b180d3c9eb3d9acb39725c54ba7089953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:05:79:5e:62:b4:66:7c:55:86:37:46:8d:
4b:70:24:98:ff:36:f3:74:e3:58:c2:7e:4f:9e:82:
c6:49:dc:32:fb:35:6c:c0:c5:12:18:d3:26:f0:52:
13:a8:86:ee:21:5b:e8:4c:b8:33:cf:63:6d:63:38:
61:dd:43:9a:f8:f5:3e:52:ce:89:68:13:a6:38:b1:
b4:7e:eb:ae:68:4c:df:af:c2:51:63:11:4c:a1:a3:
a7:b8:b7:28:b3:87:5e:82:30:7b:7e:d1:0c:b9:8a:
b0:71:f4:de:91:ea:fa:21:66:93:7c:c9:78:00:e6:
db:ca:1e:5e:46:ce:1f:8d:79:ca:bc:bf:ad:6b:02:
38:61:4d:83:c9:cd:95:4c:c1:d2:4d:ec:0f:6f:ce:
d1:4f:93:fe:ba:e6:8f:f9:35:00:2f:ba:c8:3a:f3:
40:39:36:bb:41:72:d8:7e:1c:51:46:a9:c4:7f:46:
2b:b8:0d:6e:5d:30:e7:8f:da:03:e3:6c:e9:f6:0a:
12:a6:47:39:99:50:d9:51:0c:5e:f5:b5:e5:b2:5f:
0f:64:2b:95:43:0e:bd:6a:4c:96:64:a0:11:1e:46:
be:6d:63:d3:78:62:b1:14:3b:ad:5c:17:5b:ec:18:
f7:70:9f:b4:f9:01:59:c7:ef:30:fb:08:6a:c9:15:
b1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:31:D3:8B:18:0D:3C:9E:B3:D9:AC:B3:97:25:C5:4B:A7:08:99:53
X509v3 Authority Key Identifier:
keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:10:0a:70:7c:b8:70:ce:42:41:73:4e:b8:c9:ea:59:c2:1a:
da:51:8c:49:cf:3a:d7:5d:08:45:c4:d9:3d:02:f6:7d:61:a5:
ce:9c:01:c6:14:22:70:63:18:28:19:d3:7f:bc:f7:8b:39:4d:
d3:37:0c:7b:1b:4e:22:c1:4d:60:2e:8f:82:bc:40:96:d8:ce:
35:cf:6a:46:e6:20:4c:5f:0c:e3:80:a6:f7:15:d9:56:59:bb:
6c:e3:e2:d2:69:48:c0:5a:19:a7:aa:ba:db:4e:11:76:11:73:
3f:e7:63:5e:34:5e:db:cb:87:95:a2:ec:cb:ea:30:b9:59:ef:
01:cc:48:d1:06:74:a5:73:f4:9e:1f:89:e7:44:12:01:74:a0:
54:f1:bd:32:5b:49:f9:62:5c:4f:0e:98:20:9a:43:d5:5f:ec:
bb:65:0f:26:90:52:8e:72:80:20:e7:f5:35:25:56:c3:8b:89:
6d:63:d2:c7:8e:ff:fb:f5:c0:b4:b7:57:41:91:52:e4:02:5e:
3f:37:f9:63:a7:3f:af:bc:f6:02:84:41:95:49:b0:1b:39:4b:
6b:40:04:61:94:31:25:78:d2:ac:f3:d4:c9:4d:03:58:aa:f0:
63:26:f5:cb:90:73:42:fd:7b:95:6c:4f:54:2b:63:14:ef:08:
de:dd:b1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:37 2026 by rpki-client