Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
File: GNo6QLEX-yVyzPekwnLS7GklKRw.mft (raw, json)
Hash identifier: POPwe+/ODrS8nzz5ovvyd0erGXYs5uaFsqQ6gechK/M=
Subject key identifier: 6C:91:5A:68:AA:33:78:A9:89:CB:DD:14:F3:BD:BA:FC:DF:C6:1E:F7
Authority key identifier: 18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C
Certificate issuer: /CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
Certificate serial: 019D288471FFCF24EB1574A6AA551F44B3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 05:01:01 +0000
Manifest this update: Thu 26 Mar 2026 05:01:01 +0000
Manifest next update: Fri 27 Mar 2026 05:01:01 +0000
Files and hashes: 1: GNo6QLEX-yVyzPekwnLS7GklKRw.crl (hash: 8/Z37s2jDA6KnjyfvPNcdcRlu9uUbh7sIntM+1bQU6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:71:ff:cf:24:eb:15:74:a6:aa:55:1f:44:b3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
Validity
Not Before: Mar 26 05:01:01 2026 GMT
Not After : Mar 27 05:01:01 2026 GMT
Subject: CN=6c915a68aa3378a989cbdd14f3bdbafcdfc61ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:10:1e:88:62:06:fd:19:60:b1:c7:c8:22:
88:09:7a:7d:6c:e2:b9:cb:ff:70:9d:3a:3b:3e:54:
24:a9:b8:f5:bc:af:02:f1:b3:bb:a0:c2:1d:6b:fb:
21:a5:33:27:17:e4:33:2b:28:a8:eb:c2:fc:34:b7:
74:52:bb:3d:c6:e5:39:23:78:bf:6a:8d:3f:7e:5f:
3c:74:12:c4:4d:85:51:ad:36:f7:92:3c:db:54:6a:
63:e7:23:2f:c9:61:e0:1c:12:eb:ad:4b:c1:43:6d:
80:76:d2:e9:c4:bd:e2:aa:d3:77:93:f6:6e:36:91:
0f:2a:22:a2:e8:4d:da:41:2d:fa:5a:7e:96:3d:22:
ca:d9:63:49:12:09:42:77:d2:51:fa:f6:99:a9:1a:
c9:4c:7a:f0:bf:3a:11:1b:b2:d1:95:f0:b9:c6:35:
5c:0c:bb:13:a9:36:05:57:56:d4:2d:9c:6a:99:c0:
99:40:d9:6f:95:ea:85:2c:3b:a3:79:18:a4:cd:41:
61:92:fb:cd:c2:a6:95:32:14:98:dc:8d:bb:aa:7f:
c6:d8:11:e2:02:2b:cf:dc:68:c3:cf:e8:46:4d:64:
f7:df:d2:0b:cf:76:36:d1:d3:5d:f9:3b:8a:66:cb:
5c:14:59:04:5a:08:b3:f1:a7:f3:a5:ab:da:6a:1c:
4d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:91:5A:68:AA:33:78:A9:89:CB:DD:14:F3:BD:BA:FC:DF:C6:1E:F7
X509v3 Authority Key Identifier:
keyid:18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:50:78:44:30:11:f4:fc:31:4a:d8:b0:ad:33:e7:18:fe:2c:
b8:f0:42:6b:d9:d9:60:58:c5:10:ee:aa:84:df:8f:30:f6:53:
8e:38:c0:df:fa:1f:1c:c7:16:e3:ea:81:cd:d1:10:e0:5f:88:
04:aa:18:a4:26:57:6f:07:72:49:63:c5:3c:fe:76:98:c8:e9:
85:65:b3:d7:44:25:3f:9d:be:cb:dd:09:75:b6:9b:83:bc:a6:
d7:a8:fd:26:82:63:23:14:52:af:25:8b:30:ac:6b:eb:ff:7b:
9a:d0:28:dd:8d:b6:b5:d1:5a:c8:bf:17:e7:33:04:d8:fb:07:
51:39:bf:15:c8:7d:62:f7:16:8c:c5:2f:20:68:83:09:ea:01:
98:a9:bd:08:fa:85:aa:5a:58:1e:51:4b:93:af:8b:07:a7:11:
a1:b4:58:ba:ba:37:4e:6b:fe:a3:3c:f1:f3:71:e3:c9:d2:97:
9a:b1:e2:53:60:c9:c8:70:79:e6:49:d4:72:52:c0:47:8d:7b:
5d:19:9c:5c:8c:f9:df:60:f6:f0:21:22:bb:ee:51:da:59:4e:
b6:6a:84:c5:cb:5f:32:c3:c3:13:7c:fd:07:5f:17:93:c1:9b:
bc:db:9f:78:ea:d6:95:1b:92:7e:cd:1e:58:20:45:14:fc:78:
2d:e0:0c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:02 2026 by rpki-client