Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
File: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json)
Hash identifier: q1iFZtEZPXthyx/3nPEgQT1xwQjpd1QPjxc4JWMiGqc=
Subject key identifier: 4B:32:57:57:DC:FA:1D:57:F7:46:38:0D:A9:6C:D4:A0:97:EE:CC:9F
Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
Certificate issuer: /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Certificate serial: 019D28F2A98BE05FC5484533B4C882DC3DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
Manifest number: 1557
Signing time: Thu 26 Mar 2026 07:01:24 +0000
Manifest this update: Thu 26 Mar 2026 07:01:24 +0000
Manifest next update: Fri 27 Mar 2026 07:01:24 +0000
Files and hashes: 1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: S1PoS+ORPc+7tDaeG3gZvsYqNU78I+X/VjreB5H8GiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a9:8b:e0:5f:c5:48:45:33:b4:c8:82:dc:3d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Validity
Not Before: Mar 26 07:01:24 2026 GMT
Not After : Mar 27 07:01:24 2026 GMT
Subject: CN=4b325757dcfa1d57f746380da96cd4a097eecc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:3e:77:ce:f2:eb:18:d0:88:e8:29:7e:90:
70:0a:25:73:35:31:9d:d4:07:aa:cb:da:76:b8:ac:
d1:19:fd:70:36:bb:5f:d2:c5:f5:a6:19:4f:de:74:
de:13:26:06:bd:ba:60:18:57:82:94:92:e5:c7:97:
3a:12:0f:7b:f3:88:13:7c:a9:bf:b9:13:93:e1:04:
51:78:76:9e:2f:29:c9:e8:e1:28:00:d1:26:d4:42:
7a:7d:fb:a1:0f:01:50:1f:d4:ca:54:5a:1b:b6:7b:
89:47:f3:58:6e:8f:1d:04:43:af:96:29:ba:63:fe:
aa:b9:fb:fc:ef:b5:fb:b0:6e:35:0c:54:2e:54:03:
a3:01:50:21:20:f2:99:f8:de:bb:b1:e9:50:01:8c:
2d:04:97:5a:2c:00:7a:28:fa:07:16:dd:2e:bd:bd:
f5:3a:67:ab:b4:74:fb:28:de:32:12:ed:1c:b1:63:
8b:4d:81:94:79:05:c2:e6:6b:e9:76:75:80:5a:6b:
a5:f9:3d:d8:48:52:cb:2a:23:ac:72:99:20:58:44:
91:58:b9:da:f1:50:77:4e:23:c5:d0:31:18:8d:d9:
eb:25:17:f4:90:9e:90:be:6b:b9:17:d8:51:b4:35:
c8:99:42:5d:49:c8:ba:62:89:4a:31:16:6e:ea:c5:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:32:57:57:DC:FA:1D:57:F7:46:38:0D:A9:6C:D4:A0:97:EE:CC:9F
X509v3 Authority Key Identifier:
keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:de:87:e9:bb:9a:8c:d5:e4:d6:92:53:ae:d3:70:45:e5:a9:
ea:63:b3:2a:da:a9:0a:67:76:41:1a:21:6f:30:97:3b:2d:d0:
f2:4f:17:9b:98:ee:29:b7:6f:72:b1:7b:69:a6:1e:b7:1c:5b:
e1:ae:eb:19:45:1c:4b:83:7b:2e:f3:87:42:ce:8e:4a:ec:29:
52:47:0b:7e:5b:79:f5:98:ea:e0:36:19:5a:c2:8e:d5:98:55:
c3:9c:71:20:18:27:81:b8:ae:4e:f4:9d:cc:bf:5f:48:8c:35:
79:13:47:83:21:cb:55:dc:b4:2a:4a:fd:b0:fb:a2:9d:3f:9a:
e5:ab:54:99:d8:1c:67:d3:a0:72:10:98:2c:c9:ef:61:30:b4:
f8:a3:e7:68:d4:54:63:fd:9a:68:f9:fa:80:79:1b:f1:08:3e:
74:46:f4:da:cc:46:9d:0a:f0:18:b2:29:0b:d3:c8:8c:c3:4d:
45:36:0e:3d:60:46:a0:2b:a2:65:8a:c7:17:f7:52:7c:9a:c1:
8c:ad:bd:b4:1f:a1:c7:df:43:63:ac:51:d7:16:86:e8:86:ae:
4a:87:9f:0e:83:59:3c:fc:fb:cc:c4:a5:a2:38:70:f4:78:ec:
a0:8b:0e:cc:47:7b:98:8c:92:25:68:96:3a:f2:9d:6d:bf:41:
92:a0:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:50:14 2026 by rpki-client