Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
File: GckQlAa9oSZuVvZm6MmDWNdD3XY.mft (raw, json)
Hash identifier: ihiAQsQEGpCiVTQ3D3RJdlvaor13kHskRYRSG6E59kc=
Subject key identifier: 10:1D:C7:AC:92:73:CF:68:50:81:F2:A8:E7:49:32:5B:F9:33:81:93
Authority key identifier: 19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
Certificate issuer: /CN=19c9109406bda1266e56f666e8c98358d743dd76
Certificate serial: 019D27042E3D35072AF7D98518A991BE19B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
Manifest number: 0FE6
Signing time: Wed 25 Mar 2026 22:01:18 +0000
Manifest this update: Wed 25 Mar 2026 22:01:18 +0000
Manifest next update: Thu 26 Mar 2026 22:01:18 +0000
Files and hashes: 1: GckQlAa9oSZuVvZm6MmDWNdD3XY.crl (hash: G3gx8JBYkg0LoymNtNbLAEA0ngOOpt30LFEQGOSl5TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:2e:3d:35:07:2a:f7:d9:85:18:a9:91:be:19:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c9109406bda1266e56f666e8c98358d743dd76
Validity
Not Before: Mar 25 22:01:18 2026 GMT
Not After : Mar 26 22:01:18 2026 GMT
Subject: CN=101dc7ac9273cf685081f2a8e749325bf9338193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1e:89:11:6e:4e:5c:a7:09:ef:6a:4e:c6:02:
61:80:d0:3a:66:d9:31:e5:c7:b2:49:11:b8:aa:f7:
f7:7d:25:7c:9b:81:bd:27:c5:3a:ad:7c:f3:da:82:
5d:7d:94:c7:a8:8f:05:af:d5:bf:e3:24:fd:ce:11:
e4:bd:9d:fc:84:05:ec:bf:9b:6a:8f:15:49:c0:f7:
35:1e:e1:c1:96:93:7e:86:ac:41:a0:9b:33:f1:45:
ac:9d:a9:6e:0b:1f:e1:47:dd:e5:b5:f0:c9:2f:39:
a5:91:9d:bf:10:2e:c3:2a:af:8f:8f:84:56:bd:0d:
61:f9:af:52:d5:66:e6:6e:bf:92:0d:a0:cc:d6:39:
02:63:6d:ba:8c:e8:b7:f1:2c:dd:22:7d:43:46:1c:
a8:50:f7:c0:ca:ca:2a:d7:49:68:ea:50:88:3a:3a:
0e:99:7f:7c:2f:f1:07:9c:bd:38:f3:63:ac:21:d6:
57:ee:19:e1:6c:32:c8:0d:b9:bb:08:cf:79:3c:aa:
74:0b:7e:6b:e8:07:cf:01:17:84:86:a0:ed:b0:ba:
4c:c1:25:36:19:5a:1c:04:97:43:8b:58:df:e1:db:
03:89:2b:6e:69:8a:81:f4:ee:3b:ae:88:6e:7c:73:
8d:bc:8b:36:8a:be:22:f5:87:c9:19:f4:56:ec:7d:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1D:C7:AC:92:73:CF:68:50:81:F2:A8:E7:49:32:5B:F9:33:81:93
X509v3 Authority Key Identifier:
keyid:19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7d:f1:e1:7d:7f:42:f4:9c:7a:28:af:f4:98:06:3e:6d:d5:
d7:27:91:80:26:64:31:53:89:19:cf:b9:d4:58:07:d5:d5:fc:
a0:19:74:83:4c:d2:26:60:ce:25:42:bb:03:f3:e6:c1:67:d8:
ed:c5:e5:ab:f4:fa:a0:dc:e0:d6:bc:2b:49:bd:4a:b5:38:77:
e1:f2:76:fc:4c:a0:7f:32:23:c1:ca:31:b1:b9:b5:dd:10:84:
6b:d9:50:0a:95:a4:6c:03:81:b1:60:e5:dd:14:c1:f3:71:58:
36:3c:76:6e:76:2f:5e:fd:e9:2e:4d:a2:4a:ff:d0:d7:5f:81:
8c:90:fc:08:e4:df:3c:ae:15:cd:bf:2b:bd:a7:b6:98:ee:a0:
80:be:bb:ba:ed:4c:68:bf:1d:3d:f6:b9:f2:ba:78:db:a0:ee:
a3:0e:e1:9d:1d:d6:dc:e7:ab:d2:5d:45:bd:48:10:ae:73:c4:
92:ed:35:8e:5f:4f:5a:20:19:1a:e6:2d:a2:b3:bb:b1:ae:f8:
aa:39:7d:de:3d:e6:c6:83:63:34:5e:72:3e:f5:67:25:1a:92:
30:a8:1b:e8:03:33:70:e9:68:69:c7:24:1b:bb:ef:41:85:05:
29:3b:70:11:56:60:38:be:ee:db:d1:96:79:33:3f:ae:56:78:
ca:7c:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:55 2026 by rpki-client