Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
File: GD41veDiUEYFoX1O0FVDfo00ql8.mft (raw, json)
Hash identifier: KyF1MgAkpRQl4W+34FSAiK6Iae+/ffFDKxG60tDpDnc=
Subject key identifier: EB:1E:BB:EF:7F:07:58:9A:16:7E:58:EC:09:4C:0D:13:4E:A8:10:3E
Authority key identifier: 18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
Certificate issuer: /CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Certificate serial: 019D2996EEE953E98DB6ADF98D4FC52D3357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 10:00:50 +0000
Manifest this update: Thu 26 Mar 2026 10:00:50 +0000
Manifest next update: Fri 27 Mar 2026 10:00:50 +0000
Files and hashes: 1: GD41veDiUEYFoX1O0FVDfo00ql8.crl (hash: 9RLzVqK994zPHcF/DCzbw9nS+79b4FAzAo7Y4PBZm9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:ee:e9:53:e9:8d:b6:ad:f9:8d:4f:c5:2d:33:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Validity
Not Before: Mar 26 10:00:50 2026 GMT
Not After : Mar 27 10:00:50 2026 GMT
Subject: CN=eb1ebbef7f07589a167e58ec094c0d134ea8103e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c5:27:b3:dc:a7:22:e1:78:37:7b:5c:a6:be:
17:e4:c5:94:9e:51:0b:6e:9c:25:7f:d5:75:8a:87:
18:87:b6:05:23:4c:dc:d8:0d:17:c0:c2:eb:bd:57:
ec:a5:46:be:d0:04:eb:07:a1:04:73:c6:a2:08:59:
78:b2:f1:7b:df:b0:70:ff:db:12:51:a3:e4:4d:21:
f5:ee:bf:6a:7c:ef:9d:1c:3a:66:c0:a0:c9:7d:eb:
19:c8:e5:87:22:82:ce:79:95:78:52:95:cc:17:f7:
15:8d:1f:75:84:42:d9:e3:61:a8:fb:e2:60:2b:66:
3c:42:97:64:a3:4c:26:24:19:8e:bc:82:ac:f1:ce:
45:61:97:7b:3b:27:29:70:a9:ec:fe:37:2f:55:42:
78:eb:7d:44:06:6e:09:eb:19:8f:6b:7c:9c:54:03:
04:f4:ee:09:fc:e8:83:b7:43:a2:6e:91:a0:6d:0f:
ca:b9:fc:a1:8f:2a:2d:6b:3e:6d:92:50:fa:d7:3b:
14:7b:09:79:73:76:4d:c0:03:f4:27:cb:29:b7:a0:
a8:37:1e:15:4e:a4:f7:b3:18:37:61:12:16:19:fb:
6e:4f:5d:79:bb:9e:6c:b6:56:1b:50:e6:50:a7:ed:
0d:18:97:92:cb:c4:89:8f:b7:a0:8e:a4:d7:fd:82:
bd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1E:BB:EF:7F:07:58:9A:16:7E:58:EC:09:4C:0D:13:4E:A8:10:3E
X509v3 Authority Key Identifier:
keyid:18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:29:84:45:be:9e:f5:14:63:f2:f0:d8:65:a2:dd:5c:b3:64:
18:62:5b:3c:b6:55:e4:96:d9:2a:fe:f4:b3:3d:63:d1:70:5e:
84:ec:f3:9d:3f:69:ad:d0:2e:2a:23:8e:05:4d:9b:f0:da:4d:
d8:68:33:16:b9:07:7b:bc:e1:77:b8:b7:b4:00:b4:10:6e:96:
e1:7f:d2:b1:a1:3d:b6:90:9d:90:2d:38:08:0b:5b:c2:f1:c4:
42:0d:32:d6:e9:94:5f:4e:5f:5c:3e:d5:f2:a4:99:2a:e0:f1:
e9:29:00:83:0d:de:1c:32:98:ad:dd:9b:51:09:86:e8:7d:8d:
08:ac:68:89:18:b1:6b:15:ad:b6:62:fc:f9:3a:f4:c4:13:13:
e3:c9:d6:58:ea:23:41:42:f8:72:26:ff:1f:e2:60:c9:28:45:
6e:31:cf:45:e2:fb:f5:b4:b3:46:ed:74:66:80:58:5e:66:09:
d1:5c:cd:8b:88:26:82:5b:66:89:d8:70:f8:21:13:43:dd:49:
b8:75:74:ef:19:18:76:df:21:cd:e2:c8:ff:97:c4:da:1f:fe:
c6:6e:af:0d:b0:06:22:d4:12:39:e1:08:2d:e2:1f:a4:71:58:
f5:bd:50:5f:f9:a4:61:c7:92:16:3f:91:36:52:5e:85:2d:3a:
fa:2f:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:51:53 2026 by rpki-client