Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
File: GNl5-JL-uBmXaiX-lH9devN-zH0.mft (raw, json)
Hash identifier: +GRvxxT5YNwW2+WTwEnegZm40A2CCxw3SSGR0lRdAnA=
Subject key identifier: A9:F1:80:EC:2B:46:0C:3F:21:FD:62:6C:F1:4D:C8:CA:36:AA:31:F7
Authority key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Certificate issuer: /CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Certificate serial: 019D28F20B721E5630AD98821D0383D3252E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 07:00:44 +0000
Manifest this update: Thu 26 Mar 2026 07:00:44 +0000
Manifest next update: Fri 27 Mar 2026 07:00:44 +0000
Files and hashes: 1: GNl5-JL-uBmXaiX-lH9devN-zH0.crl (hash: g25yhpJZuMVYhFinqnpjcUjIWtI8xQPxwxXq5YqmzsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:0b:72:1e:56:30:ad:98:82:1d:03:83:d3:25:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Validity
Not Before: Mar 26 07:00:44 2026 GMT
Not After : Mar 27 07:00:44 2026 GMT
Subject: CN=a9f180ec2b460c3f21fd626cf14dc8ca36aa31f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:3a:34:ec:47:da:d0:a6:81:24:4f:7c:bb:
ba:33:03:44:95:ff:46:25:ac:da:4a:56:2e:61:27:
3d:19:a3:8d:ab:cd:21:82:3c:12:db:d2:87:14:af:
e6:f5:3e:a9:5d:68:2c:0a:70:49:f9:f5:90:c4:d8:
05:48:69:8d:e3:05:6e:a0:14:cc:a0:d9:80:63:d2:
10:10:1d:b8:95:a3:60:f9:b8:cc:d6:00:e7:f7:29:
53:c1:95:2d:79:e2:95:fc:45:1b:ac:8c:90:b5:d6:
ef:61:b5:58:9f:e1:cd:f6:52:b4:39:b5:d0:b5:73:
14:06:7f:af:8e:a4:ab:fa:f2:31:23:65:ae:79:6c:
9f:b1:01:24:5f:de:07:17:d4:7e:37:88:8a:ef:fe:
01:39:31:ca:3f:21:26:8b:97:a8:cc:4b:22:a1:57:
85:6f:67:00:df:93:28:63:a2:49:3f:83:e9:52:6d:
c9:41:1d:33:f8:94:ee:be:60:54:04:20:c2:a1:d0:
f4:4e:9d:14:f1:9b:0e:9f:37:bc:39:d4:b3:6c:32:
f7:9a:5f:43:4f:6a:c8:4d:c0:52:33:c1:f9:7a:5a:
94:96:a8:e1:c6:9d:4c:f6:81:7a:7c:c9:6b:7d:5e:
75:64:c0:92:65:99:f2:75:8c:51:a4:83:b6:83:3d:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F1:80:EC:2B:46:0C:3F:21:FD:62:6C:F1:4D:C8:CA:36:AA:31:F7
X509v3 Authority Key Identifier:
keyid:18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b7:b9:a6:4a:43:05:a8:0d:21:99:c6:53:ee:38:da:b6:39:
80:1f:fe:8f:d6:51:04:ed:ae:31:0c:10:17:26:1a:ae:6f:6b:
d9:2a:16:c3:c5:18:1b:49:fd:15:aa:a9:a5:18:e8:ad:86:48:
1b:fd:44:e4:32:25:a5:1c:0d:09:82:55:0c:fa:a6:7b:ef:31:
cb:2c:15:e7:e1:1e:53:a1:1b:a2:bb:fe:b4:8f:7a:ad:b5:5b:
cf:e0:35:7f:1b:9a:86:62:a3:f2:0e:75:a5:53:ff:23:3f:e3:
c9:41:bf:ab:8e:0d:c3:e8:2f:8d:f3:a8:4a:ba:38:49:dc:6d:
ec:88:13:b0:21:0f:ff:7c:c3:d0:34:96:62:88:04:a4:9d:f5:
45:f2:eb:5d:a5:22:1d:30:d7:cc:e1:41:4c:73:b2:a9:56:b3:
b2:83:6c:ff:71:2c:65:f2:95:c1:c1:d8:65:16:e5:45:ec:52:
80:61:db:f4:70:0c:c3:61:37:23:2f:25:28:89:cc:89:44:b1:
2d:44:64:f1:f8:f3:a7:af:89:0f:34:56:ff:c2:a1:95:c7:89:
ab:1c:ce:89:77:9b:a2:a8:c0:58:ca:1d:3a:01:bc:51:94:78:
2e:45:ba:df:9e:d8:37:c7:af:1a:be:45:9b:21:d3:de:83:be:
bd:4a:08:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:30 2026 by rpki-client