Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: 5Rn4R73xojDb8bdC6BqGhLMDXN/YcMj6KJ1Hns+JiEo=
Subject key identifier: FF:02:69:5B:96:42:81:CD:77:9D:67:CA:46:7F:6C:4D:5F:CF:34:02
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 019D28BB59A4260828A9DF1C1ECE36A4FF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 02E9
Signing time: Thu 26 Mar 2026 06:00:59 +0000
Manifest this update: Thu 26 Mar 2026 06:00:59 +0000
Manifest next update: Fri 27 Mar 2026 06:00:59 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: BKljCdbcet0PHX8qSMOyUrYoiBrcxzXWRPWrJqDKT8Q=)
2: t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa (hash: Gojw7FbJO6oLOCFdJ+IonU5RAeRQTmH3d/fqvSSbRko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:59:a4:26:08:28:a9:df:1c:1e:ce:36:a4:ff:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Mar 26 06:00:59 2026 GMT
Not After : Mar 27 06:00:59 2026 GMT
Subject: CN=ff02695b964281cd779d67ca467f6c4d5fcf3402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:cf:41:a6:a0:71:9c:d1:42:ab:d8:f7:af:
a8:af:e9:86:0a:30:75:09:93:dc:6d:ad:f6:ad:79:
e7:2e:9c:1f:e6:db:d2:3d:06:3e:ea:0e:20:5a:7a:
da:b7:74:ea:e7:83:c7:14:ca:e8:b6:4d:b4:23:05:
5e:e0:4c:f8:8e:43:88:e4:db:d7:df:ac:7b:e4:57:
4e:f6:57:d8:8b:70:6e:60:b3:d5:a3:ec:39:02:1f:
67:bf:a7:13:fc:1d:14:92:26:30:2d:7a:16:a4:71:
e6:1d:95:01:c9:d3:5f:5a:f9:6f:a5:4e:7a:ae:e1:
be:04:fc:7b:50:89:14:f3:d4:9c:75:44:04:d8:10:
69:21:bd:c8:45:e1:18:c0:55:cb:04:cd:2f:6c:a9:
74:89:a9:e3:52:1b:91:77:b7:0a:f8:4e:89:46:76:
85:e2:d9:ac:ee:cc:90:a6:cd:08:52:9c:26:80:86:
f2:1f:1d:5e:7b:3a:40:c6:78:51:49:58:2e:86:4a:
54:dc:ca:4a:a2:73:d6:20:5c:9a:4e:7b:59:c2:27:
fe:f1:d3:6a:ba:e7:2a:a0:32:04:72:c3:3e:47:19:
5c:b9:3e:7e:84:ce:5c:19:f5:ed:4f:e4:7d:d6:8f:
05:6c:d2:82:33:6a:b6:32:f2:4a:62:95:a6:07:59:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:02:69:5B:96:42:81:CD:77:9D:67:CA:46:7F:6C:4D:5F:CF:34:02
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:41:d5:25:6d:86:de:a0:f9:a7:04:10:88:0d:44:5d:7e:2a:
11:6c:9b:d7:d7:a8:7e:09:16:2c:a4:49:d2:65:9e:71:78:9a:
c3:76:b6:1a:12:59:5a:b1:26:5b:03:50:46:3f:f5:a5:47:34:
a0:22:25:bd:79:b8:af:3e:e4:5d:4e:af:78:7a:5f:b7:2b:48:
d0:e9:48:cd:e8:a1:20:c3:40:bf:8b:1b:64:b3:be:88:36:d0:
b2:bc:be:f6:4d:4b:cb:73:9a:ed:2a:a5:82:ae:ad:38:1f:16:
95:e9:52:f7:7d:0f:83:b9:9e:8f:a8:c8:b9:4f:d7:56:a0:c3:
79:50:a4:1e:34:34:87:93:ce:1a:f1:14:78:3e:86:5b:d0:ae:
d7:ba:7b:39:5f:f9:4a:42:93:20:08:3a:6d:a8:84:e2:48:96:
03:9e:7b:ed:2c:0f:af:7e:1e:e7:7d:fd:ec:41:36:b7:06:8c:
96:ce:b2:72:56:19:59:b7:40:78:88:6a:a3:a1:f9:2e:48:b3:
e1:79:9a:3d:57:3d:6b:74:b0:3d:f7:fd:dc:52:1f:09:9e:4f:
d3:eb:bc:84:ed:08:ae:2c:59:b1:52:3b:4c:6d:ef:f3:bb:c6:
8f:cd:7b:86:3c:b5:1a:c4:27:b4:d8:6d:d1:ea:c4:b5:ea:b5:
99:b9:fc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:40:37 2026 by rpki-client