Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3d738f-f020-465f-90c6-ef31b4142548/1/GJAhqKeFFFIL5GQPm1WrHt2bVJs.mft
File: GJAhqKeFFFIL5GQPm1WrHt2bVJs.mft (raw, json)
Hash identifier: N7vNktJx7xlINSivJ7z8sGMBvGCSnrzHnuYdcm2Tg5o=
Subject key identifier: 1E:EA:B7:10:FC:74:77:1C:E8:98:B2:AC:42:F0:76:B5:E7:F1:42:E2
Authority key identifier: 18:90:21:A8:A7:85:14:52:0B:E4:64:0F:9B:55:AB:1E:DD:9B:54:9B
Certificate issuer: /CN=189021a8a78514520be4640f9b55ab1edd9b549b
Certificate serial: 019D33076FC4D172C301E600B83180679C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJAhqKeFFFIL5GQPm1WrHt2bVJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3d738f-f020-465f-90c6-ef31b4142548/1/GJAhqKeFFFIL5GQPm1WrHt2bVJs.mft
Manifest number: 6B
Signing time: Sat 28 Mar 2026 06:00:18 +0000
Manifest this update: Sat 28 Mar 2026 06:00:18 +0000
Manifest next update: Sun 29 Mar 2026 06:00:18 +0000
Files and hashes: 1: GJAhqKeFFFIL5GQPm1WrHt2bVJs.crl (hash: ZuLR3FGI2/b52QEeIM6dghCc1krT5uKtnSrGb4tCEBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3d738f-f020-465f-90c6-ef31b4142548/1/GJAhqKeFFFIL5GQPm1WrHt2bVJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3d738f-f020-465f-90c6-ef31b4142548/1/GJAhqKeFFFIL5GQPm1WrHt2bVJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJAhqKeFFFIL5GQPm1WrHt2bVJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:6f:c4:d1:72:c3:01:e6:00:b8:31:80:67:9c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189021a8a78514520be4640f9b55ab1edd9b549b
Validity
Not Before: Mar 28 06:00:18 2026 GMT
Not After : Mar 29 06:00:18 2026 GMT
Subject: CN=1eeab710fc74771ce898b2ac42f076b5e7f142e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8d:1a:c6:e3:90:3e:32:57:66:34:93:29:31:
85:28:78:85:22:03:19:bc:60:5d:fb:53:00:dc:da:
81:d1:42:70:a7:45:d7:c8:90:ad:a4:7b:d1:e2:1f:
5e:e7:89:f3:b9:72:4a:85:32:29:ea:7f:f5:bb:69:
2d:bc:47:51:a4:d3:26:da:73:02:76:04:92:87:c5:
c4:fc:22:09:ed:fd:12:59:7e:d9:92:ff:fa:8b:00:
77:b1:16:84:78:b4:ed:ae:77:b0:0a:48:27:11:b4:
c9:76:b9:3b:a3:ff:cf:0f:6b:4f:1b:1b:8c:c2:f2:
f7:0c:e1:da:6d:4a:c7:75:24:65:97:d6:31:1f:b0:
01:02:08:f9:8c:10:b0:69:46:9f:53:42:d1:aa:be:
91:31:a4:16:64:4d:f0:a7:e6:61:b6:c3:9d:2a:4e:
ae:db:89:95:be:7c:fa:4a:a7:f1:9b:30:44:e7:a0:
5f:d5:dd:50:11:91:dd:5d:fc:7e:48:59:47:53:6e:
8a:b9:92:2d:0a:da:55:eb:57:0d:df:31:a3:d1:6f:
c0:c4:f3:7c:60:a8:e9:63:b2:30:93:19:e5:f0:19:
12:4a:7c:c8:5c:93:9f:89:27:7e:94:11:64:bb:0c:
41:5b:73:47:6e:5f:13:46:de:19:10:ac:eb:df:59:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:B7:10:FC:74:77:1C:E8:98:B2:AC:42:F0:76:B5:E7:F1:42:E2
X509v3 Authority Key Identifier:
keyid:18:90:21:A8:A7:85:14:52:0B:E4:64:0F:9B:55:AB:1E:DD:9B:54:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJAhqKeFFFIL5GQPm1WrHt2bVJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3d738f-f020-465f-90c6-ef31b4142548/1/GJAhqKeFFFIL5GQPm1WrHt2bVJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3d738f-f020-465f-90c6-ef31b4142548/1/GJAhqKeFFFIL5GQPm1WrHt2bVJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a4:fb:f2:f0:dc:f9:0a:c8:36:1d:bf:46:92:17:f8:31:a0:
c1:28:55:e4:e6:e6:e1:5b:fa:53:ce:ab:3c:95:7d:d2:6f:60:
c7:89:cc:bb:ca:c2:6d:e9:89:1e:1e:c9:c1:7c:8d:52:5b:b0:
91:14:0c:86:6f:10:32:36:6f:62:79:24:f4:e4:14:b8:1d:49:
6a:cc:43:d0:88:6c:f7:24:c3:d9:4c:58:8b:63:d6:24:b7:e8:
25:b9:ba:a7:d5:9f:c0:f9:97:0c:6e:d4:93:8f:92:ff:0e:8d:
d2:c4:5a:dd:06:de:ec:5c:45:08:c1:c9:2f:33:a6:b3:76:16:
da:4b:6d:32:dc:29:21:95:f0:72:c0:db:ce:f3:d1:e4:b5:e7:
8c:6a:11:1a:c1:f2:0e:01:67:5f:39:40:56:1a:dd:19:99:e1:
f9:87:d5:da:1a:4d:ad:ff:21:5c:6c:cf:66:14:c9:88:35:b1:
3f:64:7c:9b:bd:f0:8d:03:ed:c3:81:f1:7a:09:82:9b:d2:b0:
7a:2a:c7:34:b9:10:d7:f2:d4:66:4b:27:e3:ec:16:2f:97:bc:
3b:b5:11:10:df:36:67:2d:09:3d:0b:c1:95:12:5a:3d:ef:fc:
9a:db:4b:ba:3e:9f:f3:77:b4:22:da:90:c3:db:a9:c6:e3:46:
54:47:aa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:19:00 2026 by rpki-client