Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
File: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json)
Hash identifier: TrbPgm4pU7xpyu5DLZYvgtxVwbF5o06oyPG5tCsdgrI=
Subject key identifier: 16:2D:CA:D4:C6:E6:1D:21:26:F2:90:0B:33:49:09:90:84:B2:52:C9
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Certificate issuer: /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial: 019D25F1BED4217E93A450BFE887DBAD70CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:01:33 +0000
Manifest this update: Wed 25 Mar 2026 17:01:33 +0000
Manifest next update: Thu 26 Mar 2026 17:01:33 +0000
Files and hashes: 1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: YulUfa15RqHli0cMvhIcDSQZ12gncxNw5f35CjrT6Ng=)
2: abbbV0XVk995UrsAzYOq3iQxcEk.roa (hash: 4xNlKWkY5oZiKT7584PwOX/H1wHQW2fuOn1s1+Y8Eus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:be:d4:21:7e:93:a4:50:bf:e8:87:db:ad:70:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Validity
Not Before: Mar 25 17:01:33 2026 GMT
Not After : Mar 26 17:01:33 2026 GMT
Subject: CN=162dcad4c6e61d2126f2900b3349099084b252c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:64:06:6d:cc:b1:c0:9b:f4:cd:9e:a9:f0:
96:c9:d4:40:91:7f:b7:b5:cf:bd:71:ef:2b:e8:7b:
0d:10:b5:0f:c4:61:47:33:a4:94:9a:e3:b1:90:f2:
82:37:2d:0a:7c:dd:4c:bf:f3:ef:13:d3:1b:38:79:
f6:eb:fa:e1:eb:6c:09:5d:c0:dd:ef:51:54:1b:22:
8e:66:85:d1:ff:0d:46:34:5e:5a:ac:b7:db:1f:d3:
25:ad:1e:b5:10:e7:6c:64:9e:29:9f:d8:e1:7e:25:
df:c1:cf:b0:7e:de:43:c9:37:3a:a3:5c:2c:d6:2b:
79:ba:25:b1:47:44:ab:96:bd:53:d5:e5:17:f5:80:
11:33:82:ac:73:ec:f7:ed:28:f7:77:f0:ba:09:42:
e2:2e:54:dd:8c:69:e5:31:b1:49:4c:c4:39:20:c3:
c8:09:b3:42:ea:df:ec:5c:6c:4e:00:61:d1:4e:e7:
4a:16:e4:c6:63:8d:c3:ff:68:b3:50:1e:53:1c:d9:
f9:cf:22:e7:1e:2e:57:ac:10:4f:da:55:73:12:65:
59:78:b7:a0:f2:c7:3a:bc:ad:af:b2:15:51:65:60:
55:f8:9b:99:aa:57:d2:c6:59:eb:1d:9d:46:34:47:
1b:28:a2:dc:e7:a7:7f:c6:16:d4:d7:84:ef:0e:1a:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2D:CA:D4:C6:E6:1D:21:26:F2:90:0B:33:49:09:90:84:B2:52:C9
X509v3 Authority Key Identifier:
keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6b:25:bf:a1:de:95:25:0c:b8:0d:0e:09:c6:65:d1:84:7e:
4b:ae:91:f6:33:0b:43:20:d0:fc:bc:ac:f9:97:7d:23:6a:26:
35:f8:22:35:58:00:32:29:94:fe:92:9e:e8:90:88:08:57:73:
85:a7:44:31:30:cd:d1:f6:2d:14:f8:28:2d:93:f7:32:60:d4:
26:55:15:5d:b6:29:1f:0f:f0:4f:b8:da:80:e2:08:ba:b8:48:
be:d3:2d:96:9d:25:1e:e9:56:9f:ba:25:08:34:f1:a3:02:5a:
15:cc:7b:5d:57:70:a7:ef:e5:0b:70:0a:e4:bd:75:9d:78:53:
d7:4f:22:2d:a5:f9:65:01:99:0a:bc:86:0c:43:85:39:f8:a4:
47:7e:72:cb:5b:31:e7:00:72:f3:c1:c1:85:6f:6d:12:48:de:
6d:1c:81:f0:eb:22:01:8c:f5:1e:73:b6:44:f1:4c:01:0b:e4:
5f:e8:5c:0a:7a:96:48:49:8d:59:1a:65:6d:98:aa:cd:b6:9a:
58:f8:55:5d:08:36:bc:0e:67:b9:3a:e4:e0:16:e8:03:4f:cd:
d4:eb:2f:01:58:71:f1:1c:ee:ad:08:15:e3:2b:d9:d9:46:be:
8c:ec:12:e6:15:5d:31:47:9d:c2:8f:e8:06:12:6d:8d:53:57:
cc:89:50:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:32 2026 by rpki-client