Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d97bb7-9208-4e7b-8087-4a5623fe411e/1/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.mft
File: GBnE8DDHad4gvRvJ_VjH-Yz9JTM.mft (raw, json)
Hash identifier: nyKoOX0hfEusRIRx7KfBBb2QcqmrSY9tKh4f9G+sjCM=
Subject key identifier: 67:2B:0C:46:30:39:8E:40:AD:2B:EB:62:1B:2C:6D:32:0C:EF:B9:62
Authority key identifier: 18:19:C4:F0:30:C7:69:DE:20:BD:1B:C9:FD:58:C7:F9:8C:FD:25:33
Certificate issuer: /CN=1819c4f030c769de20bd1bc9fd58c7f98cfd2533
Certificate serial: 019D26CD11CB2F9906C0A15D81E4A9E6DDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d97bb7-9208-4e7b-8087-4a5623fe411e/1/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.mft
Manifest number: 89
Signing time: Wed 25 Mar 2026 21:01:06 +0000
Manifest this update: Wed 25 Mar 2026 21:01:06 +0000
Manifest next update: Thu 26 Mar 2026 21:01:06 +0000
Files and hashes: 1: GBnE8DDHad4gvRvJ_VjH-Yz9JTM.crl (hash: YsjR8kkgbLRaKXEI1ZZxAqRtDdO3Bf4ZuqfauLoxn1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d97bb7-9208-4e7b-8087-4a5623fe411e/1/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d97bb7-9208-4e7b-8087-4a5623fe411e/1/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:11:cb:2f:99:06:c0:a1:5d:81:e4:a9:e6:dd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1819c4f030c769de20bd1bc9fd58c7f98cfd2533
Validity
Not Before: Mar 25 21:01:06 2026 GMT
Not After : Mar 26 21:01:06 2026 GMT
Subject: CN=672b0c4630398e40ad2beb621b2c6d320cefb962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:d0:ec:a2:4b:ec:12:66:60:0e:c1:b4:3f:
1d:2f:7e:16:c2:7e:e8:04:e7:f9:f3:55:0b:15:4b:
22:fa:af:99:f2:34:49:58:a9:6a:50:72:29:34:c4:
d8:64:e6:25:8e:71:71:53:b8:1e:80:c2:fb:4d:92:
f1:4f:20:31:c8:3e:51:86:e6:7d:c7:9a:99:f2:5a:
76:b5:8b:03:83:12:0f:6d:15:7b:d5:f2:5a:01:17:
48:0d:da:3b:4d:bf:c6:7d:3a:0a:93:53:87:1a:13:
ae:9a:c9:be:9c:e0:8b:73:a8:b8:ed:bc:42:18:a5:
ac:fa:7b:d8:5a:13:21:62:1d:66:17:28:88:03:4a:
40:1d:c8:85:a7:c4:d5:c5:53:d2:54:df:71:56:53:
b7:0c:73:3f:6f:37:b5:ea:02:58:6d:e9:fe:72:28:
81:f9:74:1a:4c:4d:cd:b1:78:41:46:6b:eb:30:f7:
49:a6:cc:e3:f5:cb:5a:6d:bb:b8:ff:a0:67:22:2f:
6f:94:a8:51:9f:dd:df:5d:96:b6:54:23:86:0f:5d:
64:35:63:76:9d:6d:3d:37:ae:9c:c3:2b:1a:3b:84:
ad:35:dd:07:15:c5:39:6e:5d:e4:fa:e0:0f:1e:ca:
63:d7:e6:a5:4d:0b:c7:6e:64:c8:64:84:3c:7e:33:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2B:0C:46:30:39:8E:40:AD:2B:EB:62:1B:2C:6D:32:0C:EF:B9:62
X509v3 Authority Key Identifier:
keyid:18:19:C4:F0:30:C7:69:DE:20:BD:1B:C9:FD:58:C7:F9:8C:FD:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d97bb7-9208-4e7b-8087-4a5623fe411e/1/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d97bb7-9208-4e7b-8087-4a5623fe411e/1/GBnE8DDHad4gvRvJ_VjH-Yz9JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f1:6f:e0:1b:98:bf:6d:9f:a2:d6:3f:dd:67:41:d3:d4:f5:
78:a9:7f:70:97:6f:38:61:0c:58:a4:5a:aa:83:2d:94:db:61:
2b:c2:ac:55:65:54:32:91:0a:41:cb:79:dc:39:28:49:c5:20:
cc:30:74:6e:ea:48:7d:45:1b:74:fc:e6:11:9e:1b:ca:c8:09:
b0:69:71:69:ef:d1:3f:c3:86:6d:d6:42:b8:4f:b2:cc:12:a9:
7e:02:a3:7d:c8:90:1a:44:82:2b:f8:b8:49:a5:45:18:85:ec:
4a:c0:42:3a:df:f2:b2:89:58:62:e7:1a:0f:06:39:10:68:dd:
ab:7d:1f:49:7a:79:a1:bc:e6:5a:aa:dd:86:0d:55:3d:55:22:
3a:89:17:37:88:99:44:e9:7c:55:3c:1e:7a:cf:fd:25:70:9f:
0b:ce:e6:d5:45:61:fe:61:15:20:3f:54:27:9a:86:cc:b3:ed:
70:49:3e:5a:75:23:4e:ba:12:e6:c1:8f:3e:15:d0:89:62:cd:
65:5c:8f:a1:fb:3c:22:8a:2b:a0:7b:8f:cc:ea:f2:21:4d:86:
e4:c2:cb:88:83:94:49:59:71:e3:d0:73:c6:60:31:c0:08:fc:
bf:32:8b:02:44:38:e5:f9:1c:16:4c:8b:64:4e:e7:06:c5:64:
53:1c:9c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:31 2026 by rpki-client