Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
File: GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json)
Hash identifier: mOnktXYy4lD63qtiOVnlMDwonEgA1EuwgABKLw/TZbo=
Subject key identifier: 3F:D1:DA:22:97:D6:16:92:C5:79:9A:88:C8:29:4F:8F:8A:23:37:EF
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 019D284E198C1F74F7D682524C53603A00CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
Manifest number: 0CF6
Signing time: Thu 26 Mar 2026 04:01:40 +0000
Manifest this update: Thu 26 Mar 2026 04:01:40 +0000
Manifest next update: Fri 27 Mar 2026 04:01:40 +0000
Files and hashes: 1: AuWKANhvxq9kHiTgy1f7DHg4G9Q.roa (hash: d6Pp0aQuhZMtZL83upp5lwXAgjd29VSzR+vb2YU7l5s=)
2: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: 3cR77coz92igGuW0TdPwVDEzJT/Hm97MaoGRDDvd3I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:19:8c:1f:74:f7:d6:82:52:4c:53:60:3a:00:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Mar 26 04:01:40 2026 GMT
Not After : Mar 27 04:01:40 2026 GMT
Subject: CN=3fd1da2297d61692c5799a88c8294f8f8a2337ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:99:ae:27:36:a6:ea:b7:5f:a5:0e:b0:8b:
e7:84:42:01:2b:61:58:79:fb:c6:97:ba:d7:82:02:
2b:9f:21:ba:43:ae:b7:20:55:cc:42:0e:c8:84:c4:
d4:fb:13:87:b0:7a:15:a4:37:e8:65:8e:30:35:9f:
b3:a9:37:be:04:6b:8d:ad:28:53:e6:a0:4d:03:bc:
6b:56:b5:79:f4:a2:96:87:32:73:ba:e4:9e:73:00:
08:2a:b0:a5:51:74:4f:7c:e4:c7:7f:e6:26:87:42:
4f:e4:a7:b8:5a:37:a3:14:25:e5:c8:44:d2:7c:31:
40:51:03:d1:6b:86:2f:d9:45:0d:28:73:68:61:41:
89:86:a6:c0:61:f1:c5:e5:e5:b9:2d:b6:5a:35:71:
63:ae:5d:1a:54:05:12:a2:e8:e5:ac:fc:cf:61:f8:
6f:03:c8:a7:fe:d3:20:86:0b:e4:2d:a5:d8:ab:db:
5c:a7:c1:87:31:36:32:5d:e9:1b:dc:c6:f4:5a:39:
ef:de:ba:0d:ec:79:d9:4b:8a:65:74:f8:8f:85:ab:
d5:2f:49:c2:2f:04:28:fc:18:e5:de:24:fc:b9:d8:
8c:6f:50:c9:39:9c:16:56:c5:f3:68:25:ab:28:42:
52:9f:90:c9:99:3e:3e:1a:67:9b:85:cc:04:a0:79:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D1:DA:22:97:D6:16:92:C5:79:9A:88:C8:29:4F:8F:8A:23:37:EF
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bf:c6:f5:1d:10:52:bd:98:5e:a7:08:8a:1c:52:83:0d:32:
b1:0a:2b:01:e0:23:e0:bd:c8:a7:a5:a4:f4:44:8b:ee:c7:6a:
1d:a8:e6:55:d1:a6:0c:22:6e:12:08:a0:d9:d2:87:2b:2b:df:
32:43:ca:a5:40:8a:c9:57:c4:54:88:85:6f:82:0d:7c:1e:a7:
dc:e5:4d:1e:d3:8a:73:0b:42:b7:34:b5:fd:38:12:f1:81:43:
6a:be:41:0a:f4:0b:47:bf:c9:2c:24:c6:fa:77:f4:7d:bf:12:
12:14:b1:ee:80:d2:6e:7e:0d:11:04:d1:0a:9f:d2:dc:cd:ec:
4a:77:ba:7c:b0:eb:88:e5:de:0b:ee:c4:b6:1a:9d:d4:fc:76:
68:2e:04:69:2d:39:2d:23:2b:8a:22:fd:7a:f4:60:80:6a:bd:
7d:e3:33:a0:49:ec:79:47:b2:d5:fd:0a:ba:b8:fb:45:b4:9a:
dd:e7:c0:4c:2b:8c:7f:17:a9:47:39:5a:30:ff:b2:88:00:94:
ff:39:3c:3f:0c:10:95:10:7b:79:65:4c:e9:9c:02:1e:1d:f9:
d4:2f:32:74:2a:3e:aa:f2:e4:8d:d3:74:04:51:62:05:19:de:
e7:fa:18:e0:be:1f:a7:dc:35:73:02:ec:a7:98:a4:5b:d9:44:
ef:0e:48:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oThmMH3T31oJSTFNgOgDMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMmE0YmZkMmMwYzY5NzY1YTgyOTllZjc0OTY1Zjg2MmE3
MTQ4YjcwHhcNMjYwMzI2MDQwMTQwWhcNMjYwMzI3MDQwMTQwWjAzMTEwLwYDVQQD
EygzZmQxZGEyMjk3ZDYxNjkyYzU3OTlhODhjODI5NGY4ZjhhMjMzN2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMyZric2puq3X6UOsIvnhEIBK2FY
efvGl7rXggIrnyG6Q663IFXMQg7IhMTU+xOHsHoVpDfoZY4wNZ+zqTe+BGuNrShT
5qBNA7xrVrV59KKWhzJzuuSecwAIKrClUXRPfOTHf+Ymh0JP5Ke4WjejFCXlyETS
fDFAUQPRa4Yv2UUNKHNoYUGJhqbAYfHF5eW5LbZaNXFjrl0aVAUSoujlrPzPYfhv
A8in/tMghgvkLaXYq9tcp8GHMTYyXekb3Mb0Wjnv3roN7HnZS4pldPiPhavVL0nC
LwQo/Bjl3iT8udiMb1DJOZwWVsXzaCWrKEJSn5DJmT4+GmebhcwEoHl57QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/R2iKX1haSxXmaiMgpT4+KIzfvMB8GA1UdIwQY
MBaAFBoqS/0sDGl2WoKZ73SWX4YqcUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUt
YmI3MDgwMGMyYTY1LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUtYmI3MDgwMGMyYTY1
LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABL/G9R0Q
Ur2YXqcIihxSgw0ysQorAeAj4L3Ip6Wk9ESL7sdqHajmVdGmDCJuEgig2dKHKyvf
MkPKpUCKyVfEVIiFb4INfB6n3OVNHtOKcwtCtzS1/TgS8YFDar5BCvQLR7/JLCTG
+nf0fb8SEhSx7oDSbn4NEQTRCp/S3M3sSne6fLDriOXeC+7Ethqd1Px2aC4EaS05
LSMriiL9evRggGq9feMzoEnseUey1f0Kurj7RbSa3efATCuMfxepRzlaMP+yiACU
/zk8PwwQlRB7eWVM6ZwCHh351C8ydCo+qvLkjdN0BFFiBRne5/oY4L4fp9w1cwLs
p5ikW9lE7w5IvA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:47 2026 by rpki-client