Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft
File: GT0ubIC0mJEN4dla7G5x0ldGJWc.mft (raw, json)
Hash identifier: PlkQOMPj6cdm2raupuUH90GyqdD/ebHpv5vrHyoqmBM=
Subject key identifier: 0A:F1:B8:B2:DA:DF:C7:45:00:E9:4B:8A:1E:88:7C:3F:FE:B3:2A:95
Authority key identifier: 19:3D:2E:6C:80:B4:98:91:0D:E1:D9:5A:EC:6E:71:D2:57:46:25:67
Certificate issuer: /CN=193d2e6c80b498910de1d95aec6e71d257462567
Certificate serial: 019D3262A5BE38C8940CB41C29986E105FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GT0ubIC0mJEN4dla7G5x0ldGJWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft
Manifest number: 011E
Signing time: Sat 28 Mar 2026 03:00:18 +0000
Manifest this update: Sat 28 Mar 2026 03:00:18 +0000
Manifest next update: Sun 29 Mar 2026 03:00:18 +0000
Files and hashes: 1: GT0ubIC0mJEN4dla7G5x0ldGJWc.crl (hash: tYULWcdRsLA/65Jk3FE+9dy3SwmhUtrfxfoNUPotveo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GT0ubIC0mJEN4dla7G5x0ldGJWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:62:a5:be:38:c8:94:0c:b4:1c:29:98:6e:10:5f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193d2e6c80b498910de1d95aec6e71d257462567
Validity
Not Before: Mar 28 03:00:18 2026 GMT
Not After : Mar 29 03:00:18 2026 GMT
Subject: CN=0af1b8b2dadfc74500e94b8a1e887c3ffeb32a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:4a:7d:4f:ae:5a:39:e5:c7:84:01:f6:75:
f1:f7:e3:d8:c8:11:03:ab:ea:91:c9:5a:92:67:95:
bd:9e:f7:1c:b9:8f:1e:15:a1:78:ac:48:49:47:88:
32:d5:3e:70:16:5a:d1:66:8c:80:37:36:72:37:c8:
75:56:f8:3e:eb:4c:5e:86:7b:25:dc:02:53:1a:f6:
3b:51:d0:ee:69:aa:73:b4:48:f8:93:73:c2:97:c9:
ec:b8:15:12:7b:a6:55:30:79:61:46:ab:71:39:c3:
4d:16:e1:af:01:05:ad:3f:5c:58:d7:43:ff:16:e6:
04:84:e7:e7:0e:0b:c1:96:5d:95:74:fb:2b:50:b6:
2b:c6:d1:54:8b:3e:1d:e5:4a:b0:80:aa:cb:6f:7b:
86:82:ef:03:fd:03:a0:d4:5d:18:ea:8d:8c:dd:e0:
be:14:43:e1:7e:c1:4b:4a:47:e0:53:00:9c:fc:f0:
83:a3:54:21:2a:4b:15:59:9a:bf:d4:55:8e:b0:72:
db:30:fc:c0:a8:9a:5c:a4:6a:fd:f8:67:9b:6d:d0:
ab:d1:a3:86:1a:4c:16:8d:b7:f1:46:c4:61:61:47:
fe:af:b7:0b:bf:e5:6a:22:72:74:30:a2:89:ef:f1:
07:9f:fb:81:05:7e:f7:e2:f9:31:4a:9c:82:de:e3:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F1:B8:B2:DA:DF:C7:45:00:E9:4B:8A:1E:88:7C:3F:FE:B3:2A:95
X509v3 Authority Key Identifier:
keyid:19:3D:2E:6C:80:B4:98:91:0D:E1:D9:5A:EC:6E:71:D2:57:46:25:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GT0ubIC0mJEN4dla7G5x0ldGJWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/86fff4-e3ae-447e-b465-31d407d2b952/1/GT0ubIC0mJEN4dla7G5x0ldGJWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:be:dc:9c:99:8a:f8:a3:f7:a8:6c:08:10:fd:de:05:3d:59:
ed:27:09:64:7b:3e:43:d7:5a:62:f5:ae:b5:0f:3b:58:d8:1d:
e2:c8:ab:d2:d3:fa:d7:28:c1:0b:3b:ac:ba:27:8b:b8:76:71:
13:9a:24:0c:a8:a9:9c:b3:51:80:78:dd:4c:c8:d4:9d:67:a4:
40:6b:00:c3:5c:57:c0:cd:b2:c6:ce:7d:69:84:c5:4a:98:e9:
48:a6:43:8d:3f:90:a6:51:2b:87:e9:9a:7f:13:84:39:71:0c:
e3:3c:d7:49:21:21:aa:75:51:a6:d7:31:b0:ac:7d:2b:22:7d:
20:0d:82:75:73:1f:35:eb:a0:63:78:1e:d9:65:e3:18:5c:73:
74:6f:2c:63:d4:d3:19:ef:be:ae:1f:0f:d8:4f:43:09:10:e5:
35:9c:9f:a5:4a:97:fb:6e:8d:de:6e:f4:b7:98:38:fd:11:3c:
d8:f8:fc:c9:37:51:35:09:30:f6:84:97:1a:c8:3a:3c:f3:1f:
52:6a:cf:91:1f:d1:1b:d5:10:e7:e9:55:eb:e3:47:96:c1:71:
f9:e6:55:c4:f7:d9:4d:c8:2c:6a:dd:6c:fe:93:b8:ee:8a:20:
a7:5e:18:af:45:88:4f:37:56:0a:89:f4:8c:3c:2c:bd:02:df:
1a:ee:05:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:46 2026 by rpki-client