Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: T4C/qvH9EW657Xvts21CREQ0py7RzYD9QMuNYdOmi7g=
Subject key identifier: E6:31:84:83:C1:3F:64:C6:29:BB:76:2A:F6:63:B2:64:9F:F2:03:20
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 019D29971F5E495979F979CB8A0CA98C0EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 10:01:02 +0000
Manifest this update: Thu 26 Mar 2026 10:01:02 +0000
Manifest next update: Fri 27 Mar 2026 10:01:02 +0000
Files and hashes: 1: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: d3BQ/lEEat5ojy3Phe+M9ZCD6qvvhnu4ulSIeaqSBZ4=)
2: f8VlKt8JzCNAPxp24L1Yki6OYWM.roa (hash: pdFJm+KiuiR3o4ERryoXHrfDwKAIlg8iSODri6S35nw=)
3: qLXb67dE1EAchhK-STW3jwCdYVI.roa (hash: drU9BCSr2spJludNeni+Da0l+Sz7+7Ab8hUqNLHYgcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:1f:5e:49:59:79:f9:79:cb:8a:0c:a9:8c:0e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Mar 26 10:01:02 2026 GMT
Not After : Mar 27 10:01:02 2026 GMT
Subject: CN=e6318483c13f64c629bb762af663b2649ff20320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b9:1c:17:6a:9f:83:00:d1:81:57:c9:49:a4:
7c:28:79:31:58:0e:fd:86:ed:fc:b6:59:f9:f9:f9:
f7:85:6d:86:24:64:63:0c:f8:43:9e:61:7f:f7:4e:
f5:94:a4:4b:5e:92:96:86:72:01:0e:bf:0f:12:6f:
a0:e6:81:8e:1a:21:71:ff:a7:34:85:74:1a:68:c3:
c9:4b:07:12:2b:a0:2c:6a:5c:5e:1b:12:57:00:35:
b7:79:85:91:98:3e:0c:ea:da:da:31:2a:42:1e:31:
00:3e:47:05:02:77:be:7b:86:56:28:c6:34:85:34:
d6:4a:fb:8d:cd:a1:cb:a3:e5:70:6b:a0:c7:61:2d:
14:61:ee:57:41:7e:a3:3c:9f:c1:b5:f0:6b:52:40:
2e:2d:aa:31:25:bd:86:fc:21:53:50:cb:5c:50:7f:
be:20:ab:91:7a:a9:d4:d7:2d:56:0e:c9:8e:81:b6:
be:f1:03:1e:d7:58:e4:51:b8:56:00:46:6c:3e:b7:
e4:ab:99:65:c2:56:34:55:cb:98:70:47:bf:d6:85:
66:c4:91:ff:74:96:bb:68:fb:02:a8:2e:53:c8:3e:
82:6e:73:63:17:a7:30:78:5d:68:d1:ec:42:42:0c:
f2:03:3b:b0:ba:ba:ce:81:7c:0b:af:72:93:ec:ee:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:31:84:83:C1:3F:64:C6:29:BB:76:2A:F6:63:B2:64:9F:F2:03:20
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:91:9b:71:24:4f:ed:2c:01:32:08:8d:aa:de:50:99:9c:f5:
6c:4c:b1:f8:d6:fe:90:d9:1b:d1:f7:a9:e6:ac:b4:15:b3:d1:
af:b7:aa:51:75:d6:c1:db:20:b9:a9:e8:14:8a:e4:be:85:bf:
38:bb:dc:b6:be:4e:e5:c5:47:f1:b5:17:f5:01:a3:28:69:01:
ae:50:31:80:14:8d:2e:f1:85:42:c2:94:8d:fd:11:bf:2a:97:
8b:7e:2c:d6:65:01:23:ff:3f:75:d1:68:d2:1b:21:15:aa:22:
77:79:bc:2a:c5:5e:3d:d5:72:0d:2b:4c:d8:5f:51:2a:f2:ae:
cb:f7:9f:e4:6f:e9:1b:df:14:41:02:51:fc:26:22:07:dd:5e:
00:40:80:77:d7:c7:70:21:9c:b7:41:ba:b1:fb:e4:f2:10:21:
5b:4c:32:77:f6:58:63:92:f4:3f:48:19:4b:3b:c5:a1:a0:9f:
65:d7:88:d6:31:4d:ab:2a:cb:b2:3e:18:1e:b8:a3:a1:36:b9:
a9:44:53:07:d1:45:81:9b:82:23:0f:03:67:80:2f:36:ba:b4:
ab:c4:14:a6:c8:58:55:a8:c2:80:ca:d8:e8:8e:16:68:5a:61:
ba:08:82:47:d8:cb:7d:04:1a:26:90:c3:e3:02:39:86:e5:5a:
83:09:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:24 2026 by rpki-client