Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: QFrThEzTN6ITtqnsL2270Oa2Yalmm6UUUJh4oFF+eWI=
Subject key identifier: 8F:C6:F8:16:C8:49:A7:A0:10:1B:CA:73:41:54:7F:B3:02:69:6E:47
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 019E20C8A3BF2C29B3C095847C22A82B6995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 10:01:20 +0000
Manifest this update: Wed 13 May 2026 10:01:20 +0000
Manifest next update: Thu 14 May 2026 10:01:20 +0000
Files and hashes: 1: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: YcGRpauVrO9FbdW9pA55+AsiT/8vnpLdRh2QlAxx18Q=)
2: f8VlKt8JzCNAPxp24L1Yki6OYWM.roa (hash: pdFJm+KiuiR3o4ERryoXHrfDwKAIlg8iSODri6S35nw=)
3: qLXb67dE1EAchhK-STW3jwCdYVI.roa (hash: drU9BCSr2spJludNeni+Da0l+Sz7+7Ab8hUqNLHYgcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:a3:bf:2c:29:b3:c0:95:84:7c:22:a8:2b:69:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: May 13 10:01:20 2026 GMT
Not After : May 14 10:01:20 2026 GMT
Subject: CN=8fc6f816c849a7a0101bca7341547fb302696e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:99:33:51:79:7c:b7:ab:e6:48:4c:a3:20:
00:53:90:23:4f:b4:6f:25:51:87:a8:0c:e3:a4:ce:
e7:e5:b6:0a:4a:75:0f:e0:25:b3:96:71:23:3e:ac:
57:10:da:f5:5a:70:f0:34:a6:df:4b:80:69:5d:28:
b2:03:14:ce:99:6e:2e:f1:2b:16:06:78:7a:ca:b2:
6e:c9:3f:34:f6:f5:c0:85:ed:23:86:fb:08:20:e3:
82:bf:c8:1a:14:33:3e:36:29:87:30:7d:7a:1f:03:
eb:d8:46:01:7b:9f:25:e5:97:fc:33:7d:82:74:e5:
60:72:4c:41:05:64:23:2e:6e:e5:18:06:0f:e5:5d:
b7:07:c1:44:81:b9:aa:94:a2:16:91:ad:69:86:9f:
d3:36:c0:4a:33:c4:80:9b:c1:53:d6:b7:e8:98:e5:
a4:16:81:b4:d6:9a:66:ca:df:89:ab:5d:45:80:92:
62:bb:10:be:a0:d8:26:6e:24:8c:27:4c:c2:36:3c:
e7:da:69:bc:f2:e7:84:4d:f1:69:fc:b9:79:9e:62:
c9:60:ab:9a:ab:c9:7a:74:d0:02:c3:81:4c:3a:1f:
21:a5:00:5b:31:c0:81:e6:44:0c:61:6a:cd:bc:df:
11:9e:5b:5d:d2:a3:91:96:ee:4c:d7:c8:61:c8:ee:
13:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C6:F8:16:C8:49:A7:A0:10:1B:CA:73:41:54:7F:B3:02:69:6E:47
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:09:b4:50:13:b3:27:bc:4f:c8:8e:2b:ae:83:34:e1:c4:1e:
a3:1e:19:ea:51:24:ee:83:bf:a8:da:0c:95:bf:8e:f5:e3:89:
cc:88:4b:f5:c1:22:91:e5:aa:46:6f:f7:11:6c:44:b9:c6:5a:
4b:54:c2:d6:09:ba:63:31:08:15:f1:b8:49:ca:01:ea:32:50:
01:0e:22:52:13:c0:10:b4:5b:95:eb:ab:d1:ee:4c:5f:2b:80:
f4:c9:b2:62:22:f2:58:59:19:4e:e5:66:95:5d:d1:94:90:87:
e2:51:3d:56:dd:3a:e2:89:44:a8:c9:58:ad:24:ac:fb:0d:a2:
64:db:e0:d0:c7:3b:a0:0f:b4:d7:10:63:b7:c1:2e:20:00:66:
2a:a3:ad:4b:de:93:3b:67:cd:71:ed:24:ea:0e:b9:b8:4c:98:
fe:b8:a5:73:c1:0c:23:48:90:50:59:9a:d3:e6:17:a3:a8:46:
4e:c7:c6:3a:0b:a9:06:3a:46:d6:d9:b7:0a:9d:f2:80:dd:14:
04:a8:eb:e6:32:a4:11:24:18:5c:27:4f:a7:8a:b8:a6:f6:06:
55:b4:63:12:73:4f:34:c0:b3:8c:4b:4b:f7:7c:0c:3d:84:14:
fb:cb:ee:fe:9a:53:f7:9e:82:eb:36:d2:7d:2a:90:60:3b:64:
5d:a2:ef:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:34:17 2026 by rpki-client