Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
File: GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json)
Hash identifier: VPny2Ay4NvbQi17kR3hW+vDKq/HotfEJ+bgX4LPzR4Q=
Subject key identifier: 48:0C:AF:81:F2:64:5F:A2:B3:EF:AE:75:9D:AF:61:3F:21:A8:75:A4
Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
Certificate issuer: /CN=19337ca56de7c3b977875369ecde53852515746f
Certificate serial: 019D2A3BE5C537B80FF45D5692A25036FEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
Manifest number: 13D7
Signing time: Thu 26 Mar 2026 13:01:01 +0000
Manifest this update: Thu 26 Mar 2026 13:01:01 +0000
Manifest next update: Fri 27 Mar 2026 13:01:01 +0000
Files and hashes: 1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: XBL/kzFGfBj/Q6L0H3VDJFtBm75y6M0TVWAw6CCOGig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:e5:c5:37:b8:0f:f4:5d:56:92:a2:50:36:fe:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19337ca56de7c3b977875369ecde53852515746f
Validity
Not Before: Mar 26 13:01:01 2026 GMT
Not After : Mar 27 13:01:01 2026 GMT
Subject: CN=480caf81f2645fa2b3efae759daf613f21a875a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:ce:b4:34:78:78:43:4d:a7:a5:a4:6a:9d:
e7:76:73:7d:ee:66:ea:61:37:a5:41:2e:22:62:b2:
ea:91:7b:99:9e:6f:ac:a7:20:7a:20:20:5a:7c:09:
da:29:fa:cb:82:d9:00:f5:9f:80:33:e0:7a:d5:3c:
53:0a:44:e5:d7:9d:a6:d7:a2:a7:9e:ed:b1:70:0b:
09:c2:78:a8:4b:52:e6:6b:5b:60:c7:37:6a:20:77:
8d:e9:de:8f:85:fe:b8:75:60:a1:31:5b:be:0d:52:
97:40:2e:e3:71:99:3f:bb:4e:8b:16:a1:56:bf:8c:
4b:7c:95:d7:8b:eb:0d:1e:32:28:91:79:59:f9:68:
b7:04:55:69:7c:08:5e:01:21:b7:de:e3:50:42:7b:
14:a2:62:1b:f3:27:ec:ba:b0:ba:6d:04:1b:c1:75:
a6:de:8c:c9:63:0a:4b:73:51:5f:42:e3:46:28:f6:
d6:2c:cc:47:d7:eb:37:00:ec:ee:03:ad:72:61:90:
20:85:d3:f2:d9:4c:02:55:33:e4:d2:a5:ff:77:60:
88:a3:1b:23:29:8b:1b:31:4d:0d:db:e5:8a:1b:77:
68:cd:99:78:72:df:ec:85:ec:e1:1f:d4:7a:4c:61:
b0:3e:1d:d1:98:87:ee:26:35:2f:cf:a2:bf:22:9a:
da:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0C:AF:81:F2:64:5F:A2:B3:EF:AE:75:9D:AF:61:3F:21:A8:75:A4
X509v3 Authority Key Identifier:
keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:59:1e:fd:47:2f:86:a8:11:cb:6f:91:e0:3c:15:00:f3:7b:
97:c0:6c:4e:7f:32:46:20:ec:87:f6:ae:e4:7c:e3:70:cf:1f:
21:da:20:57:9e:c9:46:f0:b6:ae:01:96:59:80:ac:c3:9d:0d:
bc:b5:3d:ff:7a:9f:aa:06:d9:0a:74:b7:ad:ee:c5:20:22:a0:
c2:c9:04:fa:b8:9b:ea:f9:66:c7:19:fc:3b:5c:cf:0f:2e:b2:
36:f4:c2:46:d2:59:ca:e2:0d:d3:77:7b:93:a0:e3:fe:c3:a2:
8c:78:6f:3b:b6:23:3e:96:3d:ef:dc:13:e2:25:6e:52:6f:51:
be:e4:47:37:ed:69:a9:8c:65:39:29:a6:5a:f9:fa:3d:b4:19:
62:d2:52:ce:6b:86:4c:4a:4e:ca:70:27:d6:e5:54:4b:fa:17:
c1:dc:c5:0f:e0:a1:51:3b:7e:f7:7c:f6:27:26:49:0a:63:b0:
97:e2:f3:9d:4d:db:de:eb:20:b1:ed:35:7d:53:30:a8:eb:87:
70:de:e0:15:85:d7:e5:b5:82:83:c4:62:3d:17:42:09:4d:c0:
60:08:96:81:ae:db:09:95:84:6f:f2:70:11:97:d7:5d:a4:5a:
4b:ea:d4:c5:4a:d8:55:b8:71:c1:0a:26:1c:fb:84:dd:f5:15:
77:3e:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:15:28 2026 by rpki-client