Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: zfTw4B/cBN/haNUWxGETndzuBnhZ5FiS2qPw+DiTooM=
Subject key identifier: E5:CF:87:C0:4D:31:F2:05:25:76:9D:EA:7D:4D:D8:48:60:AF:CC:04
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 019D27DFE0D31DE5C7544EC053E7854628B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 11A0
Signing time: Thu 26 Mar 2026 02:01:16 +0000
Manifest this update: Thu 26 Mar 2026 02:01:16 +0000
Manifest next update: Fri 27 Mar 2026 02:01:16 +0000
Files and hashes: 1: UkNOO2CDkXM7dtcGCawwwbxPN_g.roa (hash: RvHxO6CCiZRu8PB12w6pIAfjfO2ckn1GqUWkiwPCsHk=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: Y/WjQ8XJ22Luv0pY5G9clHGyN939P/iRVUbWt/v1b1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e0:d3:1d:e5:c7:54:4e:c0:53:e7:85:46:28:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Mar 26 02:01:16 2026 GMT
Not After : Mar 27 02:01:16 2026 GMT
Subject: CN=e5cf87c04d31f20525769dea7d4dd84860afcc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:63:84:a1:d5:b6:c3:25:0e:6d:8e:db:7e:
e4:13:40:da:a6:5e:8a:fe:f8:09:49:d3:85:81:69:
16:36:8d:59:18:95:d0:1f:81:c5:50:27:e3:40:56:
70:8f:2b:16:76:85:4a:00:a5:d3:a6:28:40:58:dc:
a8:e8:38:38:3e:fb:d4:f7:c8:d8:b2:58:3f:c8:82:
2a:b8:5c:ed:7c:0c:dd:89:da:f0:f8:0d:49:d5:df:
19:1b:b0:5e:85:3c:45:85:1b:95:a0:00:1f:99:75:
1b:40:9f:2a:4e:cc:68:f6:a7:fa:ce:87:02:1d:c6:
b0:7e:9b:52:c3:ff:3e:b9:1a:7e:ce:29:c2:f4:e8:
08:dc:ff:b2:36:c7:2a:fd:3d:70:1b:2d:ac:9b:68:
60:cc:a8:ed:1a:13:67:53:cd:ed:fb:53:c1:1d:10:
2d:0d:a8:c7:05:24:8f:dc:8e:3e:d9:41:66:eb:ee:
fa:e1:49:5c:8e:49:5d:e2:7e:3b:a6:e1:58:f3:b9:
27:80:70:65:9a:fb:90:b3:c6:2a:88:d8:8b:e6:b2:
a6:f1:96:f1:66:27:1c:6b:ea:5d:b1:a1:ae:80:ae:
90:00:9c:2e:d6:6b:12:aa:80:e7:49:53:34:52:ab:
bb:fc:7c:22:db:d6:ab:37:d4:43:db:36:f0:5e:a9:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CF:87:C0:4D:31:F2:05:25:76:9D:EA:7D:4D:D8:48:60:AF:CC:04
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:91:62:47:f2:2a:52:58:6d:af:63:57:69:a5:93:88:14:30:
e0:31:90:fb:e8:e1:bf:73:49:fb:9e:06:58:f4:20:38:9f:a6:
92:d7:63:7b:e4:7f:56:fb:84:1e:b0:84:c1:9a:52:06:c2:4e:
5c:2d:84:18:77:6e:9a:c8:8c:57:5c:e4:8a:48:b9:13:9f:51:
b0:b4:9e:ec:93:49:73:3c:ec:d6:e3:a8:c6:e4:b2:ad:56:70:
ce:a2:ae:10:6b:80:b3:c0:9f:98:d7:79:46:fd:eb:1d:8e:34:
18:3a:4d:74:a3:30:71:f6:5f:4e:02:9e:a2:4d:82:6e:af:4e:
03:61:cf:cc:6f:4e:a3:54:f7:71:26:07:7c:a6:2d:c3:c4:b1:
05:0f:4b:24:e4:42:8e:02:85:77:29:59:21:d8:77:09:13:b0:
e2:dc:d8:e5:50:90:bb:f1:ff:14:c2:91:bd:8a:31:01:47:d1:
76:01:3f:b8:89:b7:94:d7:b1:45:6a:f9:af:d3:f9:aa:67:ec:
5a:69:2f:0a:e5:aa:93:f7:62:3c:0c:96:19:81:fe:1e:dd:ae:
50:62:99:ba:18:41:92:de:fa:ee:63:fd:bf:1d:68:e6:c2:c9:
9a:ad:1d:eb:5f:ec:83:fc:ae:f9:a1:47:fe:14:0c:69:d4:f7:
a3:0c:33:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:05 2026 by rpki-client