Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
File: GkIazkbF3ViinUbNkfso_DnFb-4.mft (raw, json)
Hash identifier: ag2RQ0m+Ha4m2+V5CZK7XA8X/WWemnI+n0rWL6Wjs3k=
Subject key identifier: AF:A0:40:28:76:88:E0:03:EF:D6:8F:55:B9:0E:78:A4:FF:8F:DD:6D
Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
Certificate issuer: /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Certificate serial: 019D29295B2693D51A8390AC8CE245927EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 08:01:09 +0000
Manifest this update: Thu 26 Mar 2026 08:01:09 +0000
Manifest next update: Fri 27 Mar 2026 08:01:09 +0000
Files and hashes: 1: GkIazkbF3ViinUbNkfso_DnFb-4.crl (hash: 4JwMPqsxQZmfBeNsHChB62qY+C7lkVp3AE68eAjZmXU=)
2: yKhioiAI6-4jdwcerEQCLkvTbbQ.roa (hash: AKG0EdZvwdWd5/g3X8141KYxu5/oFF9spVOegmiaXd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:5b:26:93:d5:1a:83:90:ac:8c:e2:45:92:7e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Validity
Not Before: Mar 26 08:01:09 2026 GMT
Not After : Mar 27 08:01:09 2026 GMT
Subject: CN=afa040287688e003efd68f55b90e78a4ff8fdd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c0:79:4f:92:0f:ee:b8:41:5e:7e:4e:a5:27:
79:1a:0c:a1:89:fd:13:22:28:4b:67:5e:24:b6:33:
ed:05:e3:17:10:7c:25:9a:b4:b0:cf:86:80:55:06:
47:df:00:83:e5:e3:3b:4f:c8:5a:03:84:70:34:54:
da:62:a2:7f:ed:0c:a4:3f:d0:f5:74:3d:66:07:b6:
19:d0:a3:91:88:03:60:df:40:f3:a1:9d:c8:f7:43:
e9:17:b5:4f:82:f2:d7:be:f2:34:f2:01:5b:15:5a:
f6:0d:3d:41:06:c3:9e:de:80:70:7f:75:35:ee:a0:
c8:28:8f:cf:5e:6f:85:4b:af:0a:24:a6:c7:fd:76:
30:b6:77:0e:9e:da:f0:c3:d3:10:38:d6:d5:ca:8a:
a6:c6:0a:b6:4c:52:bb:69:d5:f9:02:bf:6c:c1:99:
4d:b4:aa:48:a4:4c:87:85:a2:4a:15:32:6d:f3:20:
c7:87:fa:63:b8:a3:93:0f:9e:27:d1:79:81:5c:6e:
8c:01:99:e5:5b:f0:5c:b8:89:29:cc:fe:e3:4e:e5:
2b:0d:2c:b4:92:00:e8:e3:f0:b5:f0:17:b3:93:49:
df:75:6e:df:57:24:c8:43:a9:73:16:51:05:ef:f5:
05:f3:ae:ad:75:20:c6:bd:d3:91:0c:3b:ed:cf:20:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A0:40:28:76:88:E0:03:EF:D6:8F:55:B9:0E:78:A4:FF:8F:DD:6D
X509v3 Authority Key Identifier:
keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9f:3d:49:99:6c:b1:8c:b7:1c:de:9e:b7:65:11:11:41:b2:
ca:e4:6e:48:5b:85:7a:44:79:81:9e:2b:bf:01:40:4f:0c:54:
2a:86:5b:d1:ef:52:89:dd:ec:57:b6:54:11:83:5c:d3:8e:f0:
21:12:98:41:cc:b3:2a:47:7a:0c:4f:cb:e5:16:1d:de:21:64:
60:95:72:e1:03:e0:d6:d2:39:f6:72:50:e1:0b:cb:b6:d2:ae:
45:c0:41:76:1f:df:42:2a:4a:88:e5:16:95:ed:d1:a4:c9:e3:
5a:db:64:42:fc:c6:49:2d:86:91:ab:83:b5:d5:30:fe:67:68:
8f:ea:c5:09:9e:2f:6a:b8:4f:db:1d:00:38:4a:e9:5f:86:f2:
15:19:c0:bc:f2:2d:d1:09:4c:49:20:89:2e:d7:2a:c0:5e:52:
e0:33:dc:59:2c:5d:91:dd:c1:b7:64:ef:11:e8:d5:20:ed:53:
72:01:96:45:04:ed:42:2b:20:e7:fc:93:dd:35:4e:ec:d6:5f:
53:9c:22:21:b7:8e:25:55:3b:8c:76:b1:20:3f:51:f1:d8:45:
88:54:46:bc:57:50:c5:03:a2:2c:b2:42:2d:54:5a:31:fb:cd:
63:97:67:db:fa:73:e9:67:ba:9d:14:c8:9c:cf:bc:bd:a0:ab:
21:0b:88:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKVsmk9Uag5CsjOJFkn6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNDIxYWNlNDZjNWRkNThhMjlkNDZjZDkxZmIyOGZjMzlj
NTZmZWUwHhcNMjYwMzI2MDgwMTA5WhcNMjYwMzI3MDgwMTA5WjAzMTEwLwYDVQQD
EyhhZmEwNDAyODc2ODhlMDAzZWZkNjhmNTViOTBlNzhhNGZmOGZkZDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78B5T5IP7rhBXn5OpSd5Ggyhif0T
IihLZ14ktjPtBeMXEHwlmrSwz4aAVQZH3wCD5eM7T8haA4RwNFTaYqJ/7QykP9D1
dD1mB7YZ0KORiANg30DzoZ3I90PpF7VPgvLXvvI08gFbFVr2DT1BBsOe3oBwf3U1
7qDIKI/PXm+FS68KJKbH/XYwtncOntrww9MQONbVyoqmxgq2TFK7adX5Ar9swZlN
tKpIpEyHhaJKFTJt8yDHh/pjuKOTD54n0XmBXG6MAZnlW/BcuIkpzP7jTuUrDSy0
kgDo4/C18Bezk0nfdW7fVyTIQ6lzFlEF7/UF866tdSDGvdORDDvtzyBPfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+gQCh2iOAD79aPVbkOeKT/j91tMB8GA1UdIwQY
MBaAFBpCGs5Gxd1Yop1GzZH7KPw5xW/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YzQ4YTAtZDNjZC00NGIzLTlhZTYt
N2RmZmNlMWQ2ZTJkLzEvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85YzQ4YTAtZDNjZC00NGIzLTlhZTYtN2RmZmNlMWQ2ZTJk
LzEvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZ89SZls
sYy3HN6et2UREUGyyuRuSFuFekR5gZ4rvwFATwxUKoZb0e9Sid3sV7ZUEYNc047w
IRKYQcyzKkd6DE/L5RYd3iFkYJVy4QPg1tI59nJQ4QvLttKuRcBBdh/fQipKiOUW
le3RpMnjWttkQvzGSS2GkauDtdUw/mdoj+rFCZ4varhP2x0AOErpX4byFRnAvPIt
0QlMSSCJLtcqwF5S4DPcWSxdkd3Bt2TvEejVIO1TcgGWRQTtQisg5/yT3TVO7NZf
U5wiIbeOJVU7jHaxID9R8dhFiFRGvFdQxQOiLLJCLVRaMfvNY5dn2/pz6We6nRTI
nM+8vaCrIQuIvg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:25 2026 by rpki-client