Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json)
Hash identifier: ivsm3NPouyoO4BAdqLbwFwxRYrSqYOPJQAnqZkqTt4U=
Subject key identifier: FC:68:BD:10:53:7C:5A:6E:66:D0:36:60:4A:50:3A:B9:F7:88:A4:B9
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial: 019D28BBB1DFE963EDAE1F48712E9611BADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
Manifest number: 14FA
Signing time: Thu 26 Mar 2026 06:01:22 +0000
Manifest this update: Thu 26 Mar 2026 06:01:22 +0000
Manifest next update: Fri 27 Mar 2026 06:01:22 +0000
Files and hashes: 1: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: BCw8dAEK6SXk7F8nYBgx2KatAaRzGVU8UA2aVGP+Yw0=)
2: YWMNPu88xJNnGxNhUv0cCGYnn2o.roa (hash: tf2qYO515DuVuSA7ONMHLsp2LffeXtHsi7dw8jr5sXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b1:df:e9:63:ed:ae:1f:48:71:2e:96:11:ba:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
Validity
Not Before: Mar 26 06:01:22 2026 GMT
Not After : Mar 27 06:01:22 2026 GMT
Subject: CN=fc68bd10537c5a6e66d036604a503ab9f788a4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:d7:1d:a2:d4:27:23:a6:26:06:ee:52:97:
3a:02:25:04:f3:15:3e:ab:6e:9f:1d:dd:fe:3a:b2:
ea:94:0a:2b:63:48:02:b9:39:e9:2d:41:8b:4d:19:
11:50:d1:a9:c6:9b:7b:d3:d0:a8:ff:7f:61:04:e4:
dc:1b:8b:4e:4d:2d:ee:2f:82:e5:ed:fb:5d:f0:84:
1b:1e:6b:2c:88:76:d1:43:4c:2c:e2:b4:61:3c:dc:
97:0e:2b:4d:f4:c9:70:55:17:10:12:68:da:c5:62:
49:77:e3:f6:7f:06:52:9e:db:cd:44:9a:b1:93:9e:
8c:b5:17:64:7a:82:22:25:9d:f5:27:16:b3:3a:5c:
08:bb:96:36:15:2b:b1:3f:12:32:0c:f0:a3:1e:23:
b7:cc:5a:4c:94:7c:0b:bb:85:f8:48:84:08:81:c7:
59:81:c6:03:3b:72:cb:97:32:d5:30:cc:68:33:2c:
fa:6e:14:af:9d:92:d2:f1:b7:49:9b:30:07:cb:6b:
d5:10:06:a6:49:1b:59:a6:0a:03:c6:58:b3:49:4a:
82:50:c7:13:e1:13:41:64:79:ec:24:fa:2b:4e:97:
3c:20:35:06:d3:d5:07:c3:69:c7:a3:c5:86:2a:90:
47:04:bc:61:b5:ee:e6:2f:49:64:1a:d5:34:17:24:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:68:BD:10:53:7C:5A:6E:66:D0:36:60:4A:50:3A:B9:F7:88:A4:B9
X509v3 Authority Key Identifier:
keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:61:14:6c:45:40:43:86:ce:76:db:bc:56:78:97:8d:c5:12:
1b:6d:0b:c8:66:56:a0:35:46:d1:a1:7a:ea:79:47:c1:6b:bc:
7d:1d:ae:47:0d:f5:38:55:72:f7:ea:0a:af:a8:51:4a:aa:30:
e9:c1:8c:85:c9:02:8c:9d:08:10:ab:2f:4f:c3:3d:96:22:9e:
2d:a5:3f:8a:91:38:77:34:df:d9:6b:9b:aa:3c:10:e9:4d:9d:
5b:24:3b:eb:6c:ad:b0:ee:1b:95:60:c9:aa:95:f4:e2:b6:05:
e4:e6:9b:ea:66:eb:3a:05:f5:61:42:b4:34:87:3d:0e:61:be:
d1:e2:16:56:de:27:b2:ce:3e:8a:71:98:c5:43:64:7c:e1:93:
72:14:a9:8d:75:23:ed:8e:82:fc:58:93:0e:95:cc:7b:75:66:
12:22:92:9b:0e:d9:db:90:4b:83:12:28:38:b8:62:ad:57:33:
a4:c3:52:3c:7c:98:6f:43:26:95:65:ab:be:67:15:2c:23:5e:
a3:64:58:bd:a4:6b:47:96:cb:8d:6d:db:d2:9c:37:fe:24:b6:
ee:04:70:64:e7:42:18:8d:e7:80:ef:1e:58:ed:a3:77:d8:1b:
b7:0a:e5:c1:91:80:6c:7d:83:0e:07:61:f0:be:61:28:a3:21:
38:bc:1b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:55 2026 by rpki-client