Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
File: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json)
Hash identifier: OkTSNxBZ65Gsq9G2/0fdFJH0IyXy9fPIxW//1/OQrzM=
Subject key identifier: B3:8A:5C:BB:57:1B:EA:64:74:68:71:33:83:9B:28:0D:E8:5A:8D:CE
Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Certificate serial: 019D273A95E06B1533F1BF9CB33570AD814C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
Manifest number: 059F
Signing time: Wed 25 Mar 2026 23:00:44 +0000
Manifest this update: Wed 25 Mar 2026 23:00:44 +0000
Manifest next update: Thu 26 Mar 2026 23:00:44 +0000
Files and hashes: 1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: 3pBELfiZHWuInUev/1fZvFHeXmev4smKdj/W0KChw7g=)
2: jP1Y1GrBhcV5AXNPH0IQ21pDByI.roa (hash: KbbHbK0Z3zk1vvgM/oztcZSTAImni1g8tfvWsc3e20Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:95:e0:6b:15:33:f1:bf:9c:b3:35:70:ad:81:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Validity
Not Before: Mar 25 23:00:44 2026 GMT
Not After : Mar 26 23:00:44 2026 GMT
Subject: CN=b38a5cbb571bea6474687133839b280de85a8dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4e:d6:7d:24:27:ce:6d:a0:51:59:11:8f:d1:
62:58:73:d2:19:f9:c4:72:ac:45:a8:ea:c0:95:d6:
7e:6c:33:c5:a4:18:50:dd:c9:b2:ee:73:ef:50:87:
6a:71:7d:e3:00:b5:c1:41:a7:f7:49:45:04:e6:6e:
88:4b:17:c3:d0:8e:d3:d6:72:08:7f:4a:fe:fe:ee:
fc:03:62:13:ca:27:ef:85:08:e2:ee:96:1a:50:36:
1a:bf:c2:67:2f:4c:06:bd:b9:9a:b6:c9:d4:7f:97:
00:f4:b2:0a:98:07:33:ed:e9:4d:35:2f:66:d3:cc:
9f:63:71:8b:53:19:3f:61:8c:67:69:c3:16:c9:b9:
1f:b3:28:79:31:b0:58:74:1d:38:d4:72:ed:50:e6:
9a:80:58:cc:c2:07:bb:31:65:f9:4b:2b:72:39:c6:
63:82:03:1e:31:0a:cd:4b:11:69:28:d8:67:f7:c1:
67:f9:7c:54:b9:1f:ec:2d:e3:2b:29:92:ca:7a:4d:
3f:63:b8:23:0e:3b:3b:9d:03:c3:8d:c7:57:85:1d:
c3:9c:24:89:d1:9f:fc:7d:45:d4:c7:ca:28:f7:bb:
40:e0:a4:93:e3:b9:03:ec:a1:1d:8a:6d:e0:7c:89:
5e:ae:ce:e8:2b:95:28:e5:01:03:17:ef:d9:0c:4e:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8A:5C:BB:57:1B:EA:64:74:68:71:33:83:9B:28:0D:E8:5A:8D:CE
X509v3 Authority Key Identifier:
keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a9:db:76:0d:0f:83:8f:d2:c2:5b:10:c0:d0:fb:6d:41:e5:
18:eb:89:d8:aa:a9:fd:02:c0:0c:8b:7f:ad:78:67:6b:93:cb:
bb:b1:4f:c2:35:ea:51:c4:03:c8:9b:66:f1:6b:c4:51:af:e6:
7c:e3:ec:19:cd:f4:c3:ee:0e:86:58:24:39:db:bd:55:4f:55:
00:24:c4:ff:26:e9:c6:d7:2f:67:da:d1:37:bf:f5:e9:cd:79:
7e:21:a7:4b:74:2a:54:37:cf:e8:a6:43:72:08:97:15:21:a4:
75:61:32:1f:e7:97:23:b8:9a:78:e4:d6:e1:66:e6:ab:04:34:
49:7a:49:5b:94:bd:4c:c3:53:61:53:6b:73:6c:41:1a:d0:02:
2b:d5:76:8a:67:38:68:9f:26:88:1e:e1:77:d9:e7:39:88:02:
22:3e:5b:a3:c1:ce:99:60:35:a6:bb:b2:8e:2c:6f:10:66:37:
ed:22:ad:e8:bc:a7:32:df:7f:fd:70:7c:48:32:10:14:5a:3a:
c8:b8:2d:60:21:f2:27:ad:7f:b9:86:9b:59:7c:2a:72:a3:11:
48:da:9e:88:5b:00:45:ce:2b:65:3e:c7:d9:6c:f0:94:dd:65:
41:09:be:1a:79:77:32:49:be:5b:1a:ed:28:f2:ec:8b:1c:be:
38:be:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:55 2026 by rpki-client