Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
File: GDDmA-nKjAXUwbxisLdue9nRiQk.mft (raw, json)
Hash identifier: x+9pyk/YyFqFzL1Zxkyc9AiCzfhUHqNwGQR9+PtY6Ic=
Subject key identifier: F9:3E:6D:2C:9C:3A:49:9E:B0:66:77:04:7F:91:D3:20:43:3E:0B:EC
Authority key identifier: 18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
Certificate issuer: /CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Certificate serial: 019D27E0400834BF139BC91A62ADF6B30C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 02:01:41 +0000
Manifest this update: Thu 26 Mar 2026 02:01:41 +0000
Manifest next update: Fri 27 Mar 2026 02:01:41 +0000
Files and hashes: 1: GDDmA-nKjAXUwbxisLdue9nRiQk.crl (hash: wfDTgy6jOo0nBsOu/GgwfJM2lTuT79Zj98jdDHTe+bk=)
2: QdTsVn5Ud_WIzrrjLlrpKx5BpqY.roa (hash: TeDMNSDTDqGDusI2CZzneM+AwlXX+Qo0gdAHUm9BzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:40:08:34:bf:13:9b:c9:1a:62:ad:f6:b3:0c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Validity
Not Before: Mar 26 02:01:41 2026 GMT
Not After : Mar 27 02:01:41 2026 GMT
Subject: CN=f93e6d2c9c3a499eb06677047f91d320433e0bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:fe:ba:50:c3:a1:f6:34:e4:25:94:1e:7c:
4e:44:40:a2:4c:a3:a4:d7:e8:c4:07:51:1b:a0:da:
93:9c:fc:c5:b5:42:e1:c8:a5:31:2c:27:1e:23:86:
91:4b:86:53:65:42:3c:92:99:0f:18:2a:19:12:a6:
1f:6c:af:70:02:35:32:92:8e:27:b0:aa:46:bf:9a:
84:27:11:16:e3:f1:5e:9f:81:28:66:f1:ea:2b:6d:
fc:3c:4f:7e:a4:a5:ff:6c:59:ff:e3:37:3c:1d:b1:
c7:b9:0a:d8:42:69:cd:19:54:d9:9a:40:f3:1a:8e:
aa:c6:c9:8b:93:72:32:eb:b2:c2:3b:89:b4:8b:c1:
84:b2:ee:5d:6a:12:a6:9a:90:d7:4e:d0:90:ce:64:
2e:38:26:69:9d:61:bd:ba:57:35:9f:1e:a6:56:af:
6c:ae:9a:89:30:34:5f:9a:be:41:cc:a3:05:b8:80:
dd:b1:c8:93:b5:2b:41:db:10:22:c6:e5:58:63:8e:
0f:e6:48:93:e7:b8:e0:22:b0:65:fe:dc:5d:53:4d:
17:bb:3f:3c:c4:48:5a:97:5e:2b:94:95:8f:83:3d:
b2:31:b1:72:d5:77:ac:37:69:ad:96:93:08:42:74:
cf:77:39:25:53:39:81:d1:c3:10:f9:b1:94:ec:23:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3E:6D:2C:9C:3A:49:9E:B0:66:77:04:7F:91:D3:20:43:3E:0B:EC
X509v3 Authority Key Identifier:
keyid:18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dc:c3:40:67:47:4b:03:97:34:63:a7:4d:70:e1:38:f4:0a:
8b:84:da:1e:ff:11:f3:c0:41:22:1f:67:a0:2a:36:72:b1:1b:
09:32:2f:c7:5f:4e:8a:40:6e:e0:0f:ae:26:72:8a:94:24:bc:
c2:e8:dc:9d:d3:d9:1e:0c:46:82:07:f6:57:7b:a7:83:c2:c3:
73:e1:80:7d:74:66:58:fa:f7:7c:2b:eb:1d:94:0f:e3:fe:6c:
2e:00:5c:0b:7d:b4:7f:dd:fb:94:c2:b4:12:e0:98:e1:24:a7:
5c:69:12:6a:18:f9:c1:06:87:03:1f:ea:f8:18:aa:77:bf:1b:
43:7d:bb:67:cb:5e:b2:af:ae:4b:0f:8a:f4:61:ed:fe:83:65:
56:c5:5f:0c:16:7f:33:85:f7:77:40:5e:5c:27:ef:f3:43:91:
f1:b4:17:49:fa:a1:ee:1a:77:9d:63:eb:66:4d:55:91:0e:67:
1c:b6:0a:05:5f:aa:ec:08:5c:cf:5d:0f:c2:db:f6:1b:ee:67:
dd:bb:5a:20:bb:ea:ce:5d:e5:df:9d:b2:d4:c3:df:b6:f7:0b:
b7:4e:bf:f3:85:49:86:37:7c:79:bc:69:fb:32:57:9e:cc:34:
98:8a:92:ea:6a:0b:40:7b:95:50:14:58:34:ad:fc:7a:f8:ea:
df:68:4b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:42 2026 by rpki-client