Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.mft
File: GDktrI4_OuUDmVfuSp5dXcLkgZU.mft (raw, json)
Hash identifier: iMCg2rfautswSxiWOOnH58o2SV15YpnFdROpAWw4eNE=
Subject key identifier: 82:07:FB:63:E7:94:56:D2:91:51:DC:0B:52:43:11:1D:9E:61:BC:D3
Authority key identifier: 18:39:2D:AC:8E:3F:3A:E5:03:99:57:EE:4A:9E:5D:5D:C2:E4:81:95
Certificate issuer: /CN=18392dac8e3f3ae5039957ee4a9e5d5dc2e48195
Certificate serial: 019D31BE849FCD9186F950017E320BF2423B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDktrI4_OuUDmVfuSp5dXcLkgZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.mft
Manifest number: 74
Signing time: Sat 28 Mar 2026 00:01:02 +0000
Manifest this update: Sat 28 Mar 2026 00:01:02 +0000
Manifest next update: Sun 29 Mar 2026 00:01:02 +0000
Files and hashes: 1: GDktrI4_OuUDmVfuSp5dXcLkgZU.crl (hash: vZVh4uMekSm9UXRXq+t8vUJIXlQ7+hucNan9bJrmmck=)
2: cAD0rvowwMXkTvTlNEZ0J1ZlDvA.roa (hash: HuXESRs8SLssZo0izmBi1I+irPTDN/vnESnPWpu4ew4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDktrI4_OuUDmVfuSp5dXcLkgZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:84:9f:cd:91:86:f9:50:01:7e:32:0b:f2:42:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18392dac8e3f3ae5039957ee4a9e5d5dc2e48195
Validity
Not Before: Mar 28 00:01:02 2026 GMT
Not After : Mar 29 00:01:02 2026 GMT
Subject: CN=8207fb63e79456d29151dc0b5243111d9e61bcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:d6:94:48:18:6d:1d:d4:26:4c:b2:94:d4:
6b:b4:45:7a:1f:43:55:39:dd:31:71:c4:53:58:96:
a8:21:a2:3a:8b:58:56:1b:a4:57:12:a0:35:bc:fc:
f8:53:be:5a:3a:d0:13:33:b3:fc:a9:b8:b2:69:a9:
60:7f:2e:37:35:67:55:1a:5c:bb:1e:1a:ca:1b:67:
b4:75:91:69:c8:67:ea:0e:5d:2a:b7:54:4c:b0:e9:
2a:1e:01:dd:64:e5:17:86:b6:02:c6:24:85:0b:df:
91:26:ce:55:41:88:63:4d:5f:7d:36:47:44:91:fc:
b7:05:25:8c:dd:90:e6:96:39:30:8f:f1:d2:3a:53:
e5:d8:ae:56:60:ab:2a:cc:f7:2c:11:f5:3f:c6:6c:
bd:a8:e8:ca:3a:09:70:16:13:35:ba:76:6d:2a:2f:
72:55:8a:79:35:6f:cc:54:4b:3c:c5:85:13:18:f7:
64:20:be:d9:60:7e:c4:0c:64:86:90:33:9b:46:ae:
9c:21:cd:13:7e:f9:c4:b2:f4:9d:bc:34:10:36:60:
b5:ed:1a:f0:46:9d:d4:a2:eb:74:2a:ab:04:83:b7:
e7:31:47:7a:ca:cd:bd:63:63:87:b7:28:b1:ce:c7:
60:b6:78:2c:ac:6e:3b:86:56:92:30:e3:b4:b6:9b:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:07:FB:63:E7:94:56:D2:91:51:DC:0B:52:43:11:1D:9E:61:BC:D3
X509v3 Authority Key Identifier:
keyid:18:39:2D:AC:8E:3F:3A:E5:03:99:57:EE:4A:9E:5D:5D:C2:E4:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDktrI4_OuUDmVfuSp5dXcLkgZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5c:17:1d:35:3c:0f:46:57:c8:5b:74:62:35:8f:30:17:69:
8f:90:74:84:79:b6:2c:1b:7f:37:76:9a:dc:a6:78:92:23:b0:
da:16:5a:1e:5b:f5:56:5b:8d:79:30:19:63:94:b1:f6:23:51:
83:bd:9e:9c:58:45:1a:c2:64:0b:0e:73:87:2b:ee:7b:c5:3e:
fe:97:35:e1:72:fe:69:56:10:97:0d:c0:72:cc:47:74:4f:a2:
f9:18:cf:84:9e:95:85:a4:37:8e:3d:bd:80:05:cf:39:e3:9e:
fa:d0:f6:d4:c8:fc:ad:39:25:16:90:2c:bf:79:3b:d6:ef:23:
f9:bf:9b:30:08:55:34:50:6c:9c:e6:ea:81:f0:61:b4:61:0a:
ea:88:b0:ce:ed:c7:bd:10:8d:05:6e:94:a8:13:e9:5e:03:0a:
d1:2d:71:cb:be:38:26:c8:06:12:32:70:a1:f2:53:1f:8e:39:
74:fa:60:c8:80:cf:13:f8:f4:1a:dd:19:58:6b:67:c2:d0:ae:
eb:43:9a:66:1e:25:c0:66:4c:72:ab:ab:65:51:ac:62:2f:a0:
00:90:68:86:cd:3b:e3:0c:45:1f:28:fc:56:3a:26:c5:6f:2c:
cf:64:e2:e2:19:3d:47:09:53:a3:c2:3c:67:64:a0:c9:74:53:
93:b6:72:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:19:01 2026 by rpki-client