Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
File: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft (raw, json)
Hash identifier: j7BZUiafhC/RznIXaguvs2YdtIebUHly8/ijSNtIUZE=
Subject key identifier: D2:5F:4E:61:DC:39:F6:13:42:01:19:A3:23:7C:F7:FB:63:8A:9B:CD
Authority key identifier: 1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
Certificate issuer: /CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Certificate serial: 019D27E0314821C0EBBDA3A22C2D67517E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
Manifest number: 086A
Signing time: Thu 26 Mar 2026 02:01:37 +0000
Manifest this update: Thu 26 Mar 2026 02:01:37 +0000
Manifest next update: Fri 27 Mar 2026 02:01:37 +0000
Files and hashes: 1: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl (hash: aZUKPtGNrRIrNdRSl/gw3AuwxiH1RfacUijitbaP8M4=)
2: PRWWZTPfSbsdOcFDzXqI07gWKnM.roa (hash: o3ezVQcMSQ90jhxByB5K6ib9QZEeV8XrQMqvctluruM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:31:48:21:c0:eb:bd:a3:a2:2c:2d:67:51:7e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Validity
Not Before: Mar 26 02:01:37 2026 GMT
Not After : Mar 27 02:01:37 2026 GMT
Subject: CN=d25f4e61dc39f613420119a3237cf7fb638a9bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:57:14:ba:94:69:b4:9b:8f:25:27:c6:97:
a8:b7:2a:47:31:3a:2f:b9:af:15:4d:61:bd:39:b2:
0f:59:07:99:f6:b6:6f:bf:ca:7c:55:08:c5:bb:e2:
8e:b9:36:4b:76:f9:37:f5:37:47:92:ec:cd:1c:a7:
4f:10:ab:3b:24:14:e3:84:bd:d1:e1:a0:e2:12:a2:
b7:41:e8:97:24:24:4f:10:25:3c:62:76:7f:85:2b:
dd:26:e1:a1:6f:d5:66:14:2a:25:00:ab:8c:a3:f9:
cf:de:21:e0:72:c8:7a:a0:2f:f7:cc:cd:75:3d:5b:
ff:27:e9:fa:15:7d:b5:e8:f5:4f:99:86:27:17:b8:
5d:12:db:8e:26:8d:1b:18:86:f5:ea:e5:5f:87:68:
11:ea:bf:0a:2c:13:ef:97:a2:85:4d:33:af:c5:e9:
16:4b:1b:f1:e3:4b:5c:4f:b8:26:ee:02:6c:a9:0b:
71:3c:13:63:25:ba:6c:d3:69:d3:b3:de:36:20:74:
7d:9a:99:98:88:06:e1:42:5c:c4:9b:f1:8e:e6:4e:
3a:a1:63:3b:81:c7:73:bb:07:d0:cc:5c:3e:c7:e4:
01:60:05:50:10:07:10:70:0c:70:c3:96:70:0f:ee:
db:0a:a4:f3:5b:83:53:46:7f:40:ee:a6:07:00:6e:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5F:4E:61:DC:39:F6:13:42:01:19:A3:23:7C:F7:FB:63:8A:9B:CD
X509v3 Authority Key Identifier:
keyid:1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f0:51:da:98:df:ba:2d:6d:75:02:52:e7:4b:28:e9:be:29:
a3:7e:e6:af:85:77:12:38:b4:84:21:68:15:6b:37:ec:3a:c8:
3d:1f:bd:ab:20:c9:0a:c7:87:06:be:c2:5a:48:b8:39:ce:d7:
51:2d:5d:86:b8:22:c8:67:3d:35:5c:dd:86:6a:2c:fa:50:3d:
1f:06:37:bc:a7:de:a1:f1:9d:72:34:b5:23:01:ae:ba:bd:11:
2e:88:22:5f:8b:3a:99:3d:2c:4e:6c:c7:c9:0a:53:d1:95:c2:
cf:f1:eb:55:98:59:12:0e:b9:f6:c3:31:b6:c4:c3:6f:d4:a3:
ec:fa:12:58:46:21:50:ff:aa:27:62:fe:71:63:2c:a9:2f:9f:
87:0a:ef:d3:e0:bb:e9:1c:17:c2:86:62:51:2d:6b:0b:fa:d9:
82:8a:55:a0:5d:9b:d9:c0:33:9d:bb:50:09:da:62:0f:9d:b8:
13:81:56:55:07:28:41:92:dc:83:bd:a8:79:02:26:97:3d:a2:
0c:a1:2c:1a:7a:91:3e:75:79:2d:9b:de:16:44:c9:16:79:16:
47:d4:a7:19:0d:01:0f:15:65:e8:05:53:dc:1f:74:93:e8:0f:
cd:83:2b:ec:89:34:8b:96:c3:62:c0:b8:f9:6f:61:39:ca:cf:
f8:41:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:43 2026 by rpki-client