Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
File: GJiiVgRCVjlcaoRZET1kmoKa-OI.mft (raw, json)
Hash identifier: XjT/4H+7LIxI8cTmdjQDf2IGXcZnU3FVKtKH9ghe3qM=
Subject key identifier: 97:C7:9D:38:CE:B5:49:88:1D:71:E0:6A:90:28:AF:DA:12:09:12:C0
Authority key identifier: 18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
Certificate issuer: /CN=1898a256044256395c6a8459113d649a829af8e2
Certificate serial: 01A0DBA95D91F4055BB73EE9E2702A5D673F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:01:44 +0000
Manifest this update: Sat 26 Sep 2026 03:01:44 +0000
Manifest next update: Sun 27 Sep 2026 03:01:44 +0000
Files and hashes: 1: GJiiVgRCVjlcaoRZET1kmoKa-OI.crl (hash: LPETr3T2XoOzgmFhEOm2uh+pQt4vhqLyOGYPnRYjpBA=)
2: QeFO4WIWKv2ggvxDMB0IIY2ffhU.roa (hash: A3a8EDhaNeBDQqGUsr5v16oyEecMADL0gGFhKmTivEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:5d:91:f4:05:5b:b7:3e:e9:e2:70:2a:5d:67:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1898a256044256395c6a8459113d649a829af8e2
Validity
Not Before: Sep 26 03:01:44 2026 GMT
Not After : Sep 27 03:01:44 2026 GMT
Subject: CN=97c79d38ceb549881d71e06a9028afda120912c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:93:ab:be:0c:13:f0:a2:b1:21:c4:e7:08:
50:f7:73:b5:36:cc:b0:da:f5:94:84:f9:26:43:f1:
eb:5d:dc:d3:36:be:16:c7:f3:fe:fb:fc:d7:33:f1:
f1:9f:77:ec:fd:f0:94:da:96:49:fe:26:78:af:38:
2b:d5:d0:f2:21:b3:c5:f9:50:29:1e:16:f6:9b:78:
9d:56:fa:41:79:55:19:f5:e8:2a:1b:9d:a7:85:58:
f5:f1:01:8a:12:c7:93:9b:43:91:2b:8f:96:da:b9:
f2:c1:d9:d5:ae:6d:bf:15:38:89:97:c4:14:f6:ae:
ad:0d:7f:1a:a9:08:11:d7:0d:c4:5a:f2:66:49:e5:
ee:b7:0a:ad:c6:36:87:71:1e:a7:25:8b:c3:d2:78:
09:f5:2c:ba:1e:fa:45:9b:7c:a2:05:85:1f:b4:38:
65:ff:34:c2:19:f4:ff:c7:c6:5a:bd:2c:cb:24:e8:
c4:55:fc:3e:5e:da:23:c0:58:c9:88:05:b6:2a:8f:
90:f7:b1:5b:7c:d2:28:34:68:e7:e6:2e:ad:89:78:
90:52:77:08:46:df:c9:fa:94:b1:86:b1:5b:5b:0a:
4f:5f:cb:5e:37:19:5b:3b:7a:60:b2:e8:42:3e:67:
2b:b2:ad:17:ed:60:e4:f6:eb:62:80:25:09:22:2b:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C7:9D:38:CE:B5:49:88:1D:71:E0:6A:90:28:AF:DA:12:09:12:C0
X509v3 Authority Key Identifier:
keyid:18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f9:ff:01:6e:dc:78:17:bc:61:0e:46:49:3f:e5:1d:f1:18:
36:30:7d:d2:4f:47:f8:4c:9a:63:e8:ef:54:d5:91:ff:17:ad:
c0:c1:b8:31:b2:dd:67:15:d6:44:ab:29:28:8f:b4:4a:0d:91:
ce:01:d1:c5:da:cd:54:d9:61:f6:0d:b8:6e:f3:aa:88:41:c2:
12:40:59:58:10:a2:a4:47:4b:21:a4:05:e3:da:df:de:25:8d:
f3:93:1f:06:d9:b3:1d:08:cd:d8:25:9e:db:d7:13:22:f4:8d:
80:67:4f:6f:2c:ef:b6:98:8f:15:fb:d6:ef:60:58:bd:8a:cf:
08:88:c3:b7:fc:0d:e8:51:aa:b2:af:40:ab:7c:bf:2d:75:b0:
5e:d2:9d:29:58:0f:a9:e1:c2:e4:9a:96:3b:bf:88:e9:20:30:
72:62:4a:b0:94:c3:72:2b:87:5e:0d:7e:ec:2f:26:5d:0e:9e:
aa:e4:9f:8e:2b:36:c0:21:a2:10:f5:d9:f6:3e:20:29:a4:a6:
c6:fc:7d:5d:ed:c4:74:15:45:7f:0d:fa:35:65:4e:a9:89:88:
1a:9e:2b:e0:0f:be:57:eb:24:7b:9a:13:07:11:04:10:0e:e2:
15:0f:e6:2d:4a:85:16:b5:78:a9:1a:b1:0b:58:e2:92:d6:a5:
d5:a5:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:59:01 2026 by rpki-client