Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
File: GJiiVgRCVjlcaoRZET1kmoKa-OI.mft (raw, json)
Hash identifier: HwChVXKzUABY3Ut7AqFlHUjkKVp6w0OJ1jignOkQM6g=
Subject key identifier: BD:D9:45:8E:59:90:37:A6:29:7F:AB:83:48:C1:67:89:E8:0D:93:D9
Authority key identifier: 18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
Certificate issuer: /CN=1898a256044256395c6a8459113d649a829af8e2
Certificate serial: 019F935B4B9ECFCA9C13D783B74774E9F554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:01 +0000
Manifest this update: Fri 24 Jul 2026 09:01:01 +0000
Manifest next update: Sat 25 Jul 2026 09:01:01 +0000
Files and hashes: 1: GJiiVgRCVjlcaoRZET1kmoKa-OI.crl (hash: at70UFsC+FQk8VBlLyO3d0FJ138aNXht+Vlw8TEQNtc=)
2: QeFO4WIWKv2ggvxDMB0IIY2ffhU.roa (hash: A3a8EDhaNeBDQqGUsr5v16oyEecMADL0gGFhKmTivEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:4b:9e:cf:ca:9c:13:d7:83:b7:47:74:e9:f5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1898a256044256395c6a8459113d649a829af8e2
Validity
Not Before: Jul 24 09:01:01 2026 GMT
Not After : Jul 25 09:01:01 2026 GMT
Subject: CN=bdd9458e599037a6297fab8348c16789e80d93d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:b5:9f:44:b1:a7:00:2a:05:21:7d:fe:11:
62:6c:e8:7a:a1:9a:6c:a7:41:88:7c:c4:a0:69:45:
44:8d:67:c6:89:18:4e:3f:ff:2a:ef:0c:b1:89:f8:
4d:bd:74:b6:0b:87:74:60:49:c2:aa:17:d6:39:a9:
6f:07:f4:74:65:ba:76:76:8d:ad:34:62:a5:26:de:
19:15:83:ee:b5:bf:95:ba:85:75:15:3c:8d:f0:24:
a9:22:0f:86:8e:5f:ef:0b:d5:93:2d:0d:e3:aa:b1:
dd:6c:7d:1d:56:95:a8:52:6b:1b:9e:dd:40:40:0e:
43:8f:4e:38:01:c5:99:84:31:b8:11:21:c6:c9:91:
77:a4:95:23:d8:fa:7d:43:c5:36:14:04:a7:b5:9d:
9d:62:df:d5:2d:92:c4:5d:a7:a8:44:db:98:31:2b:
5d:b1:56:5e:4b:6b:2d:fe:49:1c:89:01:5a:a7:9d:
0a:8b:60:8c:77:93:b1:36:d4:ec:4a:38:d0:d1:c9:
67:51:cb:26:bb:04:1c:68:0b:ae:53:66:53:42:f6:
d7:f5:74:71:41:7c:ef:65:0f:84:2f:4e:f8:46:05:
2c:21:02:1e:5d:99:fd:2e:64:b5:9b:03:bc:99:9d:
1c:9a:94:9d:00:cb:10:c6:fe:01:60:14:8b:28:52:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D9:45:8E:59:90:37:A6:29:7F:AB:83:48:C1:67:89:E8:0D:93:D9
X509v3 Authority Key Identifier:
keyid:18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:01:96:30:da:ba:be:61:47:d6:84:c6:fb:ab:f3:ee:79:6c:
9d:ab:5a:3f:59:dc:88:6d:04:d4:22:b6:e0:9d:59:30:27:7d:
92:ec:ff:aa:c4:2e:87:cf:57:11:11:e5:c0:96:dc:65:b7:0d:
ae:d0:01:f2:5a:09:7b:e3:ee:a8:d7:c0:20:d0:fd:fb:7c:29:
e0:3a:34:62:9b:6a:6e:0f:42:37:29:68:fa:c2:bb:08:dc:ea:
10:2e:96:4c:1a:f5:ce:6f:70:9a:ac:43:2e:4b:e2:8c:80:8d:
e5:77:c7:1d:50:66:60:22:d2:99:3c:ee:93:28:7f:63:eb:ff:
34:0f:8f:21:7a:fd:a5:68:d9:f3:e8:d2:7d:d5:9f:40:c4:5b:
75:95:89:47:cb:98:b1:47:72:45:92:15:63:34:58:8e:20:97:
b8:07:0d:a7:7e:55:c9:4c:bf:71:99:0f:e0:46:b1:ed:7a:33:
ae:78:4c:fb:67:3b:8a:ec:6b:a6:35:68:b9:27:77:e3:c6:7e:
ab:b8:42:1d:c1:61:91:b4:3e:10:be:a4:e8:0a:50:c2:85:83:
42:5b:2c:bc:95:0b:15:a5:dc:c6:72:6a:9e:fb:00:ca:59:7a:
13:34:f9:54:19:83:2b:c8:f9:94:d0:75:45:44:a7:ca:45:cd:
89:9a:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:16:06 2026 by rpki-client