Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: gktTpXfBJ1h0FZqN0k+FoF650RwsnHLAjI37XzZYuvQ=
Subject key identifier: EE:E2:CB:A7:90:27:40:DD:15:7D:8F:EA:D2:B9:12:C5:A5:5B:CD:71
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 019D39411EB81629C43B92A7FCC6959E3419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 11A9
Signing time: Sun 29 Mar 2026 11:01:02 +0000
Manifest this update: Sun 29 Mar 2026 11:01:02 +0000
Manifest next update: Mon 30 Mar 2026 11:01:02 +0000
Files and hashes: 1: UkNOO2CDkXM7dtcGCawwwbxPN_g.roa (hash: RvHxO6CCiZRu8PB12w6pIAfjfO2ckn1GqUWkiwPCsHk=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: gXwcn+EGFBJkvEBn1LQAqsoXB45WfR0RoRhazZgjDho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1e:b8:16:29:c4:3b:92:a7:fc:c6:95:9e:34:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Mar 29 11:01:02 2026 GMT
Not After : Mar 30 11:01:02 2026 GMT
Subject: CN=eee2cba7902740dd157d8fead2b912c5a55bcd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:6d:d9:92:2d:93:bb:b7:b5:76:c0:3f:4a:
15:29:48:5c:7a:c4:16:c3:06:ae:7e:8a:84:87:bc:
ab:18:c3:3e:32:eb:f1:cf:09:5a:49:14:2e:8f:c3:
6c:35:04:60:b5:f2:12:9a:02:ea:17:c3:3b:11:d9:
92:e4:8a:f5:08:9b:2f:26:a9:e3:48:48:25:fb:87:
7d:2c:e8:3c:ae:97:39:26:fd:1e:4a:a1:91:3f:7d:
20:4f:e5:f6:0e:77:94:60:d6:fd:83:07:90:62:40:
cb:1f:c6:d2:f7:4e:ca:17:eb:b8:81:3c:b4:7c:12:
10:8b:5d:41:9c:0c:e8:20:a2:d3:c7:5b:3e:91:ac:
b4:89:bb:7f:b6:c6:95:94:17:15:36:46:62:b9:d4:
00:42:57:ab:ab:d2:d4:ea:30:dd:0e:8a:25:09:8d:
82:5a:4c:b4:dc:05:3d:a8:77:27:4e:01:07:b5:f6:
cd:a8:26:65:88:87:20:c3:5a:72:de:0c:69:1e:0f:
02:68:86:42:f6:f9:be:1a:8c:5f:d2:7f:8b:11:e3:
f9:e5:0c:08:c9:5d:41:6f:ba:be:32:2c:09:ee:03:
e7:b9:bc:39:e3:54:c3:4e:14:8c:64:09:fd:48:13:
7d:7f:80:d5:35:a0:88:37:cb:10:7a:f9:8d:5b:2b:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E2:CB:A7:90:27:40:DD:15:7D:8F:EA:D2:B9:12:C5:A5:5B:CD:71
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:36:27:45:3a:0b:c3:d9:b9:eb:2d:0e:13:18:58:de:9a:f7:
0e:e0:95:d5:56:f4:60:5b:8e:8f:fe:ce:08:99:5b:83:1b:9d:
e7:81:ae:55:33:1e:15:41:2a:9b:d3:04:e4:84:cf:fa:dc:0b:
05:08:02:df:28:5c:4c:f6:67:e6:ee:4b:b1:bf:1d:29:fc:c4:
ab:8f:76:a5:70:2a:ad:91:e4:9f:3f:1b:7c:59:e9:89:12:5a:
bd:de:fb:87:e6:87:d9:66:08:f7:ac:5e:c7:79:e1:c8:93:5c:
1c:34:41:90:a3:e0:0c:74:e4:b0:0b:ea:51:3c:4a:99:a9:58:
18:ad:6d:cc:2c:60:0a:82:9c:33:73:98:a0:2c:a7:92:55:8c:
90:e8:f9:a3:c4:b8:3f:8a:e0:a5:2b:d9:4e:15:1f:c0:62:6d:
ca:14:38:b1:d4:01:0c:cd:73:82:62:06:0d:f3:17:d4:94:30:
2b:8d:05:20:b9:ac:e4:58:ff:8a:da:5b:81:19:3d:7b:44:15:
c7:a5:cc:76:4d:70:d3:8e:3d:1a:62:9f:a7:6c:13:02:35:e1:
c4:c4:db:f5:a6:83:c8:89:5b:46:f8:e0:32:81:6d:80:7d:31:
df:4a:b9:bc:03:79:66:8b:2f:87:bf:a3:75:45:67:fc:8d:86:
5c:15:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:48 2026 by rpki-client