Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/GIApFi7xlAd5d7CmCL6bDQCcveU.mft
File: GIApFi7xlAd5d7CmCL6bDQCcveU.mft (raw, json)
Hash identifier: 3/pKAAPwk8s2JD4/C6NwHLq3id/CsByJjiSDPG5d7tY=
Subject key identifier: 29:DD:4C:91:45:16:81:AD:E1:C5:0D:0C:18:C9:BD:E3:C0:CD:76:1C
Authority key identifier: 18:80:29:16:2E:F1:94:07:79:77:B0:A6:08:BE:9B:0D:00:9C:BD:E5
Certificate issuer: /CN=188029162ef194077977b0a608be9b0d009cbde5
Certificate serial: 01A174DDFE153BBD1822022AFF9800934BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIApFi7xlAd5d7CmCL6bDQCcveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/GIApFi7xlAd5d7CmCL6bDQCcveU.mft
Manifest number: 21
Signing time: Sun 25 Oct 2026 21:01:07 +0000
Manifest this update: Sun 25 Oct 2026 21:01:07 +0000
Manifest next update: Mon 26 Oct 2026 21:01:07 +0000
Files and hashes: 1: GIApFi7xlAd5d7CmCL6bDQCcveU.crl (hash: xKt6rss+oEkQKsBkogpWTxrzT0jBXQBGYsJiYhE/gmA=)
2: HaB3kDD9Hwzp2b2S-ngfXoqGIT0.roa (hash: 7AIXbE36qy0WZQhHBdBN+XbQPhk9YDqvywl5qC87wSA=)
3: b9JFH5XkgEnT2ogR1x8Lnp2JaQk.asa (hash: 12SnbchwgXP0LafCRXDmZi8p3Vp2tvU+FuT0NHs+bwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/GIApFi7xlAd5d7CmCL6bDQCcveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/GIApFi7xlAd5d7CmCL6bDQCcveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIApFi7xlAd5d7CmCL6bDQCcveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:fe:15:3b:bd:18:22:02:2a:ff:98:00:93:4b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188029162ef194077977b0a608be9b0d009cbde5
Validity
Not Before: Oct 25 21:01:07 2026 GMT
Not After : Oct 26 21:01:07 2026 GMT
Subject: CN=29dd4c91451681ade1c50d0c18c9bde3c0cd761c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:92:f1:a9:94:f7:8f:b1:d4:7f:7e:73:77:
66:00:08:8f:0a:4c:b1:a1:d6:0c:04:ed:07:6a:ec:
fc:f7:1c:a5:28:59:59:de:78:d8:ab:e6:6f:55:f5:
11:7a:d3:3e:4c:ac:76:57:49:fb:10:01:a6:81:9b:
2a:46:b6:b1:3f:b1:dc:d3:d4:35:95:89:e4:6b:f4:
3a:93:69:c8:9d:94:53:40:b5:a3:f3:c2:bc:eb:df:
28:d7:9f:8d:b9:ed:9d:42:de:10:29:60:1b:d5:2e:
e3:22:5c:f9:4f:0c:4a:89:7d:e7:f5:7a:b4:ce:76:
ac:92:35:c9:93:e7:62:e5:62:03:3c:1d:93:d3:50:
62:12:cc:46:9a:b8:91:0a:a1:00:b4:5d:4e:74:b1:
87:48:db:1a:50:dd:75:8a:f4:e6:39:e4:51:39:e4:
60:69:37:6a:26:40:45:85:af:c9:4e:fc:6e:ab:c4:
ff:a0:b7:a9:58:50:04:86:8e:3c:db:a2:17:1e:c1:
45:0c:a6:4b:84:91:c3:c6:02:b7:0a:60:a1:9f:68:
3b:53:b6:5e:fd:2d:91:8d:de:d9:13:6d:0c:12:f2:
67:35:47:e1:92:14:dc:cd:08:ea:78:21:4d:26:f9:
8d:85:ee:3b:b6:b9:23:7e:1f:a9:af:81:39:17:ca:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DD:4C:91:45:16:81:AD:E1:C5:0D:0C:18:C9:BD:E3:C0:CD:76:1C
X509v3 Authority Key Identifier:
keyid:18:80:29:16:2E:F1:94:07:79:77:B0:A6:08:BE:9B:0D:00:9C:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIApFi7xlAd5d7CmCL6bDQCcveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/GIApFi7xlAd5d7CmCL6bDQCcveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3007e5-0a76-4f25-bda9-b87c6e2f541c/1/GIApFi7xlAd5d7CmCL6bDQCcveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7a:10:29:dd:ba:e8:7a:b0:f3:dc:13:62:d6:c7:e4:3f:85:
0e:50:ae:93:ac:b7:d6:77:bf:f9:9f:a2:99:93:f7:1a:63:71:
1a:96:7e:bf:5a:d5:ae:f5:cc:c3:78:33:62:8f:4f:db:1c:4a:
46:27:2f:10:fb:fb:38:0f:48:76:8e:fb:f2:5d:4c:89:ea:95:
49:c0:01:af:c1:df:97:42:7b:ea:81:13:61:da:6d:57:8c:fa:
3b:81:69:da:4a:7b:e1:91:f5:a5:4f:b9:de:a5:dc:b8:bb:fa:
09:30:0c:57:19:18:21:b6:ec:b0:6b:4b:8a:39:98:3f:92:ff:
d7:ff:6c:49:4d:b4:2f:e9:aa:fb:60:6c:2c:11:b6:f0:8c:d4:
0c:f9:3f:45:c3:d6:9d:a1:63:f5:2e:1a:be:a0:6c:cb:56:da:
42:16:02:8a:ae:58:9b:03:8d:e1:46:30:1e:e9:fb:59:d6:5e:
1b:0c:14:b4:da:96:6a:b1:f2:54:89:0a:12:a5:80:cb:8e:d9:
cc:81:25:0e:c9:07:4a:95:4c:47:6f:8e:af:48:51:9a:c2:81:
4c:7a:b6:7c:72:a1:0d:d8:90:24:1a:be:76:81:28:eb:ed:38:
d9:25:e3:40:a7:47:f0:63:9a:63:bd:5c:b9:33:92:37:f3:68:
f5:78:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:14 2026 by rpki-client