Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
File: GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft (raw, json)
Hash identifier: fQhFQknbsFaKQIvcHPi5GOEpc8cOr7gqGI2uXm+e3Ak=
Subject key identifier: 9A:9A:3E:F4:4F:4E:E7:A1:C4:26:63:30:0A:BB:42:C8:81:A8:5A:58
Authority key identifier: 1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
Certificate issuer: /CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Certificate serial: 019E8E37C745D60D35C837568F0AA35373D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
Manifest number: 28
Signing time: Wed 03 Jun 2026 16:01:20 +0000
Manifest this update: Wed 03 Jun 2026 16:01:20 +0000
Manifest next update: Thu 04 Jun 2026 16:01:20 +0000
Files and hashes: 1: GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl (hash: QpHQFCi5KGAlgFg5GbuR6T/SpMNirr0O3oZg4CIHr6A=)
2: zr6qOC2iZhYMAkfVEjFaWAW3Gdg.roa (hash: rfGt0EQo3cdc8IHh8jz9o2EgRv1qNBw2XAoGV+8jWOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:37:c7:45:d6:0d:35:c8:37:56:8f:0a:a3:53:73:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Validity
Not Before: Jun 3 16:01:20 2026 GMT
Not After : Jun 4 16:01:20 2026 GMT
Subject: CN=9a9a3ef44f4ee7a1c42663300abb42c881a85a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:4d:e6:47:86:f2:e9:b9:b9:09:d3:d1:5a:
d0:ce:95:35:4b:23:e8:1a:66:4a:07:58:cf:2d:91:
a6:7c:a8:94:8f:cd:1f:f1:6e:03:bb:bc:dd:99:eb:
18:3d:cd:ff:8b:a4:e9:08:78:b8:34:3e:41:98:42:
33:40:84:da:50:dc:70:8c:1d:59:dc:ae:de:80:46:
d5:05:f0:a1:fb:2c:4a:87:c1:62:87:30:d1:9b:11:
4e:b7:20:1e:c4:de:53:50:c9:b8:13:36:2b:90:4b:
f0:5d:c0:2c:45:88:b8:9b:1c:a0:a0:16:95:ce:92:
c2:0f:7e:37:20:d5:91:95:64:92:c6:6e:45:07:fe:
c0:df:b6:19:13:a9:96:4f:c5:48:f5:0e:47:d5:b3:
80:a6:18:db:16:e1:e1:a7:73:68:72:11:4f:63:3b:
ac:5e:bb:44:4a:6d:f8:a4:c5:f0:cc:c5:3a:21:2b:
47:7a:54:2f:0b:77:4c:59:ed:85:f7:ad:75:2a:81:
a5:8e:96:fe:94:20:bd:07:2f:43:a0:4d:2d:51:e9:
64:a6:92:b6:a9:32:d1:b7:a8:39:be:d1:47:80:5e:
f4:71:2f:c7:22:65:85:fb:6b:78:95:07:a7:e9:dc:
49:7d:28:87:eb:f8:7d:ce:2c:95:11:47:8a:27:e7:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9A:3E:F4:4F:4E:E7:A1:C4:26:63:30:0A:BB:42:C8:81:A8:5A:58
X509v3 Authority Key Identifier:
keyid:1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:99:97:27:64:5c:1c:cb:ce:92:24:b9:c1:8f:f6:13:8c:10:
5d:a6:32:b9:38:16:3c:f6:e8:93:d7:e7:bc:a3:84:d8:77:3c:
17:f2:a1:cf:06:9e:b4:7b:dc:8d:78:9c:16:a2:49:e3:8f:95:
10:80:5e:ba:fa:6f:11:38:4e:89:aa:47:28:e3:72:97:38:ca:
a8:7c:2c:78:29:17:eb:6a:fb:f3:1d:e3:2d:38:f3:bc:3b:b3:
5d:e5:05:26:f8:cb:45:5f:aa:48:dd:80:e3:cd:53:e4:9e:29:
8b:60:5f:44:9f:6c:ce:b6:c9:a9:e5:0f:9d:37:c2:c8:bd:c5:
1f:4f:e5:ee:c1:17:43:ec:eb:ba:5d:18:c4:8f:6f:61:17:80:
fe:58:48:2d:2a:6c:cf:b6:78:82:12:33:c4:4a:68:5c:5f:41:
bf:10:1d:cb:32:f0:d0:ca:37:ea:16:06:69:c3:d2:60:4b:0a:
7a:30:58:37:bd:fd:20:e8:75:fb:e9:55:c9:cd:7f:22:27:53:
6e:61:a9:10:93:f0:67:29:94:c3:98:7f:b9:0c:41:c9:fe:0c:
ea:0e:46:e6:b8:ea:54:df:51:98:7a:c2:a8:20:02:00:0a:da:
93:b3:31:0e:96:b8:e9:c0:94:b1:44:e9:ea:31:f5:79:d5:55:
cf:47:3e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:55:26 2026 by rpki-client