Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json)
Hash identifier: YisCfWpvebnFXafZn6Ebho5DWoNcQkyhFO/gJpvx4cM=
Subject key identifier: C7:14:D4:48:99:5D:C2:B3:48:A6:34:70:E9:2B:21:8B:58:29:69:0E
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial: 019D382E2B191543CAAEF8250004BB2CFCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
Manifest number: 1502
Signing time: Sun 29 Mar 2026 06:00:42 +0000
Manifest this update: Sun 29 Mar 2026 06:00:42 +0000
Manifest next update: Mon 30 Mar 2026 06:00:42 +0000
Files and hashes: 1: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: Wq7ewn9kNiQg7zezpygl8sxU0Hn7nhRatqcKTb5kQ5M=)
2: YWMNPu88xJNnGxNhUv0cCGYnn2o.roa (hash: tf2qYO515DuVuSA7ONMHLsp2LffeXtHsi7dw8jr5sXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2b:19:15:43:ca:ae:f8:25:00:04:bb:2c:fc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
Validity
Not Before: Mar 29 06:00:42 2026 GMT
Not After : Mar 30 06:00:42 2026 GMT
Subject: CN=c714d448995dc2b348a63470e92b218b5829690e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3f:72:c4:4a:57:88:99:49:f2:92:51:f9:1a:
dd:73:5c:42:7c:69:5a:16:b9:44:e3:a4:52:c4:70:
3d:8a:9d:8f:c2:20:88:a5:3a:e5:90:3b:c1:e4:c6:
74:e3:02:3f:5e:88:2e:02:4b:54:5f:98:bb:f8:b0:
5c:7a:76:7a:97:4c:13:94:e4:64:b3:16:73:3e:6a:
a4:9f:4c:e9:41:7e:70:1c:56:7d:58:76:03:cd:cd:
f6:57:74:b8:95:fc:60:84:e5:a7:46:63:58:39:a2:
0e:34:8b:d2:eb:89:c2:c8:66:bd:38:7c:f6:f1:88:
c6:c8:e9:44:ab:2b:9b:a7:c9:b1:ff:35:4b:d6:c2:
bf:71:6e:2e:57:6f:db:4a:24:39:bf:a9:68:b3:ad:
2a:5b:e4:ff:93:64:91:be:c2:86:7a:7b:f4:b7:b9:
c8:e9:a2:6f:8b:db:0c:86:60:fe:89:c7:99:4c:0b:
3b:b2:92:06:ba:c9:a3:90:66:0b:9f:85:08:80:56:
3c:43:e9:e1:5d:ad:4f:ba:4c:a7:d3:da:c7:ee:ef:
6d:8c:7f:e6:40:58:e6:45:06:2a:be:53:ff:3e:b2:
d1:58:33:80:a5:b3:6d:3a:0c:6f:a2:a4:d0:27:b2:
f6:5d:dc:0d:02:5b:10:5d:7d:ad:a5:08:c0:62:4d:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:14:D4:48:99:5D:C2:B3:48:A6:34:70:E9:2B:21:8B:58:29:69:0E
X509v3 Authority Key Identifier:
keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:75:db:e1:c1:58:7b:ef:f6:35:de:00:4b:99:8c:b1:15:01:
dd:a7:aa:0f:bd:34:62:f1:88:cb:38:55:82:39:64:04:23:02:
52:0e:30:64:25:50:9e:18:14:ba:2f:04:f6:e6:b4:87:bd:f5:
2f:51:20:62:a7:29:2f:38:b7:14:82:33:2f:64:9a:5a:31:df:
1a:bb:2e:0b:cb:57:4c:85:38:18:62:3f:40:57:f2:e7:60:97:
16:c4:5e:b3:19:7d:6d:13:ea:55:06:e9:de:8c:7d:1a:28:76:
34:6b:54:f3:3a:00:54:8a:6f:f6:ce:e6:f7:66:ea:cc:84:36:
8a:57:5f:f2:16:d6:57:2d:94:9a:c0:9d:8e:41:0d:f4:a3:3f:
75:b7:db:f4:7a:a5:d8:3d:e6:0f:37:eb:55:c4:da:45:6f:36:
2e:0e:9b:e9:23:3d:ba:2b:cc:49:a8:a1:6d:6d:7d:c8:f8:a8:
27:0a:c9:d3:68:e1:f4:0e:a5:55:a2:ab:12:9a:a7:fc:3f:b5:
3b:10:95:cd:3a:9d:d6:3e:ea:ff:e1:3f:89:eb:e2:4f:7b:19:
85:3b:1a:09:78:fa:3f:97:f0:a7:d4:3c:a1:80:25:61:ad:0f:
73:29:15:cb:fc:ec:f1:69:47:8e:77:40:78:72:16:b5:61:9d:
32:aa:fc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:10 2026 by rpki-client