Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
File: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json)
Hash identifier: /FuxgnOQfPEqiylMeiZPb50xcTmIugyky0VRjR9HBwg=
Subject key identifier: 9D:32:12:2C:5B:33:D9:35:87:C8:DF:7B:32:75:43:12:5F:81:35:C8
Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Certificate serial: 019D389BA9EF8EE00849130FE847CA48741C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
Manifest number: 05A8
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: y6IC9b0sCYfDW2yh3SnZovCqRpiKdK8DxXldkMqsAXA=)
2: jP1Y1GrBhcV5AXNPH0IQ21pDByI.roa (hash: KbbHbK0Z3zk1vvgM/oztcZSTAImni1g8tfvWsc3e20Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a9:ef:8e:e0:08:49:13:0f:e8:47:ca:48:74:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=9d32122c5b33d93587c8df7b327543125f8135c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:1c:c0:0f:b1:c9:08:8c:3f:7c:2f:04:fa:
2f:51:8f:d6:4f:8f:d3:90:b5:cb:fe:8d:d1:4c:0a:
3b:30:c3:8f:91:c3:cd:64:ea:f1:7d:21:f0:38:ea:
bf:11:2a:78:5a:e9:91:57:fc:0d:9f:32:57:97:2f:
ab:6a:d9:7d:10:16:27:ab:22:eb:06:18:94:55:3f:
b5:f3:8e:b1:3a:13:13:55:bc:90:28:ec:13:5e:05:
6e:be:3d:3d:65:2f:51:02:8c:6b:df:15:e6:d3:12:
bb:3f:36:3b:d5:e8:9d:ab:c9:ab:3e:aa:49:3d:cd:
84:14:97:53:ca:5f:8b:a0:c1:57:d7:5b:32:a4:e7:
d5:a6:7c:e0:28:46:ea:c5:67:36:74:84:81:96:d6:
7d:f4:0a:52:30:5c:c9:f6:ad:46:57:18:fa:b9:6f:
9c:4d:3a:94:f1:33:d2:7e:15:d2:45:01:da:c4:40:
5b:25:da:91:ea:39:f7:68:ab:e4:ac:b9:0a:0c:94:
e9:0e:57:37:d9:c6:9c:94:6b:37:21:d0:68:34:80:
97:c0:f8:04:c2:dc:26:59:3a:01:18:a7:15:cc:44:
ad:8d:e5:ee:9d:9c:ef:26:d0:88:8a:70:81:4a:fe:
85:67:d4:f8:e4:5c:1d:88:ea:1d:00:29:b5:84:39:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:32:12:2C:5B:33:D9:35:87:C8:DF:7B:32:75:43:12:5F:81:35:C8
X509v3 Authority Key Identifier:
keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ad:e1:dd:d1:16:fb:21:98:ef:39:2a:35:4a:12:95:72:a0:
56:bb:ee:dd:5a:ae:cd:24:77:9f:73:52:41:cd:96:78:c0:b8:
6a:82:23:eb:7b:c4:71:d4:0d:b9:cc:b9:c0:dc:42:1f:4c:80:
23:2e:f9:c2:ee:50:54:d7:e8:2a:65:2c:d0:6d:35:f3:cb:51:
c8:82:c4:dd:14:e4:0e:cc:46:99:49:49:31:5a:ae:5f:70:fb:
1f:e0:78:2f:7c:c6:b1:e8:13:ff:ae:4b:98:fb:cc:2a:9e:5e:
ec:ee:b8:b4:fe:e3:14:36:4a:ab:61:e8:6c:c6:b8:4a:9e:33:
1a:33:36:14:93:57:15:a7:ae:b5:ad:4b:eb:73:0c:5e:d5:51:
f5:3e:6f:0d:5a:d1:86:f8:e4:78:17:5f:7a:e1:33:22:f9:1f:
31:65:7b:04:a7:29:30:c7:f6:b3:bb:10:38:71:41:91:5b:b8:
95:e9:e2:ff:38:26:1e:9f:b0:87:8d:f5:e7:e8:2b:ab:46:f5:
33:e4:61:e0:5f:10:f5:35:93:83:23:33:bb:01:3d:3e:fe:cf:
5e:3d:a3:a3:41:b7:ce:7d:ef:da:4f:ab:d1:22:fc:d3:04:ba:
4f:af:5d:06:4b:11:61:9a:29:cc:d1:ff:64:65:5c:0e:ef:d9:
6d:fe:13:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:59 2026 by rpki-client