Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
File: GDDmA-nKjAXUwbxisLdue9nRiQk.mft (raw, json)
Hash identifier: ZUuys4VKSlHD+lYujRoXuTWw71+O/vbOqhoF6t3FXSA=
Subject key identifier: D9:17:43:37:1E:50:4C:3B:A4:B1:F8:38:9E:01:BD:4D:80:0F:A8:CD
Authority key identifier: 18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
Certificate issuer: /CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Certificate serial: 019FA14D8DD76ACF595A20D1F956D87268E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
Manifest number: 19D4
Signing time: Mon 27 Jul 2026 02:00:42 +0000
Manifest this update: Mon 27 Jul 2026 02:00:42 +0000
Manifest next update: Tue 28 Jul 2026 02:00:42 +0000
Files and hashes: 1: GDDmA-nKjAXUwbxisLdue9nRiQk.crl (hash: Vc4JO8k6x4ZcSZ2fDJBh5jE7DXLfd3d8KxCoM+L2lfI=)
2: QdTsVn5Ud_WIzrrjLlrpKx5BpqY.roa (hash: TeDMNSDTDqGDusI2CZzneM+AwlXX+Qo0gdAHUm9BzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:8d:d7:6a:cf:59:5a:20:d1:f9:56:d8:72:68:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Validity
Not Before: Jul 27 02:00:42 2026 GMT
Not After : Jul 28 02:00:42 2026 GMT
Subject: CN=d91743371e504c3ba4b1f8389e01bd4d800fa8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:07:06:73:06:f3:a1:96:c7:e3:3d:f0:e4:
e7:49:a2:de:20:81:f9:53:06:a8:60:82:48:c0:e5:
ec:f1:85:73:47:da:00:fe:5e:69:81:72:37:ac:7d:
ac:52:3c:21:ec:4f:94:ae:e6:d8:b4:af:28:ea:8c:
f1:c6:40:75:9e:86:91:b2:c7:a5:05:4b:82:34:67:
c2:24:d0:ef:23:3f:da:92:4e:98:c1:1b:6b:4b:67:
80:27:90:ef:a9:a7:a9:59:c4:4e:fb:15:ae:6d:79:
b8:b8:9f:cc:a2:3d:91:99:fb:1d:cd:23:62:37:70:
f8:c1:ef:50:9b:cf:6d:50:17:c0:45:69:4f:40:de:
91:29:97:1f:98:f4:75:b4:87:de:c4:b9:96:ed:94:
61:78:34:f5:e9:cb:6e:d1:18:82:0e:66:81:66:5d:
e2:07:da:2b:2f:7e:1c:d4:7b:de:58:55:9e:35:5d:
64:dd:3b:88:e0:cf:35:cf:53:f5:d1:d6:e0:a5:56:
2e:aa:33:f3:70:6f:49:64:29:6b:21:2e:a3:4f:c9:
54:6c:b6:39:98:6f:19:85:a1:57:da:8a:a8:32:a3:
2b:73:11:11:af:ca:60:ea:63:37:db:d6:09:ad:88:
f4:55:e0:79:ec:15:ed:57:a5:f5:0e:d0:5c:6c:84:
db:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:17:43:37:1E:50:4C:3B:A4:B1:F8:38:9E:01:BD:4D:80:0F:A8:CD
X509v3 Authority Key Identifier:
keyid:18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6e:1f:15:fa:4e:f9:f9:8d:f8:f2:5d:0f:ef:5a:32:bf:a8:
79:eb:7d:b4:fa:1f:76:44:71:d3:68:df:a9:90:a9:67:cd:e9:
c9:c4:1a:76:81:6f:c3:b6:3a:d4:47:c4:e6:32:e5:a0:c7:22:
27:9b:70:9b:a2:8b:e7:e5:17:c4:0d:d9:98:72:de:68:60:7d:
dd:ca:47:c4:0c:e7:25:06:c9:6e:cb:ae:b9:34:c0:3b:90:be:
0c:6d:2d:cf:d5:10:f4:65:b9:ef:fc:bf:7b:5d:5c:bc:4a:83:
8c:cd:f8:ad:27:a4:48:95:59:4a:74:44:04:18:53:bc:e8:15:
4d:c3:b3:21:b1:f8:05:6b:9b:35:66:45:fd:d5:29:98:85:5c:
50:b2:3d:3d:0a:81:23:02:4d:cd:35:6c:29:2d:3e:1d:21:08:
ff:ce:72:52:53:e2:03:de:24:21:42:72:4b:dc:92:ea:63:d1:
44:f7:3d:0c:22:2a:1f:d6:3b:cc:13:fc:47:ae:e6:fc:c0:ea:
6e:c6:3c:3c:be:63:6a:44:eb:ee:45:30:25:9a:67:5a:61:f5:
bd:87:5d:49:5b:d7:2a:3e:61:f1:cf:28:62:86:b5:21:f0:aa:
f7:1d:87:5e:ce:63:f4:6d:2f:df:ef:d9:e6:8c:ff:cd:69:29:
49:33:04:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTY3Xas9ZWiDR+VbYcmjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MzBlNjAzZTljYThjMDVkNGMxYmM2MmIwYjc2ZTdiZDlk
MTg5MDkwHhcNMjYwNzI3MDIwMDQyWhcNMjYwNzI4MDIwMDQyWjAzMTEwLwYDVQQD
EyhkOTE3NDMzNzFlNTA0YzNiYTRiMWY4Mzg5ZTAxYmQ0ZDgwMGZhOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYEHBnMG86GWx+M98OTnSaLeIIH5
UwaoYIJIwOXs8YVzR9oA/l5pgXI3rH2sUjwh7E+UrubYtK8o6ozxxkB1noaRssel
BUuCNGfCJNDvIz/akk6YwRtrS2eAJ5DvqaepWcRO+xWubXm4uJ/Moj2RmfsdzSNi
N3D4we9Qm89tUBfARWlPQN6RKZcfmPR1tIfexLmW7ZRheDT16ctu0RiCDmaBZl3i
B9orL34c1HveWFWeNV1k3TuI4M81z1P10dbgpVYuqjPzcG9JZClrIS6jT8lUbLY5
mG8ZhaFX2oqoMqMrcxERr8pg6mM329YJrYj0VeB57BXtV6X1DtBcbITbGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkXQzceUEw7pLH4OJ4BvU2AD6jNMB8GA1UdIwQY
MBaAFBgw5gPpyowF1MG8YrC3bnvZ0YkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0REbUEtbktqQVhVd2J4aXNMZHVlOW5SaVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8yMTkxZDctZmRhMC00YjA3LThhOGYt
MTc4OWU2NGQzMjEwLzEvR0REbUEtbktqQVhVd2J4aXNMZHVlOW5SaVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8yMTkxZDctZmRhMC00YjA3LThhOGYtMTc4OWU2NGQzMjEw
LzEvR0REbUEtbktqQVhVd2J4aXNMZHVlOW5SaVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGW4fFfpO
+fmN+PJdD+9aMr+oeet9tPofdkRx02jfqZCpZ83pycQadoFvw7Y61EfE5jLloMci
J5twm6KL5+UXxA3ZmHLeaGB93cpHxAznJQbJbsuuuTTAO5C+DG0tz9UQ9GW57/y/
e11cvEqDjM34rSekSJVZSnREBBhTvOgVTcOzIbH4BWubNWZF/dUpmIVcULI9PQqB
IwJNzTVsKS0+HSEI/85yUlPiA94kIUJyS9yS6mPRRPc9DCIqH9Y7zBP8R67m/MDq
bsY8PL5jakTr7kUwJZpnWmH1vYddSVvXKj5h8c8oYoa1IfCq9x2HXs5j9G0v3+/Z
5oz/zWkpSTMEjw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:18:42 2026 by rpki-client