
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.mft
File: GDktrI4_OuUDmVfuSp5dXcLkgZU.mft (raw, json)
Hash identifier: kkNGhNREhcFm+ssC6rksxA0FBTqH121yJYdR3tcDcYQ=
Subject key identifier: 2F:71:D9:34:5D:78:5D:BE:E8:41:62:65:44:F6:62:85:71:B5:B4:8E
Authority key identifier: 18:39:2D:AC:8E:3F:3A:E5:03:99:57:EE:4A:9E:5D:5D:C2:E4:81:95
Certificate issuer: /CN=18392dac8e3f3ae5039957ee4a9e5d5dc2e48195
Certificate serial: 019D39780EF5B7C241A28F0098A6E979CF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDktrI4_OuUDmVfuSp5dXcLkgZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.mft
Manifest number: 78
Signing time: Sun 29 Mar 2026 12:01:02 +0000
Manifest this update: Sun 29 Mar 2026 12:01:02 +0000
Manifest next update: Mon 30 Mar 2026 12:01:02 +0000
Files and hashes: 1: GDktrI4_OuUDmVfuSp5dXcLkgZU.crl (hash: /djOhH0vdnx8TOWMVII47aY1Db1LpDINVDjiQ3RQ2+0=)
2: cAD0rvowwMXkTvTlNEZ0J1ZlDvA.roa (hash: HuXESRs8SLssZo0izmBi1I+irPTDN/vnESnPWpu4ew4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDktrI4_OuUDmVfuSp5dXcLkgZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:0e:f5:b7:c2:41:a2:8f:00:98:a6:e9:79:cf:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18392dac8e3f3ae5039957ee4a9e5d5dc2e48195
Validity
Not Before: Mar 29 12:01:02 2026 GMT
Not After : Mar 30 12:01:02 2026 GMT
Subject: CN=2f71d9345d785dbee841626544f6628571b5b48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:53:26:49:63:ce:c2:39:3f:77:dd:9b:3f:
64:61:4a:7d:d1:57:bb:51:4b:d6:41:12:f5:f3:fe:
16:6d:24:51:e8:3d:37:c7:c6:22:71:13:cf:17:54:
0b:a3:cc:3a:34:cf:82:28:f5:e7:db:ca:59:35:2c:
94:81:48:8f:aa:85:1f:ef:f6:fc:09:93:54:c0:f9:
24:dc:58:9d:9a:18:4c:27:44:0b:c0:a6:2b:89:b9:
24:29:7c:d4:e7:a7:6b:ba:38:de:00:c2:49:ff:41:
1c:42:e3:ef:74:76:33:34:90:30:96:a1:83:11:39:
00:68:0b:0e:15:35:f7:4b:6b:39:b6:67:6d:17:dc:
1c:33:e0:b4:13:99:2c:5e:4f:39:49:37:a8:37:f8:
de:a0:cd:b7:b2:a0:57:f7:57:62:78:d6:63:a7:fd:
22:2a:7c:dc:e5:4f:42:a8:a4:f2:8e:bd:12:25:9c:
e9:d4:8b:0f:85:f6:f6:31:4b:49:3d:05:a3:11:b4:
bb:88:13:d6:d3:53:cb:55:8f:ba:cd:e6:ba:8c:ed:
07:17:92:c8:f8:f2:95:0c:e5:84:5a:f2:3e:c4:4a:
a7:d4:e3:7a:6d:de:6f:53:76:c5:a4:c1:56:66:6e:
ee:46:1b:46:b7:c9:3b:24:83:8b:50:15:af:41:d3:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:71:D9:34:5D:78:5D:BE:E8:41:62:65:44:F6:62:85:71:B5:B4:8E
X509v3 Authority Key Identifier:
keyid:18:39:2D:AC:8E:3F:3A:E5:03:99:57:EE:4A:9E:5D:5D:C2:E4:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDktrI4_OuUDmVfuSp5dXcLkgZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3f5bae-7144-4ef2-a78c-f0cad76c157c/1/GDktrI4_OuUDmVfuSp5dXcLkgZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:eb:54:b0:a2:4b:a2:15:ff:28:69:4c:a9:f6:55:19:fa:9d:
19:8e:f3:a8:d7:39:b6:81:1a:0e:d0:c2:3f:c1:cf:84:ee:47:
4f:3f:61:a4:ea:cc:7e:71:4e:87:0a:a8:82:a9:75:c6:51:2f:
86:9b:c6:1e:45:f3:fb:1b:6e:c5:ad:5c:d1:84:64:f0:6d:3a:
27:43:5f:a5:56:d3:73:86:9b:6b:7c:6b:22:bd:ef:0e:82:76:
fc:c5:8b:da:fa:0e:f0:9c:50:03:a1:1d:e0:da:c1:9c:23:ab:
44:f9:a2:c1:d5:6d:c1:f7:8a:05:b9:8d:9b:9c:8f:b2:29:32:
15:14:bc:58:95:bf:fe:29:25:50:a9:0c:a5:2e:a1:43:3b:ba:
49:9f:f5:21:ec:79:b2:78:7d:c3:70:5d:7a:09:05:a7:c2:96:
fe:b0:d4:e6:65:e9:d3:8c:44:14:2a:a3:5f:4e:5b:61:a2:38:
85:56:54:03:1b:b2:38:3f:26:30:c8:d2:df:3e:04:0a:ab:a8:
6e:10:87:51:a6:a8:ed:c4:39:23:77:49:6e:23:1c:04:e8:cf:
37:2c:95:9f:b1:11:e8:a6:a3:12:90:7c:05:4e:c9:23:9b:e7:
e2:3f:70:84:90:d5:d4:b1:3b:c3:07:27:65:53:0c:62:a5:29:
25:22:0b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:19 2026 by rpki-client