Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3d738f-f020-465f-90c6-ef31b4142548/1/GJAhqKeFFFIL5GQPm1WrHt2bVJs.mft
File: GJAhqKeFFFIL5GQPm1WrHt2bVJs.mft (raw, json)
Hash identifier: hike2w33yEmNNyN0fxqu+++pteau7TRuFOCzftHTGi4=
Subject key identifier: E3:18:16:2E:8B:EB:9F:EE:A8:DC:C4:34:D7:01:A4:45:B1:5D:3F:9F
Authority key identifier: 18:90:21:A8:A7:85:14:52:0B:E4:64:0F:9B:55:AB:1E:DD:9B:54:9B
Certificate issuer: /CN=189021a8a78514520be4640f9b55ab1edd9b549b
Certificate serial: 019D38D3DDABA73F550C275E6B374DC6DB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJAhqKeFFFIL5GQPm1WrHt2bVJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3d738f-f020-465f-90c6-ef31b4142548/1/GJAhqKeFFFIL5GQPm1WrHt2bVJs.mft
Manifest number: 6E
Signing time: Sun 29 Mar 2026 09:01:42 +0000
Manifest this update: Sun 29 Mar 2026 09:01:42 +0000
Manifest next update: Mon 30 Mar 2026 09:01:42 +0000
Files and hashes: 1: GJAhqKeFFFIL5GQPm1WrHt2bVJs.crl (hash: M2xkFOOHf6ORTgwbxEwsZ7JXLX9sg+LxuRnSX4Tp140=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3d738f-f020-465f-90c6-ef31b4142548/1/GJAhqKeFFFIL5GQPm1WrHt2bVJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3d738f-f020-465f-90c6-ef31b4142548/1/GJAhqKeFFFIL5GQPm1WrHt2bVJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJAhqKeFFFIL5GQPm1WrHt2bVJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:dd:ab:a7:3f:55:0c:27:5e:6b:37:4d:c6:db:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189021a8a78514520be4640f9b55ab1edd9b549b
Validity
Not Before: Mar 29 09:01:42 2026 GMT
Not After : Mar 30 09:01:42 2026 GMT
Subject: CN=e318162e8beb9feea8dcc434d701a445b15d3f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:40:97:c8:42:1c:6a:e5:25:5c:db:64:ff:
e8:66:c8:3a:c4:d9:6a:c1:d7:dd:60:c3:f0:cc:b2:
00:d0:34:e4:53:a2:b5:fe:90:ce:fc:8d:ff:87:63:
5b:02:11:90:9a:b4:53:c5:60:da:e5:ca:24:f6:da:
44:e6:b3:04:12:eb:37:05:18:4b:5a:7c:27:b3:cd:
c8:70:e8:70:ec:57:c3:1a:09:49:4b:09:a2:c2:97:
5b:3a:06:eb:28:00:f9:30:d7:75:92:90:c9:98:e1:
82:75:ed:60:88:0c:6e:31:05:67:57:99:5f:f6:af:
88:ad:e3:a8:e0:13:8b:a5:c8:49:16:7c:47:70:ad:
37:2b:a6:56:3e:f8:8e:78:92:5f:3c:22:8f:a2:08:
b0:95:9d:e0:6b:05:00:d1:20:69:43:e1:fe:cb:07:
cf:81:ba:41:8d:8c:94:07:82:d6:54:ae:27:73:56:
6b:6f:3c:0b:a6:da:5a:90:c3:81:71:3f:bc:03:fb:
19:2a:b1:c3:60:1f:da:ee:28:74:90:2f:23:77:11:
04:92:13:5e:19:7c:9d:44:5b:c7:69:db:7e:d7:9c:
99:fc:8d:7b:c5:10:49:f0:da:21:e3:5c:46:92:31:
df:ae:41:3f:53:7d:09:0d:d7:39:30:b7:e4:99:ef:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:18:16:2E:8B:EB:9F:EE:A8:DC:C4:34:D7:01:A4:45:B1:5D:3F:9F
X509v3 Authority Key Identifier:
keyid:18:90:21:A8:A7:85:14:52:0B:E4:64:0F:9B:55:AB:1E:DD:9B:54:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJAhqKeFFFIL5GQPm1WrHt2bVJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3d738f-f020-465f-90c6-ef31b4142548/1/GJAhqKeFFFIL5GQPm1WrHt2bVJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3d738f-f020-465f-90c6-ef31b4142548/1/GJAhqKeFFFIL5GQPm1WrHt2bVJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:72:f6:a8:df:37:61:87:48:31:7e:c5:03:b3:6d:f5:72:67:
54:ef:75:2a:e7:ba:e5:75:87:0c:1a:49:d2:5c:32:cc:b3:bf:
09:38:ac:a7:ff:4d:b9:f0:12:92:97:5c:a8:b3:a5:c5:5e:0f:
44:a8:55:64:69:82:e1:a5:41:45:23:16:c6:33:e6:1c:2c:30:
e7:bd:ab:b3:d7:ed:50:df:3c:4d:8c:14:16:50:ec:82:8e:21:
cc:51:b5:01:c8:a5:d7:81:19:6f:57:28:5a:2e:74:90:02:fc:
d4:4a:81:24:91:aa:ce:ed:11:16:96:7f:35:f9:0e:68:86:a0:
c2:fc:5a:86:4c:55:51:6a:27:5c:8a:47:9c:7b:58:9b:38:b0:
94:54:38:35:f6:3c:6a:8e:0c:ae:81:72:a9:f6:40:44:29:f4:
ba:7c:dc:c3:7e:52:0c:59:2a:b6:de:5d:7a:93:06:85:87:22:
8d:47:3d:b3:5f:8d:67:51:3c:c6:12:c2:28:d8:9f:e3:0b:70:
06:c0:5f:08:81:b7:f9:f4:66:45:8a:28:c1:98:e0:96:e2:36:
41:47:18:e6:b4:3f:fe:30:de:68:72:2d:e5:24:bb:5c:06:49:
38:ec:f1:8b:f7:4d:a3:a1:4d:f0:30:a4:c6:5f:6d:54:2e:f4:
2b:47:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:19 2026 by rpki-client