Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
File: GJiiVgRCVjlcaoRZET1kmoKa-OI.mft (raw, json)
Hash identifier: uzmiqxVDKiQSzD0Cwqsp4gz7RMtvK021odbUfXnEU0o=
Subject key identifier: 47:47:28:11:02:58:1B:5E:DD:C6:28:DE:4B:6B:41:DD:58:A8:0D:52
Authority key identifier: 18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
Certificate issuer: /CN=1898a256044256395c6a8459113d649a829af8e2
Certificate serial: 01A1859B6EB98A9F4B96E8E3A2393CC291ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
Manifest number: 0143
Signing time: Thu 29 Oct 2026 03:01:58 +0000
Manifest this update: Thu 29 Oct 2026 03:01:58 +0000
Manifest next update: Fri 30 Oct 2026 03:01:58 +0000
Files and hashes: 1: GJiiVgRCVjlcaoRZET1kmoKa-OI.crl (hash: mdoFutKnsIT2KhXeRCAUM6gmDQ82gkCtDpUDJSxqSxs=)
2: QeFO4WIWKv2ggvxDMB0IIY2ffhU.roa (hash: A3a8EDhaNeBDQqGUsr5v16oyEecMADL0gGFhKmTivEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 03:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9b:6e:b9:8a:9f:4b:96:e8:e3:a2:39:3c:c2:91:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1898a256044256395c6a8459113d649a829af8e2
Validity
Not Before: Oct 29 03:01:58 2026 GMT
Not After : Oct 30 03:01:58 2026 GMT
Subject: CN=4747281102581b5eddc628de4b6b41dd58a80d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:95:54:9c:53:20:e7:ab:df:09:80:6b:b0:
67:31:c9:e7:89:8d:97:ad:d7:36:ab:37:bc:f6:21:
15:06:b3:d5:1a:75:f9:6c:c7:db:6c:0b:16:dd:47:
d3:d4:32:81:23:7f:4a:60:bd:a6:b5:55:e0:a0:ac:
05:83:7e:cb:49:bf:28:cb:61:08:4d:b3:fa:53:e5:
62:74:6f:ff:be:1e:53:52:ef:8b:fb:c3:71:fe:4d:
7d:21:48:15:c4:79:d2:c4:42:dd:da:71:d3:b4:52:
55:85:f2:d0:9b:7e:f6:ad:26:f7:18:8a:72:33:c4:
03:b8:3c:97:56:5a:60:f4:67:f1:08:b2:58:ff:0f:
12:03:48:5b:ab:c5:3a:32:e6:c5:88:ff:00:c8:e2:
81:4e:49:43:85:44:f6:e6:95:d3:a6:5e:51:2f:13:
04:84:f6:9c:3a:67:e5:9d:4d:67:70:18:14:d1:89:
be:84:93:d9:54:82:36:c4:37:a5:ef:43:f9:db:d8:
05:3c:53:71:2d:5f:a3:8a:98:4a:8f:f3:d2:70:6f:
8c:c4:ff:04:27:62:c9:47:68:a8:33:07:4a:e9:9d:
b5:94:91:0c:e1:e2:04:1b:4e:be:e1:20:e7:f6:ac:
e2:6b:2e:17:60:f0:ac:34:29:db:51:bc:e3:aa:b2:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:47:28:11:02:58:1B:5E:DD:C6:28:DE:4B:6B:41:DD:58:A8:0D:52
X509v3 Authority Key Identifier:
keyid:18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:23:4f:7b:c7:2e:09:14:33:ef:20:fd:55:6c:ed:2b:d6:ff:
32:65:a1:9c:46:0e:b2:87:3a:40:8b:32:0e:08:9f:3c:5c:9f:
37:65:b4:ff:6a:f3:b4:36:45:90:0b:18:d0:ac:b3:22:82:27:
cd:92:18:80:29:39:3a:70:b5:00:00:1a:c7:77:10:b9:1a:0e:
90:65:06:72:fe:19:28:b3:4c:27:b9:5d:b8:2e:08:02:3c:6a:
16:43:1e:82:e3:ee:0d:38:5d:1d:55:81:24:4c:06:85:b8:c4:
0c:85:95:f1:48:98:f0:ec:cb:23:42:44:40:de:53:33:2e:dd:
b6:42:cd:fd:fc:08:c8:9d:8a:6b:3d:0a:7a:ef:9c:5a:1e:27:
bb:63:c5:eb:6b:1e:65:da:f7:24:51:6e:70:f8:96:1e:2c:51:
2b:ef:d4:0f:d7:43:3c:60:33:3a:c4:c5:41:3e:d3:91:dc:d9:
6e:ba:b3:ca:01:f7:5f:74:e6:ba:2c:9e:bb:8f:16:d0:8c:7b:
bd:18:3a:aa:8f:54:23:9f:a1:aa:32:b7:f9:a6:f1:21:08:1a:
66:a4:38:75:ac:cd:8b:1e:47:2a:8a:3a:a0:09:ce:c8:b2:11:
85:2e:d1:f7:30:cc:f7:71:4a:78:00:ad:9a:cb:3d:4d:ba:4a:
b5:4e:1a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:51:50 2026 by rpki-client