Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
File: GJiiVgRCVjlcaoRZET1kmoKa-OI.mft (raw, json)
Hash identifier: AwKnLajifaOqDZblMr1D9CeLgIx7G8Gz31kckWoUPPw=
Subject key identifier: 82:00:A9:9F:F3:BE:C7:37:E2:B0:DF:F3:81:B6:F2:28:4D:86:29:5E
Authority key identifier: 18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
Certificate issuer: /CN=1898a256044256395c6a8459113d649a829af8e2
Certificate serial: 019FA2CE71EB4555F126343C100F8208481B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:01:06 +0000
Manifest this update: Mon 27 Jul 2026 09:01:06 +0000
Manifest next update: Tue 28 Jul 2026 09:01:06 +0000
Files and hashes: 1: GJiiVgRCVjlcaoRZET1kmoKa-OI.crl (hash: eaL92sumgCCA75K/cNP4UlYT7zRuVfJk6/KNeWheyXA=)
2: QeFO4WIWKv2ggvxDMB0IIY2ffhU.roa (hash: A3a8EDhaNeBDQqGUsr5v16oyEecMADL0gGFhKmTivEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:71:eb:45:55:f1:26:34:3c:10:0f:82:08:48:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1898a256044256395c6a8459113d649a829af8e2
Validity
Not Before: Jul 27 09:01:06 2026 GMT
Not After : Jul 28 09:01:06 2026 GMT
Subject: CN=8200a99ff3bec737e2b0dff381b6f2284d86295e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:71:43:43:a0:47:08:f7:61:ac:52:14:77:
c1:79:5d:5b:48:c5:1b:0f:df:1c:1b:d7:c3:a0:cb:
e1:e3:4a:dc:1b:da:5f:1d:fd:0c:7e:8f:e5:f2:1e:
82:21:36:35:2f:8b:f4:47:36:02:54:d4:d9:c3:92:
82:41:1a:d5:df:28:eb:29:50:74:0f:a1:83:ae:3b:
69:06:ff:fa:be:2d:b7:57:1a:bb:e7:d6:82:7e:b4:
b0:a7:ef:87:d4:ae:f4:4e:04:17:be:cd:f7:ab:30:
35:f6:bf:e7:2d:8b:9b:90:e1:e3:58:32:7d:68:ce:
12:11:9a:10:fd:be:5a:eb:5c:d5:45:2d:01:79:be:
85:ee:10:88:64:13:8c:c0:19:79:d8:b8:96:b6:90:
01:27:2d:bd:ae:9f:8a:a6:ea:e8:ad:c1:08:42:6c:
fc:62:25:d3:91:2c:79:11:68:6e:e1:5a:45:f4:d6:
69:16:5e:e4:0f:7b:85:5d:04:6c:10:74:52:aa:75:
44:b5:5d:b8:af:4a:fa:08:68:2c:c9:3d:97:02:20:
d1:40:6f:7d:98:0d:7a:54:22:be:81:bb:d9:18:62:
9a:5e:36:9e:33:02:9a:9e:fb:0b:d0:05:99:3f:de:
2b:80:75:fb:90:dd:b5:b2:3f:ab:aa:36:8b:1e:46:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:00:A9:9F:F3:BE:C7:37:E2:B0:DF:F3:81:B6:F2:28:4D:86:29:5E
X509v3 Authority Key Identifier:
keyid:18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:eb:f1:8e:d3:ea:b5:b3:46:da:11:b0:35:4e:f1:c1:0f:0b:
4f:5d:67:49:f7:ba:50:df:18:96:d2:d7:e0:3c:40:55:73:ac:
5a:2c:66:e2:a8:27:9b:bb:2a:00:87:c3:07:76:29:75:23:6f:
ba:79:56:df:39:5f:e3:4f:e6:cd:a7:d7:6f:28:f1:83:93:0e:
1f:96:ff:7b:c5:11:07:a5:79:07:7b:9f:36:e7:04:2c:4a:cc:
59:d0:33:fc:ba:8f:f2:63:34:02:40:34:a8:27:2c:7e:ef:14:
0d:ff:9d:56:ba:08:45:aa:f1:6e:46:7c:b8:1e:f7:8f:8d:d5:
a0:13:e0:3a:9c:23:f3:d1:78:13:fc:65:62:e3:a0:b8:3b:bf:
36:2c:b8:12:81:d0:5d:ce:eb:fd:52:cf:b8:e2:9b:d1:b7:d4:
fb:9f:14:85:f0:b1:73:ac:00:21:24:be:43:f6:39:c7:bd:92:
1f:3f:ea:2b:2a:96:ac:95:21:c8:49:0e:e2:b6:6c:c9:28:21:
f7:5f:a5:28:46:1b:8e:9f:96:fa:88:00:c0:fe:04:6c:7a:4e:
0e:ec:04:2f:dc:85:6b:71:31:aa:65:98:61:73:18:81:c7:0c:
e3:9a:87:32:1b:62:b5:26:da:3b:21:82:08:c5:1e:2b:dd:6c:
be:c8:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:21:52 2026 by rpki-client