Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: z5dXCN8N1gu84Iavwjbd1mR4oXrHn/DtGw1fFapZc18=
Subject key identifier: 98:49:46:2D:0B:95:61:3C:DF:0D:1B:C2:4A:EF:EA:E5:74:9F:AB:26
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 019D08C2FB6D0388A6172711A7CB19F6FE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 180A
Signing time: Fri 20 Mar 2026 01:01:28 +0000
Manifest this update: Fri 20 Mar 2026 01:01:28 +0000
Manifest next update: Sat 21 Mar 2026 01:01:28 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: im8euykVE8eg++ZbyiFOXa2fPaK/tzwMNW8qpo/i3Rc=)
2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:c2:fb:6d:03:88:a6:17:27:11:a7:cb:19:f6:fe:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Mar 20 01:01:28 2026 GMT
Not After : Mar 21 01:01:28 2026 GMT
Subject: CN=9849462d0b95613cdf0d1bc24aefeae5749fab26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:28:3c:6f:b7:e3:c8:2c:d6:a4:2a:de:09:
0b:98:60:33:ef:b6:19:fd:db:5b:8d:67:c6:4c:5b:
92:a1:7f:9c:26:cb:b3:88:5b:5c:8b:59:ae:3a:06:
bf:66:12:f7:1d:6e:f6:68:8c:5f:52:a7:cd:0e:11:
f4:e4:df:ef:08:29:9c:ff:ca:d5:d2:37:1e:e1:0e:
c4:c8:72:8d:6f:82:f3:03:10:55:83:53:34:68:b5:
f2:50:52:08:3f:5e:f1:97:eb:45:1c:09:49:1c:32:
2f:24:45:70:95:b8:03:f0:91:05:c9:5e:a0:97:cd:
06:b9:42:49:6f:76:55:b5:ac:6b:14:80:8e:aa:a3:
94:d0:3d:36:04:8a:72:6e:1c:9c:2b:e0:72:44:57:
d8:b7:ee:6b:32:36:19:66:22:d9:86:de:73:34:52:
6d:c2:34:4b:4b:cc:52:43:8e:cb:aa:16:c4:5f:41:
f0:66:53:b4:6e:16:cc:4b:c3:0e:65:e7:36:e2:51:
ee:37:31:7d:f9:e9:1f:ab:62:f5:38:70:32:ca:79:
e8:92:05:bc:d2:1c:4a:f5:c8:e5:12:f9:c7:e0:24:
10:9f:06:7a:b1:99:f2:f6:fb:4d:2b:8a:92:4d:f5:
ea:47:0b:ec:4e:59:93:b0:c9:e5:24:06:2b:aa:95:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:49:46:2D:0B:95:61:3C:DF:0D:1B:C2:4A:EF:EA:E5:74:9F:AB:26
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dd:6b:8d:11:6e:43:a7:66:d4:0d:6f:c7:4e:d1:12:1f:a1:
22:76:0e:1d:b0:53:70:3f:48:e9:4b:83:66:10:78:e0:b4:3a:
97:8a:53:a4:c4:ec:86:ad:cf:24:cf:69:d4:37:a8:24:55:35:
20:5d:db:f2:14:f6:8c:d7:bd:30:2c:13:24:04:54:59:7b:07:
1a:f8:db:e7:21:5c:17:d1:77:0c:41:07:b4:d1:28:55:8b:10:
de:f9:22:96:17:ab:88:3e:13:37:7f:c7:d5:20:bd:69:09:b3:
45:50:63:3c:7d:3f:ba:ad:a4:bf:43:8a:60:ab:6a:5a:3c:c6:
e2:f8:6e:34:ad:b9:00:d7:e8:85:02:d3:3b:80:ae:2d:9d:48:
8b:5c:82:05:0d:b3:d0:b1:b1:e0:e3:35:14:a7:b7:c2:12:45:
d9:06:76:7f:14:11:50:3b:83:8d:01:4e:4c:a4:a6:bd:51:4c:
a5:15:5c:1e:1b:fd:46:8d:d8:44:cc:12:97:e2:5f:f1:bc:1a:
7c:61:ff:d3:14:8a:78:c1:18:ce:2e:ae:05:d2:5a:31:d2:a8:
be:ee:ff:6d:bd:21:b4:f2:67:e7:4b:f7:bc:34:6b:1d:c8:9f:
7a:ad:bd:c2:cf:07:82:2c:2c:43:3e:b1:c0:ca:69:9a:42:d2:
b6:0b:1c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 04:08:21 2026 by rpki-client