Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: S67H+zLO/34hLP/65CZwPD7y5HoImM5AUJu3TDYWlRc=
Subject key identifier: 55:DC:62:DC:09:F0:02:C7:2C:52:2B:C5:35:F1:57:DA:48:EF:DE:71
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 019D06D42BB053DB8F302EDDA0936694F2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 1809
Signing time: Thu 19 Mar 2026 16:01:01 +0000
Manifest this update: Thu 19 Mar 2026 16:01:01 +0000
Manifest next update: Fri 20 Mar 2026 16:01:01 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: Ty6yTXSaLkKS9abhvPTM8jBbIZZMT7MakGbQ9iQA0Ds=)
2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:d4:2b:b0:53:db:8f:30:2e:dd:a0:93:66:94:f2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Mar 19 16:01:01 2026 GMT
Not After : Mar 20 16:01:01 2026 GMT
Subject: CN=55dc62dc09f002c72c522bc535f157da48efde71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:8d:d7:e4:8c:0a:fd:5f:f1:d7:da:7e:47:
03:e3:f5:2d:c1:75:a1:bf:7a:7a:e4:72:49:11:1d:
58:d3:b6:35:21:6e:b9:85:5c:04:cd:52:10:e4:85:
20:b5:5f:0f:2d:12:90:f5:bd:b2:9c:8f:32:db:9b:
46:e0:fb:8d:bc:f4:a3:0d:c1:eb:6e:8f:b9:c9:29:
77:da:b6:3d:36:28:da:b1:4c:b7:f5:fe:fa:1a:e5:
2a:67:4f:36:92:c8:7e:62:c8:84:a8:58:ec:34:eb:
fa:4d:db:7e:5c:d2:99:13:cc:b6:2b:c7:c8:b7:6d:
3b:36:96:9f:bd:2e:aa:f3:5e:25:b0:f2:40:36:01:
fd:40:22:22:5b:c9:aa:39:0b:00:23:3b:80:d0:a5:
c7:32:57:fb:bf:17:bb:35:e4:19:2a:96:f4:3c:f8:
e2:4c:dc:d3:4d:d0:08:fe:01:29:32:36:68:36:32:
41:e4:17:39:18:2b:15:e6:c3:5d:d2:4b:bb:f9:a6:
d0:3b:be:be:c4:b0:21:97:c4:e2:b4:74:a6:e1:eb:
67:c4:7c:b4:3a:c4:7f:f7:0f:45:75:90:dc:0b:b5:
09:f0:59:5f:27:f2:27:3d:38:00:13:9f:16:7a:31:
06:5a:83:3c:ca:f7:dd:cc:7d:6f:ec:32:1d:fa:d2:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DC:62:DC:09:F0:02:C7:2C:52:2B:C5:35:F1:57:DA:48:EF:DE:71
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:4e:f1:c7:b6:87:3c:71:ce:52:96:f5:34:89:2c:80:39:70:
8c:1a:8f:e5:ba:07:bb:b7:15:c9:4c:28:b7:4e:e2:a4:b0:3b:
7a:28:84:48:5f:20:2e:0c:9e:58:f4:2e:cb:7a:de:81:3b:8b:
f7:95:bb:88:9c:48:00:75:71:81:dc:0a:3f:59:64:c4:79:9e:
82:63:0d:fc:2e:47:89:a1:b0:43:00:ef:bb:56:1d:42:e1:f3:
21:9a:89:e7:fc:4c:b5:67:f3:ad:86:81:35:40:26:d0:20:e2:
3c:fd:bb:17:4f:22:65:53:6a:5b:48:4a:a3:3a:09:73:07:de:
15:f6:d4:a4:df:8c:fe:5f:7d:80:ca:23:c6:08:0a:78:a1:fe:
79:45:1c:d8:9f:75:00:48:a8:cd:15:1d:69:76:25:ce:f8:9c:
70:2f:18:49:a9:20:d8:67:32:f6:a3:71:86:0e:04:ac:27:b6:
9d:74:e8:b6:bb:50:f1:ca:8a:72:57:93:5b:55:8d:2d:46:de:
a8:1b:d0:db:0c:2d:27:dc:a0:b2:59:7c:16:96:ce:a5:7f:4f:
ba:51:ca:e9:b4:94:5d:4a:f4:a8:4b:35:13:2d:70:bd:41:af:
17:c2:71:8f:a9:32:d2:ba:ee:0a:01:58:f5:03:f7:70:40:21:
9e:3a:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:30:23 2026 by rpki-client