
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File: GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier: QEAbeAe9pDRUQf4CQS4RnaThN44Z3f9VhEAdIqOJ5YY=
Subject key identifier: CF:D9:F6:88:36:31:70:17:D9:4A:BA:33:52:4C:8E:92:6D:22:29:BD
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer: /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial: 01A0336E4A0B9B36DE98A8C89A7484664AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number: 0D3F
Signing time: Mon 24 Aug 2026 11:01:00 +0000
Manifest this update: Mon 24 Aug 2026 11:01:00 +0000
Manifest next update: Tue 25 Aug 2026 11:01:00 +0000
Files and hashes: 1: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: wyrKQS9Z37gcw0rPV/7B+wZ0ZbPSr4HB6dolZDN7aXI=)
2: HMpfD8yWZ0j1ouvG1EDM2ZSSE8c.roa (hash: SGGQvvIcUh55SsmT9zcE0INbCSKqRJfWxR5dRHBgMA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:6e:4a:0b:9b:36:de:98:a8:c8:9a:74:84:66:4a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
Validity
Not Before: Aug 24 11:01:00 2026 GMT
Not After : Aug 25 11:01:00 2026 GMT
Subject: CN=cfd9f68836317017d94aba33524c8e926d2229bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:b3:c9:1c:39:a6:bd:80:64:27:e1:15:be:
1d:8b:89:1f:1c:94:9c:65:75:02:33:a6:04:62:e8:
83:3e:c6:bb:0e:08:1e:2a:1f:c4:c9:5d:e3:78:0f:
97:f8:42:da:8a:78:e1:bf:fe:b2:47:7f:f2:1b:ec:
64:6d:a9:20:ed:44:75:8a:e2:c2:08:32:d8:70:39:
23:bf:09:e9:b6:40:8e:ed:f2:44:2d:50:2e:ad:81:
1e:39:4a:2a:6f:93:d7:e6:53:85:5c:95:e9:c5:ae:
23:85:20:6b:99:13:93:0a:c2:9a:3c:95:11:bd:bf:
03:9e:7e:85:96:48:f6:24:88:98:9a:ba:cc:49:66:
3c:bc:d7:cd:30:b0:89:dc:a3:47:7c:b4:29:0d:e0:
22:af:71:be:f1:8b:f6:e9:74:4e:d7:b2:3b:05:b4:
a5:cf:97:e9:d7:c3:64:ba:75:10:d2:84:50:19:23:
1d:71:b5:53:32:e2:12:2f:1b:e7:03:52:38:4a:e6:
2f:c1:6b:30:52:2d:5c:a8:8c:8e:05:24:dc:53:04:
16:ac:d5:35:27:26:41:fb:6f:e8:79:b5:8e:16:df:
59:b6:37:b6:9d:ad:78:bc:75:86:8e:46:98:6d:82:
4e:fc:9b:c7:2b:44:58:08:e2:c2:50:a9:cd:90:e1:
79:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D9:F6:88:36:31:70:17:D9:4A:BA:33:52:4C:8E:92:6D:22:29:BD
X509v3 Authority Key Identifier:
keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b7:a4:44:30:83:65:7b:8e:a7:81:46:0e:75:75:13:20:85:
8f:6f:8c:3e:b4:f6:63:39:f6:db:e1:68:1b:81:56:2c:55:f2:
7b:50:b1:a5:d2:a8:74:0f:85:83:03:3d:bc:c9:23:f3:d7:98:
25:4f:4e:9b:93:5f:a6:94:77:3c:ab:94:cd:d7:f1:74:4a:ea:
a0:97:d0:0c:ea:ee:5a:62:7b:4a:b7:73:25:e3:bf:98:fb:0f:
36:63:1d:5f:b3:0f:7e:a0:72:ad:c1:68:7f:0d:2d:1e:a0:47:
8a:d9:88:f0:a6:a4:fb:18:19:43:fc:37:fb:70:31:a0:06:c1:
42:3e:93:1b:74:e0:03:6c:03:47:42:3a:70:3b:7f:69:1f:b3:
07:55:a9:26:f8:63:57:66:3c:91:2d:18:e2:6e:9e:9f:02:3a:
b9:8c:f5:96:ed:4a:67:77:07:47:da:21:05:40:f8:be:c8:fa:
3a:74:a3:e9:d2:00:d0:48:bb:1b:79:7e:97:cb:2b:65:1d:21:
a7:d7:75:45:fd:ba:65:0d:b2:ab:72:58:15:ff:7c:6c:84:d7:
42:f6:fd:f3:04:c7:7b:95:90:52:7e:c4:a4:ff:5f:53:1d:b9:
41:23:e1:36:8f:78:1e:a6:80:13:73:9b:62:94:17:99:15:44:
ae:55:cd:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAzbkoLmzbemKjImnSEZkroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NjBlMzZlMjViMWRiYTExNzgwNzVjODAzYzI5YTA0NGNl
Y2ZkZTEwHhcNMjYwODI0MTEwMTAwWhcNMjYwODI1MTEwMTAwWjAzMTEwLwYDVQQD
EyhjZmQ5ZjY4ODM2MzE3MDE3ZDk0YWJhMzM1MjRjOGU5MjZkMjIyOWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7uzyRw5pr2AZCfhFb4di4kfHJSc
ZXUCM6YEYuiDPsa7DggeKh/EyV3jeA+X+ELainjhv/6yR3/yG+xkbakg7UR1iuLC
CDLYcDkjvwnptkCO7fJELVAurYEeOUoqb5PX5lOFXJXpxa4jhSBrmROTCsKaPJUR
vb8Dnn6Flkj2JIiYmrrMSWY8vNfNMLCJ3KNHfLQpDeAir3G+8Yv26XRO17I7BbSl
z5fp18NkunUQ0oRQGSMdcbVTMuISLxvnA1I4SuYvwWswUi1cqIyOBSTcUwQWrNU1
JyZB+2/oebWOFt9Ztje2na14vHWGjkaYbYJO/JvHK0RYCOLCUKnNkOF5mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/Z9og2MXAX2Uq6M1JMjpJtIim9MB8GA1UdIwQY
MBaAFBhg424lsduhF4B1yAPCmgRM7P3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wNTY2YmUtZjgzMi00ZTc0LTg5NjYt
ZjI2YWRmZjQwY2MxLzEvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wNTY2YmUtZjgzMi00ZTc0LTg5NjYtZjI2YWRmZjQwY2Mx
LzEvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILekRDCD
ZXuOp4FGDnV1EyCFj2+MPrT2Yzn22+FoG4FWLFXye1CxpdKodA+FgwM9vMkj89eY
JU9Om5NfppR3PKuUzdfxdErqoJfQDOruWmJ7SrdzJeO/mPsPNmMdX7MPfqByrcFo
fw0tHqBHitmI8Kak+xgZQ/w3+3AxoAbBQj6TG3TgA2wDR0I6cDt/aR+zB1WpJvhj
V2Y8kS0Y4m6enwI6uYz1lu1KZ3cHR9ohBUD4vsj6OnSj6dIA0Ei7G3l+l8srZR0h
p9d1Rf26ZQ2yq3JYFf98bITXQvb98wTHe5WQUn7EpP9fUx25QSPhNo94HqaAE3Ob
YpQXmRVErlXNfg==
-----END CERTIFICATE-----
Generated at Mon Aug 24 20:08:03 2026 by rpki-client