Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/225632-d518-4bcb-8787-0f13e959771d/1/GDnWP8Sn1dRJZNu2t6wpgDq4vMA.mft
File: GDnWP8Sn1dRJZNu2t6wpgDq4vMA.mft (raw, json)
Hash identifier: vqOqwvjcUTNUBOLIriH1+CmgQD3DLsTmX3vcSakoHgU=
Subject key identifier: 75:FC:51:2F:CB:71:8D:DD:4A:59:48:22:04:A9:09:26:87:24:19:A3
Authority key identifier: 18:39:D6:3F:C4:A7:D5:D4:49:64:DB:B6:B7:AC:29:80:3A:B8:BC:C0
Certificate issuer: /CN=1839d63fc4a7d5d44964dbb6b7ac29803ab8bcc0
Certificate serial: 01A1BCF69A782E1F5D91499AC08E4CFD144C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDnWP8Sn1dRJZNu2t6wpgDq4vMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/225632-d518-4bcb-8787-0f13e959771d/1/GDnWP8Sn1dRJZNu2t6wpgDq4vMA.mft
Manifest number: 2F
Signing time: Sun 08 Nov 2026 21:00:40 +0000
Manifest this update: Sun 08 Nov 2026 21:00:40 +0000
Manifest next update: Mon 09 Nov 2026 21:00:40 +0000
Files and hashes: 1: GDnWP8Sn1dRJZNu2t6wpgDq4vMA.crl (hash: 1WwDu6uBgUHuZ+GNIgWUifqGkXEy8t4Kd5mrsUM2oHs=)
2: XZu4f2kAiWF4yq_-rijjBHv6RJw.roa (hash: Wwnc+sDcbLbzVY2LNb6bkCgdmoXoERrtjjZ+Z1NEUOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/225632-d518-4bcb-8787-0f13e959771d/1/GDnWP8Sn1dRJZNu2t6wpgDq4vMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/225632-d518-4bcb-8787-0f13e959771d/1/GDnWP8Sn1dRJZNu2t6wpgDq4vMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDnWP8Sn1dRJZNu2t6wpgDq4vMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bc:f6:9a:78:2e:1f:5d:91:49:9a:c0:8e:4c:fd:14:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1839d63fc4a7d5d44964dbb6b7ac29803ab8bcc0
Validity
Not Before: Nov 8 21:00:40 2026 GMT
Not After : Nov 9 21:00:40 2026 GMT
Subject: CN=75fc512fcb718ddd4a59482204a90926872419a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:9e:b2:8b:fd:bd:67:88:e4:01:04:e8:20:
3b:4b:4b:1a:3c:91:c8:60:a3:31:18:b4:0f:a7:08:
28:03:86:20:8f:e5:c4:8f:98:37:a3:d2:ee:97:7d:
bc:44:5c:9b:ca:03:07:3b:aa:a5:d6:44:1f:49:00:
26:d8:a5:75:e2:73:e3:77:ac:a3:05:d5:fe:cf:cd:
54:3a:7f:fb:73:86:98:d0:81:d0:5f:64:10:67:90:
a0:22:55:5b:df:e9:47:c8:bf:5a:6e:90:b6:78:26:
60:82:73:79:ba:a6:12:e9:61:e1:9a:fa:06:94:0e:
39:aa:c8:d3:a9:aa:ff:f6:f1:09:27:6f:00:f1:82:
b7:c9:e8:be:fc:f0:8c:b8:97:0b:14:56:80:ea:57:
3b:d4:60:da:54:b8:7c:7e:26:07:9f:ff:b9:03:a9:
0a:a8:70:57:70:bd:09:c4:d2:e0:04:7c:3e:d9:9d:
ad:79:2a:6d:7a:7d:23:b4:14:68:e5:bf:64:53:ff:
1d:d2:c9:97:dc:fb:bc:e3:65:02:b2:14:56:b1:c7:
84:14:51:d0:dc:76:20:60:2f:c8:98:4c:92:26:71:
db:5f:24:fc:fa:82:09:45:7a:d1:61:5f:86:a2:1c:
fc:d0:25:30:3b:d7:b6:01:a3:03:be:af:ba:6f:f9:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FC:51:2F:CB:71:8D:DD:4A:59:48:22:04:A9:09:26:87:24:19:A3
X509v3 Authority Key Identifier:
keyid:18:39:D6:3F:C4:A7:D5:D4:49:64:DB:B6:B7:AC:29:80:3A:B8:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDnWP8Sn1dRJZNu2t6wpgDq4vMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/225632-d518-4bcb-8787-0f13e959771d/1/GDnWP8Sn1dRJZNu2t6wpgDq4vMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/225632-d518-4bcb-8787-0f13e959771d/1/GDnWP8Sn1dRJZNu2t6wpgDq4vMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:8d:ac:e0:8c:55:06:2d:52:77:0c:aa:a8:c3:11:68:f7:fa:
12:45:a2:2b:65:fa:7c:89:60:d0:a0:e0:e2:eb:c8:18:e9:6f:
8d:d9:84:88:39:36:43:c3:b8:74:0b:64:32:01:fa:a7:13:85:
3a:1a:cf:7b:31:fc:e3:e6:94:05:07:c4:16:f0:9a:b7:93:a9:
42:a3:51:e4:d9:11:5d:22:84:4c:20:f9:08:c0:9e:a0:f6:fd:
67:f8:5e:c0:17:3a:22:c3:a6:d6:0b:54:f5:74:e8:dd:a4:4b:
18:30:61:85:0d:79:60:bd:e1:16:4d:00:a6:a1:46:33:f0:d2:
3a:cf:fc:b9:71:32:5c:57:59:3e:7d:ca:ed:4b:50:88:9c:c8:
60:86:8a:62:a6:e3:7a:84:6c:a4:c7:c0:31:c6:45:23:db:89:
93:94:9f:c3:94:7c:68:02:c0:46:c1:9e:91:1e:b6:5f:31:ee:
a6:93:2c:2e:33:b6:3b:c8:c4:07:96:0e:0f:6c:da:5a:d6:74:
72:5f:78:3f:34:f6:1b:12:3c:f3:42:94:8e:a0:8e:25:85:a3:
8a:2e:e3:ac:e5:d2:a4:63:ad:3c:54:bf:9d:9a:28:e2:14:cb:
ae:50:0f:64:dd:fb:f4:1a:37:41:3b:98:52:d5:70:b3:81:a9:
f7:d6:4f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 01:27:07 2026 by rpki-client