Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: XmiGvmRM0WLpGJXw7SLtbOIf2UHdpwPaxwSaMC3EC/w=
Subject key identifier: 96:65:C0:0D:18:3B:08:58:51:C0:2B:5E:E0:A5:6C:58:5C:B8:E3:AE
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 019D97E205D1F5A35463C5F1F8FE2117DDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 11DA
Signing time: Thu 16 Apr 2026 20:01:05 +0000
Manifest this update: Thu 16 Apr 2026 20:01:05 +0000
Manifest next update: Fri 17 Apr 2026 20:01:05 +0000
Files and hashes: 1: UkNOO2CDkXM7dtcGCawwwbxPN_g.roa (hash: RvHxO6CCiZRu8PB12w6pIAfjfO2ckn1GqUWkiwPCsHk=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: HXgordl+ygM+7gvai/IjQqlPHTAXgx+Ik8lTJW0xVlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:05:d1:f5:a3:54:63:c5:f1:f8:fe:21:17:dd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Apr 16 20:01:05 2026 GMT
Not After : Apr 17 20:01:05 2026 GMT
Subject: CN=9665c00d183b085851c02b5ee0a56c585cb8e3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f7:9a:2a:8a:36:1f:1a:fb:1b:41:f1:ad:54:
7b:e1:f5:88:98:b2:3f:79:7c:af:54:e8:3b:8b:d2:
54:ab:a7:a7:cc:c7:fa:d9:72:19:a9:9d:e3:44:f0:
e6:85:f5:01:0f:73:b1:61:9e:59:66:56:8c:f5:fa:
c3:27:54:8a:d4:f3:77:e1:6f:0f:dc:69:62:43:a0:
6e:3b:62:f8:c8:87:b3:3a:88:6a:f0:3e:59:9c:ea:
79:f0:02:c9:44:a0:cb:f7:13:ba:7b:82:f1:00:04:
a2:a1:d5:c8:58:ec:17:b2:00:50:4d:17:bd:ad:25:
24:86:30:ee:a8:7f:7c:6f:82:18:8a:b3:8d:e0:40:
a0:56:93:9d:dc:7e:b4:63:87:33:ba:21:9d:8b:42:
6e:73:e0:51:83:f9:89:24:42:13:f1:1a:23:eb:9e:
06:6b:e2:3d:60:95:a5:9f:a9:d4:36:bc:de:f1:d3:
bd:8c:c0:b2:ae:2d:4e:d7:73:21:6f:3e:8c:c3:73:
be:08:d7:14:91:f5:33:de:2b:49:2d:6b:a5:43:db:
a1:53:a0:6c:4b:2f:fb:62:09:27:cf:7a:c7:c3:73:
33:e2:fa:8a:cf:5b:82:d7:9c:53:01:26:b4:3c:1d:
ca:1c:e0:4e:86:cd:5f:f5:77:8a:02:f5:72:64:cd:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:65:C0:0D:18:3B:08:58:51:C0:2B:5E:E0:A5:6C:58:5C:B8:E3:AE
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c8:6a:08:42:90:7b:8d:2c:6a:2e:b3:88:80:49:ad:8c:6f:
41:5e:d1:1f:36:8f:5e:d9:02:76:7a:8f:55:68:f8:07:0a:3e:
67:ae:97:2e:5f:98:41:31:c6:9e:17:67:01:c3:76:a4:96:c3:
5b:ae:7a:fe:72:43:a2:0e:a6:19:5f:e1:bd:a0:e0:61:24:58:
81:9d:1c:c7:52:a8:7a:0e:f9:45:9b:af:6c:8a:51:d3:ee:3f:
3b:bb:99:d9:28:17:22:87:b8:39:b0:e9:f2:11:88:f8:8a:14:
18:3b:34:a0:a8:a4:15:66:84:cd:3d:a4:c0:88:e9:7f:e3:6c:
bf:3c:27:58:9e:8a:83:00:f7:14:87:97:0f:f3:d1:ff:70:34:
08:a3:1f:36:cd:b4:c5:43:f9:2b:c1:48:d1:98:db:03:b3:c0:
c3:18:84:6b:1a:46:9e:6a:c5:6d:94:30:ec:04:e4:5f:fa:62:
79:83:7b:0d:ad:11:f2:1b:c3:0b:47:9b:1d:6e:e1:d7:84:71:
13:67:ad:80:43:04:89:f3:48:cc:d8:87:b7:a6:49:bb:bc:2f:
ce:2b:97:94:93:73:1f:db:36:56:d5:f5:24:12:51:76:7a:38:
03:58:d0:96:86:5f:48:89:e1:31:2e:c4:cd:2a:90:d4:f8:bc:
3e:f8:88:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:48 2026 by rpki-client