Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: e5HbmKo1VWyoOUy1vKA2bYO0xCdfWo/44lZJbDdIVMo=
Subject key identifier: 8D:BD:1A:44:10:32:90:BA:66:77:F3:04:A7:78:D5:AF:B8:AB:05:47
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 019CAA582F6ADD4B88F6F884899632B534F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 115F
Signing time: Sun 01 Mar 2026 17:00:31 +0000
Manifest this update: Sun 01 Mar 2026 17:00:31 +0000
Manifest next update: Mon 02 Mar 2026 17:00:31 +0000
Files and hashes: 1: UkNOO2CDkXM7dtcGCawwwbxPN_g.roa (hash: RvHxO6CCiZRu8PB12w6pIAfjfO2ckn1GqUWkiwPCsHk=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: grsbazcUFGdIRprDgjHbeDE6ivGTMTN4gTAwvrDjPhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2f:6a:dd:4b:88:f6:f8:84:89:96:32:b5:34:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Mar 1 17:00:31 2026 GMT
Not After : Mar 2 17:00:31 2026 GMT
Subject: CN=8dbd1a44103290ba6677f304a778d5afb8ab0547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:67:1b:8e:73:41:f4:ea:8d:4f:41:37:68:
dd:bb:26:52:b3:09:72:e9:4e:48:3e:e7:93:f6:fb:
73:97:bd:a3:7b:4f:c6:df:5e:78:18:ee:e0:e9:1e:
db:ed:92:46:7d:20:ce:67:ef:be:ec:ad:14:01:2a:
4d:db:2d:3d:0d:66:ea:94:e3:b0:87:bb:c4:76:5a:
6c:4c:1e:5e:58:e4:cb:d9:82:46:ea:1f:03:ca:87:
1d:5c:71:f1:ad:87:8e:7d:1a:1f:75:cf:0e:15:57:
06:7c:a1:ac:41:e4:9e:c4:30:24:72:3f:69:45:01:
be:ef:37:17:91:68:96:58:99:8a:ed:4d:5f:9e:91:
e6:6b:8e:0d:ad:b6:dd:80:74:4f:b0:71:5c:16:2a:
b3:1d:c7:04:01:af:81:8a:a7:f2:dc:10:80:fb:29:
94:e1:ff:81:2a:b2:52:80:43:71:74:be:ac:33:7a:
1c:82:66:ed:4a:1b:e0:9b:ef:f6:1b:d3:c6:88:f2:
2a:be:72:f8:a5:0b:67:59:ee:7f:48:8e:16:8a:57:
c2:56:f7:e0:4d:86:35:74:d2:dc:06:89:14:7c:f7:
8a:cd:25:c2:52:68:26:c7:02:54:e5:1d:e1:12:e7:
c4:ab:80:e9:2b:a8:5d:20:7c:14:fb:b5:c6:2b:e1:
64:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:1A:44:10:32:90:BA:66:77:F3:04:A7:78:D5:AF:B8:AB:05:47
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:26:3c:0a:a7:66:dd:92:92:f6:7e:d8:ff:46:c1:d0:72:89:
fe:80:48:8f:e2:0f:d6:5b:57:03:49:26:38:9e:42:37:64:4a:
6a:8a:cb:cd:43:8d:75:96:a5:00:2b:24:21:e6:d6:91:c3:54:
8b:92:04:d4:65:34:3f:59:15:af:83:a6:ca:9e:7a:a5:75:90:
9c:2a:e3:30:49:d8:21:82:02:d5:13:98:20:2a:9a:7b:28:dc:
40:87:88:e7:af:81:8a:f0:e0:06:1d:e6:26:33:f3:d5:9d:06:
af:c0:2b:86:fd:4d:fe:31:40:28:bf:18:8e:f8:a8:23:39:dc:
a6:65:c5:af:24:aa:c7:3e:34:e3:0f:38:38:6e:6e:e8:be:69:
df:58:b4:4b:cc:0b:fd:b8:b6:8f:cb:a5:cc:5b:1c:32:34:7a:
54:00:c7:ed:c8:e0:fb:20:da:2f:da:60:0b:64:23:53:32:0c:
8f:ea:53:95:4f:2c:b1:2d:db:f7:65:bd:5f:68:38:54:ac:20:
4a:35:47:82:8b:a4:45:5f:e9:44:9d:0d:d3:ed:cc:91:f0:a8:
2a:d7:e3:ef:86:cb:71:14:56:3b:a5:3e:73:69:00:77:70:ce:
be:f3:3c:ac:30:c5:c1:44:58:1c:f8:41:db:78:2e:48:66:f2:
4c:f5:f0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:14 2026 by rpki-client