Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
File: GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft (raw, json)
Hash identifier: OoCIwLP4u+r+vzbgdIJTI6Xqi+SAn4DTXW37Vt9+7NI=
Subject key identifier: 4B:68:D3:C6:BC:51:E9:B2:F6:92:80:DD:BD:EF:67:71:78:61:D5:40
Authority key identifier: 1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
Certificate issuer: /CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Certificate serial: 019EC06D695FF6EE4FA5B21A0EDC35F040FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
Manifest number: 42
Signing time: Sat 13 Jun 2026 10:00:56 +0000
Manifest this update: Sat 13 Jun 2026 10:00:56 +0000
Manifest next update: Sun 14 Jun 2026 10:00:56 +0000
Files and hashes: 1: GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl (hash: cxnGZipZ8v5H+GNc/c6SYSMWlWTsN8a/5qaeXWFhRs8=)
2: zr6qOC2iZhYMAkfVEjFaWAW3Gdg.roa (hash: rfGt0EQo3cdc8IHh8jz9o2EgRv1qNBw2XAoGV+8jWOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:69:5f:f6:ee:4f:a5:b2:1a:0e:dc:35:f0:40:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a33a96a2773e04ec287e12367489824ae56f7b9
Validity
Not Before: Jun 13 10:00:56 2026 GMT
Not After : Jun 14 10:00:56 2026 GMT
Subject: CN=4b68d3c6bc51e9b2f69280ddbdef67717861d540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:14:95:66:81:52:58:f0:50:50:d1:84:a6:c7:
ea:18:61:d8:3e:4f:1a:ce:ce:35:81:44:a6:59:3a:
40:01:2f:93:5c:c2:ab:8b:f4:a2:12:bc:35:ad:21:
b9:59:77:db:f8:74:4a:05:54:0a:d1:c7:4a:64:63:
fe:3d:93:a3:32:5a:8f:c0:b7:47:4b:85:a3:90:49:
03:11:ed:a0:86:32:15:97:a7:64:f0:82:86:55:28:
57:cc:1c:7f:35:85:99:f0:53:a1:39:6a:85:8f:35:
71:39:ed:7d:87:2c:b2:35:10:f3:c4:88:99:05:db:
3a:f0:a3:2a:fb:b4:a1:3e:71:eb:97:ed:f1:91:bc:
7e:9f:65:82:47:8b:02:53:2a:43:f1:dc:da:e6:26:
74:4a:cf:38:3a:1f:cf:8e:f6:2a:e5:dc:ae:19:68:
d6:25:19:5b:f4:f9:49:c6:9f:63:be:30:6b:2f:73:
6d:a8:20:6b:b7:2f:23:da:08:4d:e4:38:e8:43:06:
82:9b:72:a5:53:4a:11:7d:22:1b:50:e5:c8:2c:69:
a7:ec:32:2a:16:73:55:ff:cf:bb:1a:bf:c4:61:d0:
cc:5e:48:f6:0f:73:de:45:30:c8:f4:a8:37:c4:c0:
53:c1:d0:e7:05:43:cf:8c:83:e5:80:ae:0e:ab:bd:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:68:D3:C6:BC:51:E9:B2:F6:92:80:DD:BD:EF:67:71:78:61:D5:40
X509v3 Authority Key Identifier:
keyid:1A:33:A9:6A:27:73:E0:4E:C2:87:E1:23:67:48:98:24:AE:56:F7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjOpaidz4E7Ch-EjZ0iYJK5W97k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ca51df-9582-424f-8032-7e5406f5ed35/1/GjOpaidz4E7Ch-EjZ0iYJK5W97k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:00:b1:3d:fc:f4:86:e0:9a:11:2d:da:c1:a2:88:98:b0:86:
1c:d7:89:00:50:7d:da:22:9f:b0:f5:4d:e9:f6:07:a9:23:c1:
ee:82:da:3f:77:83:f4:7b:39:8e:9a:09:46:73:27:52:fc:69:
51:aa:a1:a2:69:f8:63:60:42:66:0f:43:92:be:e3:b6:64:a7:
92:0d:e3:fb:98:20:a2:dd:2a:1a:7e:28:87:32:30:f9:58:63:
b6:c3:bd:ba:11:22:cc:6a:60:60:b6:ad:7e:eb:d0:69:6e:f1:
60:dd:47:68:81:15:94:d2:d9:3a:cf:2c:4e:19:e3:4a:5d:10:
67:06:e0:8c:c8:e5:6a:dc:3f:42:b4:69:ac:4f:b9:b8:7c:1c:
6f:29:c7:fe:ff:d4:29:12:e2:11:63:70:90:86:1a:b4:a6:be:
be:d9:0d:dc:e8:ca:a7:24:68:65:f2:fd:72:c8:96:ca:75:02:
db:3d:9a:7e:34:90:63:ce:b2:09:53:bc:ac:83:73:26:0d:60:
cd:4b:3e:4b:b9:e9:6f:d0:d7:c3:ca:2e:f8:17:57:a4:13:77:
1c:fa:40:68:2a:1c:a1:d9:96:a6:2b:60:dd:8c:56:76:44:99:
39:f2:a2:fb:07:31:70:9b:aa:f2:c7:a5:1f:b4:18:25:9f:49:
49:3a:a0:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbWlf9u5PpbIaDtw18ED+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMzNhOTZhMjc3M2UwNGVjMjg3ZTEyMzY3NDg5ODI0YWU1
NmY3YjkwHhcNMjYwNjEzMTAwMDU2WhcNMjYwNjE0MTAwMDU2WjAzMTEwLwYDVQQD
Eyg0YjY4ZDNjNmJjNTFlOWIyZjY5MjgwZGRiZGVmNjc3MTc4NjFkNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BSVZoFSWPBQUNGEpsfqGGHYPk8a
zs41gUSmWTpAAS+TXMKri/SiErw1rSG5WXfb+HRKBVQK0cdKZGP+PZOjMlqPwLdH
S4WjkEkDEe2ghjIVl6dk8IKGVShXzBx/NYWZ8FOhOWqFjzVxOe19hyyyNRDzxIiZ
Bds68KMq+7ShPnHrl+3xkbx+n2WCR4sCUypD8dza5iZ0Ss84Oh/PjvYq5dyuGWjW
JRlb9PlJxp9jvjBrL3NtqCBrty8j2ghN5DjoQwaCm3KlU0oRfSIbUOXILGmn7DIq
FnNV/8+7Gr/EYdDMXkj2D3PeRTDI9Kg3xMBTwdDnBUPPjIPlgK4Oq72OoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEto08a8Uemy9pKA3b3vZ3F4YdVAMB8GA1UdIwQY
MBaAFBozqWonc+BOwofhI2dImCSuVve5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2pPcGFpZHo0RTdDaC1FalowaVlKSzVXOTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jYTUxZGYtOTU4Mi00MjRmLTgwMzIt
N2U1NDA2ZjVlZDM1LzEvR2pPcGFpZHo0RTdDaC1FalowaVlKSzVXOTdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9jYTUxZGYtOTU4Mi00MjRmLTgwMzItN2U1NDA2ZjVlZDM1
LzEvR2pPcGFpZHo0RTdDaC1FalowaVlKSzVXOTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFACxPfz0
huCaES3awaKImLCGHNeJAFB92iKfsPVN6fYHqSPB7oLaP3eD9Hs5jpoJRnMnUvxp
Uaqhomn4Y2BCZg9Dkr7jtmSnkg3j+5ggot0qGn4ohzIw+VhjtsO9uhEizGpgYLat
fuvQaW7xYN1HaIEVlNLZOs8sThnjSl0QZwbgjMjlatw/QrRprE+5uHwcbynH/v/U
KRLiEWNwkIYatKa+vtkN3OjKpyRoZfL9csiWynUC2z2afjSQY86yCVO8rINzJg1g
zUs+S7npb9DXw8ou+BdXpBN3HPpAaCocodmWpitg3YxWdkSZOfKi+wcxcJuq8sel
H7QYJZ9JSTqgaA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:29:44 2026 by rpki-client