Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json)
Hash identifier: bEjmWhiQGPb3vv8cvPqrzR2EFLBckW3RIqMPgg2zBa4=
Subject key identifier: 0A:10:E4:7F:44:D7:FF:B7:49:86:EE:8B:E2:B1:75:DD:91:E3:00:FC
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial: 019CAB33F6DB2C22CDC28AAC1452753ECF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
Manifest number: 14B9
Signing time: Sun 01 Mar 2026 21:00:35 +0000
Manifest this update: Sun 01 Mar 2026 21:00:35 +0000
Manifest next update: Mon 02 Mar 2026 21:00:35 +0000
Files and hashes: 1: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: MpHoTIpH4gUtl7sMhYE4QW6YIajtPHeahF2nqu3l6lk=)
2: YWMNPu88xJNnGxNhUv0cCGYnn2o.roa (hash: tf2qYO515DuVuSA7ONMHLsp2LffeXtHsi7dw8jr5sXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f6:db:2c:22:cd:c2:8a:ac:14:52:75:3e:cf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
Validity
Not Before: Mar 1 21:00:35 2026 GMT
Not After : Mar 2 21:00:35 2026 GMT
Subject: CN=0a10e47f44d7ffb74986ee8be2b175dd91e300fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:e7:d0:45:66:d5:b7:d6:0b:de:87:81:84:
bd:c1:72:97:68:8e:d0:84:37:ab:8a:43:b7:7a:ca:
0e:10:04:e6:0d:13:1f:a5:5c:84:a8:98:b5:ce:1a:
96:0c:c3:00:11:8c:45:2a:7e:f1:69:e7:91:79:90:
b8:ba:91:27:71:e3:da:5f:8b:3d:1f:5a:29:77:29:
82:da:29:d0:5e:7b:47:fd:d1:ae:6d:e8:ae:f7:db:
6c:57:18:ae:86:a9:5e:e8:a0:30:88:86:26:c7:1c:
24:0c:01:b1:3a:b5:a0:8a:ab:af:a5:3e:90:93:63:
3e:a3:50:06:a1:37:e5:7b:a6:7b:10:b0:1f:7f:9b:
16:97:a6:8d:5a:1f:c7:87:6b:2f:ab:86:6e:b2:13:
ab:78:aa:b9:ac:dd:d9:66:9e:78:3b:27:e8:05:5a:
d5:59:60:43:d3:41:aa:ca:e4:c6:6d:08:13:26:c2:
76:9c:6e:70:6d:98:f9:40:bc:7c:7c:f1:63:35:f5:
f7:1e:cd:4d:4d:20:73:e2:e1:99:25:d2:25:95:88:
dd:c5:45:bc:fa:50:e2:ad:d4:88:ed:4e:2f:be:3f:
63:64:f2:b7:72:a0:48:dd:3f:63:b7:1e:2a:37:c1:
e7:7a:20:d4:f7:2f:6d:9b:f3:45:4b:26:5e:45:51:
80:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:10:E4:7F:44:D7:FF:B7:49:86:EE:8B:E2:B1:75:DD:91:E3:00:FC
X509v3 Authority Key Identifier:
keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f3:16:62:4d:cf:11:bf:2e:42:f2:2f:b5:ce:3f:3c:3e:f6:
bc:24:ba:14:65:dc:5f:27:5b:17:5a:e4:31:3b:05:3f:93:a8:
3e:7e:4d:35:82:92:40:81:8b:3b:18:fe:29:bb:47:20:7d:0a:
75:76:4d:de:f8:80:13:af:cf:fd:9d:df:60:10:d5:70:6e:b3:
15:5e:67:2b:6c:7f:28:b4:ec:22:10:1b:2c:1a:53:81:c9:d8:
37:31:11:bb:bd:11:2e:68:ce:9d:53:1b:d9:71:f0:b3:32:f5:
96:93:cb:8d:85:c4:e4:a4:15:49:18:c9:e5:0c:f1:db:c2:48:
c6:cc:40:c6:9c:8b:92:79:e9:02:06:47:e7:72:fe:5a:49:31:
de:fd:8b:1d:55:11:e5:8b:77:ed:3f:85:a6:31:e9:6a:bf:20:
72:a9:9a:8c:01:60:00:06:ba:69:51:49:41:af:31:4d:be:fa:
79:7b:72:25:f9:27:05:29:57:43:82:5a:91:b1:bc:99:e1:ee:
ab:60:10:ba:c2:6e:ea:27:76:d6:b7:13:79:7e:4b:42:6d:d8:
d3:04:ce:9d:e4:45:7d:a1:75:fd:72:c7:8d:e1:81:39:88:6b:
82:fb:42:a9:30:47:b0:cc:04:2b:ee:00:00:d8:14:9a:66:19:
a9:8d:d0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:30 2026 by rpki-client