Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json)
Hash identifier: WxHizZ8TQ92n+1QnQTI9Is9zVUaRgmbWFkgNyGfzBjM=
Subject key identifier: E7:7A:ED:D3:D6:4C:3A:FE:84:16:65:9D:9E:A1:60:30:B0:DF:5E:33
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial: 019DA453E8DA43597918FEB1FFD35076EADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
Manifest number: 153A
Signing time: Sun 19 Apr 2026 06:00:55 +0000
Manifest this update: Sun 19 Apr 2026 06:00:55 +0000
Manifest next update: Mon 20 Apr 2026 06:00:55 +0000
Files and hashes: 1: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: fmsW05j7nkHUo0YeYV5f71qqpXYk9T8+v9aZLjD1ds8=)
2: YWMNPu88xJNnGxNhUv0cCGYnn2o.roa (hash: tf2qYO515DuVuSA7ONMHLsp2LffeXtHsi7dw8jr5sXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:e8:da:43:59:79:18:fe:b1:ff:d3:50:76:ea:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
Validity
Not Before: Apr 19 06:00:55 2026 GMT
Not After : Apr 20 06:00:55 2026 GMT
Subject: CN=e77aedd3d64c3afe8416659d9ea16030b0df5e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:f4:1b:5c:8b:cc:74:39:04:e1:df:6e:b1:
09:ba:7e:05:6b:5d:a3:5c:e7:1d:12:dd:96:a1:17:
fd:d3:9c:4a:cc:61:41:99:0b:31:fc:39:b5:b9:37:
bb:67:59:5f:b4:75:62:44:cd:ec:17:75:49:87:8e:
49:88:2e:ca:31:24:53:a3:ca:70:ae:c9:45:39:8e:
c3:47:05:cc:a5:7a:58:0f:1b:65:09:d2:65:3c:71:
e2:9b:01:27:8a:67:9a:fa:05:3e:c3:4f:84:a9:c9:
92:90:56:2d:0e:ff:42:f3:46:9e:c3:3b:5e:66:40:
37:04:34:8b:71:cd:2d:b1:77:c3:53:c9:28:a4:c0:
f1:f0:88:e5:cd:f9:07:7a:cd:88:08:19:ac:de:07:
c4:9b:28:80:d5:e9:e4:5a:1f:3c:fa:e0:41:4c:8c:
ae:44:29:84:62:11:84:5c:ac:4c:44:72:36:88:d4:
2d:d6:41:f0:bc:1c:2b:80:fd:35:b8:30:1b:88:78:
08:69:fb:ef:f8:75:38:30:de:16:a7:80:de:72:29:
35:6c:b9:b9:e0:cd:55:8d:b1:db:c8:37:8c:52:6f:
7b:1b:b8:cf:72:d5:c5:70:14:88:cb:24:19:00:d0:
86:5a:bd:3e:84:96:37:28:0f:a4:27:1e:65:67:96:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7A:ED:D3:D6:4C:3A:FE:84:16:65:9D:9E:A1:60:30:B0:DF:5E:33
X509v3 Authority Key Identifier:
keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8e:80:40:3a:b2:93:5f:87:4c:39:c0:b5:3c:e7:d8:cb:9a:
92:b5:c9:1e:a0:7f:75:e1:c8:5d:58:c9:29:09:99:bb:c5:bc:
67:68:86:09:a2:40:b8:29:f7:bd:5f:b4:1e:0b:e8:c9:fe:b3:
64:68:12:de:b2:ac:cc:b2:df:60:15:65:d2:a2:1d:28:c7:ed:
b4:61:4d:ca:56:c9:cd:6a:7a:f8:22:e1:7e:f5:d1:da:40:f4:
85:7c:02:03:c1:fc:3f:91:51:27:a0:a7:49:38:24:b8:de:c6:
d5:40:bf:7e:59:d5:ce:ac:cc:40:12:72:37:99:f3:49:37:fa:
e4:8d:44:82:2f:83:bb:6f:7e:bc:3f:9c:42:e6:6a:7d:42:09:
20:44:d3:56:74:3a:40:74:c1:59:f4:1d:e5:ca:b7:4a:3f:6e:
b9:12:44:57:04:58:16:d7:c0:06:1e:05:76:fd:ce:31:9f:6d:
e0:7d:72:1c:0e:d5:c0:96:68:98:55:d3:5f:a8:23:03:55:7c:
92:f8:c3:a9:7e:90:94:5d:5b:7b:be:39:68:a5:42:eb:e5:6e:
a9:48:e2:45:3b:a6:5b:bb:85:a2:a9:0b:14:f8:d9:53:53:e6:
70:4e:dc:d3:bc:3d:28:e2:c2:9b:ba:fa:ed:6b:0f:57:2f:bc:
08:ae:9e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:39 2026 by rpki-client