Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
File: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json)
Hash identifier: KCHkF5yNmUPKiHVG5K+gK7FA9ZVZ6/1whfpJjI7hjUo=
Subject key identifier: 69:98:71:DA:30:B9:C3:BD:D1:54:E5:A3:D4:B2:6A:96:DA:8E:79:02
Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Certificate serial: 019DA2D33249A3D1599F1228A34B7B28A8A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
Manifest number: 05DF
Signing time: Sat 18 Apr 2026 23:00:43 +0000
Manifest this update: Sat 18 Apr 2026 23:00:43 +0000
Manifest next update: Sun 19 Apr 2026 23:00:43 +0000
Files and hashes: 1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: zCY/3Ba9vPUo5xYCPfiTZTRfu7xcd76hNP6dXfpX4XU=)
2: jP1Y1GrBhcV5AXNPH0IQ21pDByI.roa (hash: KbbHbK0Z3zk1vvgM/oztcZSTAImni1g8tfvWsc3e20Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:32:49:a3:d1:59:9f:12:28:a3:4b:7b:28:a8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Validity
Not Before: Apr 18 23:00:43 2026 GMT
Not After : Apr 19 23:00:43 2026 GMT
Subject: CN=699871da30b9c3bdd154e5a3d4b26a96da8e7902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:75:4f:98:cd:66:0e:6c:0d:52:80:8c:dc:
22:32:64:5f:74:38:51:ba:66:8f:da:50:9b:0d:41:
58:a4:2e:a1:8a:fe:49:4a:ca:ad:52:4d:df:a0:91:
d8:f6:9c:64:1a:77:f6:fc:28:bf:f1:a7:fc:1f:97:
a7:3b:12:f3:2e:4b:75:38:24:6a:24:3d:33:21:3b:
4e:b9:aa:81:de:f1:16:fc:e8:99:69:06:30:67:27:
39:8c:9f:18:45:c1:85:5e:c0:a0:c4:bb:59:7e:12:
a5:f7:c8:60:a6:e2:42:2b:16:df:01:84:57:2c:54:
b3:72:fb:73:c4:85:10:04:b4:d7:97:8a:bf:d8:99:
e5:df:48:9f:5a:4a:54:32:a7:df:82:a7:43:51:42:
20:10:f4:fa:25:90:d0:3a:7b:22:ff:84:12:55:ad:
d0:d6:c9:c9:e5:2b:4c:7c:4c:2c:b3:a6:f3:b7:b3:
33:38:32:4c:70:5b:6c:ec:67:82:c0:2d:9c:64:11:
0f:e6:eb:1f:63:02:a7:16:9b:c8:b3:34:df:22:c1:
46:6c:10:86:3f:23:bf:af:0e:68:7d:4e:73:1e:df:
c2:7f:c8:2e:ed:69:43:a1:50:fc:7f:c6:2a:b6:75:
ba:cc:ba:88:9b:24:e1:b1:eb:62:46:2a:13:5e:af:
7a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:98:71:DA:30:B9:C3:BD:D1:54:E5:A3:D4:B2:6A:96:DA:8E:79:02
X509v3 Authority Key Identifier:
keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:79:5d:8f:31:f3:be:5a:b7:03:2d:8e:8b:29:a7:47:08:0b:
48:a4:a1:36:a8:85:99:c9:9b:01:68:e0:6c:25:9a:0f:12:02:
07:42:9e:ac:bb:63:50:25:6e:7b:e8:1c:fe:27:90:e9:04:2a:
db:8d:e2:4f:1d:78:e0:e5:2b:35:d2:c7:1a:f3:e2:e1:59:dc:
ae:07:69:fc:cb:bc:c8:29:ed:3a:f3:26:e7:94:b7:c4:14:c7:
c8:ed:68:96:da:1b:20:e7:db:2f:d8:8f:6a:37:59:ce:c3:8e:
19:a4:a3:ff:2f:63:d7:18:c9:6f:6a:5e:10:d1:82:d0:09:88:
cb:50:51:01:4a:9e:dc:2b:29:2b:88:18:c5:88:d4:eb:92:84:
04:e8:e9:3c:8c:2c:ca:aa:b6:1a:ee:40:f2:27:8d:65:91:66:
ba:e6:82:2b:ab:53:a2:59:11:24:c4:11:c4:a6:e1:2f:8d:8b:
6c:ee:51:88:35:83:4a:29:83:3c:f3:eb:0d:9a:42:d5:e2:a4:
66:03:0e:35:2f:c5:3b:3d:bf:6f:26:26:78:73:b8:00:b6:d1:
58:20:95:64:1a:81:7a:cb:9d:7c:c4:36:83:c9:db:7e:73:e1:
27:96:20:b0:f9:fe:06:5d:9f:31:2b:2d:42:9d:2d:9d:1b:68:
e6:65:2f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:33 2026 by rpki-client