Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
File: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json)
Hash identifier: CD2AyhpGbK31zpONqU3UYa3TTzchZIZIsdMlKo1EXv8=
Subject key identifier: DB:AB:4B:EE:20:64:B2:B0:56:81:89:41:8F:0F:40:B6:B6:6A:2F:1D
Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Certificate serial: 019CABA1EEFD32245C98F8AB855970743064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
Manifest number: 055F
Signing time: Sun 01 Mar 2026 23:00:42 +0000
Manifest this update: Sun 01 Mar 2026 23:00:42 +0000
Manifest next update: Mon 02 Mar 2026 23:00:42 +0000
Files and hashes: 1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: dN6nMH3lTnUH/JOZb46wOBjPNwfw3dsnva6G8ydvBs4=)
2: jP1Y1GrBhcV5AXNPH0IQ21pDByI.roa (hash: KbbHbK0Z3zk1vvgM/oztcZSTAImni1g8tfvWsc3e20Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ee:fd:32:24:5c:98:f8:ab:85:59:70:74:30:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Validity
Not Before: Mar 1 23:00:42 2026 GMT
Not After : Mar 2 23:00:42 2026 GMT
Subject: CN=dbab4bee2064b2b0568189418f0f40b6b66a2f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:db:de:ea:14:a4:eb:35:dd:99:77:5e:97:57:
67:11:ac:ed:d6:14:c6:95:10:ec:51:fd:5a:9a:dd:
79:07:62:aa:c1:41:75:95:6a:84:f9:f8:32:73:14:
7b:df:67:20:4b:c5:78:40:2f:20:62:d8:3d:dd:5c:
3d:2c:33:02:3b:98:a7:f9:c6:84:9d:c7:a4:72:3a:
3e:e9:52:8e:4b:9f:5f:b0:77:45:9b:ba:7c:20:8a:
20:e1:31:ce:f3:93:64:d7:d4:e4:cc:d4:b4:d1:2c:
dd:e0:e8:c5:b2:f7:41:9c:2a:9b:99:cc:bd:09:03:
b7:8c:12:c3:16:8b:cb:67:77:c4:65:31:64:0c:f0:
fb:84:5d:53:60:74:48:ed:3a:0b:6a:1b:ad:d9:68:
5e:5c:0b:c2:e6:6b:fe:25:9c:f7:8e:4b:37:73:ca:
77:80:d8:e6:83:58:b6:5f:7c:1b:ea:70:ca:65:ac:
5d:00:6c:5d:98:41:53:0d:4f:7f:67:2c:77:91:ee:
07:39:b5:8d:8b:b9:16:96:f2:4d:46:a7:b9:74:88:
97:2f:23:e8:e6:55:ad:0c:0a:bf:0a:5f:6f:70:0b:
d6:f3:6c:ff:e8:d5:7a:e2:4d:cb:15:42:08:77:cd:
9d:d1:6e:98:c7:c5:cb:40:f8:c8:aa:d2:e3:17:b9:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AB:4B:EE:20:64:B2:B0:56:81:89:41:8F:0F:40:B6:B6:6A:2F:1D
X509v3 Authority Key Identifier:
keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:24:39:2e:3a:23:fc:79:1d:05:aa:31:b8:77:47:99:75:e3:
8d:74:f4:98:e3:34:85:4b:7a:e6:ff:03:19:64:64:fa:c7:b8:
4d:f3:c2:aa:af:95:db:0e:b5:c2:13:6c:b7:0c:27:8f:1c:08:
f1:17:2b:65:cc:11:01:db:0b:18:8a:f1:d9:7c:e8:d1:7a:07:
20:ff:38:f0:9e:b9:91:20:86:df:83:8f:45:b3:1c:ad:fd:14:
63:d5:e7:fd:6f:ae:c7:8e:b2:cc:22:56:0d:70:07:f1:ef:8b:
26:3a:f6:11:8e:55:d0:bf:96:50:be:ee:b4:1d:25:26:c5:24:
5e:9b:22:79:2e:37:33:f9:0b:9d:2d:a6:1c:24:3a:6e:a4:51:
5c:14:6e:73:56:ba:57:a2:00:47:ae:32:c0:08:53:93:7c:83:
17:38:2a:d1:43:57:c9:12:34:c3:61:30:56:c7:9d:eb:5d:e0:
0d:8a:fc:65:61:29:4a:16:86:c8:98:8c:79:07:1d:13:97:6b:
dc:18:30:9f:36:d7:64:ce:28:c9:04:c5:14:9f:16:60:39:ca:
62:ff:2f:6a:95:c9:a6:f1:eb:f2:6e:1a:dd:fa:fc:00:f2:7c:
0b:af:88:2c:67:27:be:c6:0c:5c:03:d3:14:14:8e:32:22:5a:
59:13:01:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:52 2026 by rpki-client