Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json)
Hash identifier: wiH9JvjvybDoW5laxdCDa5jQVdJH4n39RVzVHyffXGQ=
Subject key identifier: 18:CF:64:9B:42:9D:D7:57:EA:BB:EA:B1:BD:FB:CD:B8:EC:72:32:89
Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Certificate serial: 019CAC7DCC7ED1B483B9C0048E3E5AA96569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
Manifest number: 0697
Signing time: Mon 02 Mar 2026 03:00:51 +0000
Manifest this update: Mon 02 Mar 2026 03:00:51 +0000
Manifest next update: Tue 03 Mar 2026 03:00:51 +0000
Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: lnojuhYr7juHZpSrKd2QNwIkjf6+jdlOlazxu4OhoDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:cc:7e:d1:b4:83:b9:c0:04:8e:3e:5a:a9:65:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Validity
Not Before: Mar 2 03:00:51 2026 GMT
Not After : Mar 3 03:00:51 2026 GMT
Subject: CN=18cf649b429dd757eabbeab1bdfbcdb8ec723289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:69:87:cf:ca:b4:6a:94:be:3e:55:aa:f3:ec:
e0:8e:f8:da:84:6d:8c:3c:cb:2c:1a:59:0d:a3:f3:
41:f5:cb:85:11:1a:cc:52:4d:7b:64:74:4c:36:f3:
98:24:ae:e8:66:62:7e:00:f0:b2:66:e6:fa:c1:7d:
c1:6b:a0:2a:85:c0:3d:39:99:28:6e:e0:d6:1d:58:
e4:6a:4f:d4:ed:d7:51:53:c5:24:d3:33:b9:b0:0c:
01:10:03:ca:16:be:5d:1c:67:31:2a:be:8f:c4:b6:
96:ef:78:de:e7:5d:f2:5e:70:14:c0:66:58:d5:16:
2e:a8:66:c0:f9:c7:ce:da:63:82:f1:49:25:37:7b:
61:26:9a:04:62:56:ef:29:af:76:37:c8:fe:8f:1f:
64:10:e5:12:ea:60:f4:28:f4:16:6d:d1:cf:a0:3c:
90:26:81:01:c3:07:30:95:2b:e0:98:0e:e3:4d:e3:
d2:fe:f2:10:77:78:ee:05:0f:b4:af:c7:c1:9c:a7:
1f:f9:1e:0d:49:30:13:47:16:3f:c6:f5:83:f3:28:
4e:94:1e:a6:0b:25:8e:9e:63:47:bd:2f:e3:da:6b:
cd:41:d5:f8:ad:9e:50:b7:c0:e8:e5:c8:0f:62:c1:
40:a8:1d:ea:ca:4c:45:fe:45:97:4c:7a:4a:c8:b0:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CF:64:9B:42:9D:D7:57:EA:BB:EA:B1:BD:FB:CD:B8:EC:72:32:89
X509v3 Authority Key Identifier:
keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d7:24:82:b5:c9:49:3e:08:07:35:b7:a0:0d:f6:d7:1e:0d:
d9:b1:98:b8:5d:82:57:5f:53:2f:09:03:e9:51:e8:fd:ff:75:
5b:ee:10:a2:12:88:57:20:48:72:24:0e:9a:e2:84:77:d2:fe:
91:6c:3d:5a:0f:ca:be:72:0f:f4:29:29:2a:bb:1e:2e:c0:be:
9a:d8:3d:f0:50:d2:44:9a:65:c8:dc:5d:22:69:2d:11:60:ea:
94:5f:a2:14:11:78:b2:d5:45:a1:ee:0e:74:67:9a:a3:79:d2:
44:bf:a7:f0:e0:c1:ef:58:63:70:50:c7:65:4e:b1:d5:ac:7e:
49:d3:25:38:18:7d:c2:bf:41:09:a3:7b:f4:7c:15:a2:cf:8d:
54:b0:1f:4b:a1:7d:4b:17:33:a6:45:f8:2b:39:d4:35:48:ca:
36:a8:1e:e1:f0:98:31:39:ff:39:5d:2a:19:c7:21:24:ec:5d:
10:cc:28:17:60:06:e9:cc:77:a3:60:0e:01:09:1a:ec:43:80:
09:bb:f8:96:43:7f:5a:12:c4:0d:52:81:d3:89:5f:b8:1f:b7:
7d:32:3d:f5:a2:22:4c:5d:d8:8b:73:0b:6b:4e:40:fd:73:7e:
a8:a8:40:48:3a:a4:c3:d1:74:dd:36:bf:c6:29:51:b0:cd:9f:
99:82:d9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:19 2026 by rpki-client