Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json)
Hash identifier: kSWdknSu53r0rJp3RnNrrD6868waVGZbf05KdXIGxmQ=
Subject key identifier: 12:A6:3E:DF:FC:EE:14:48:88:18:C8:30:00:9A:96:41:D9:97:94:85
Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Certificate serial: 019D9818FDC2AB2F301618FA0AB18596F6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
Manifest number: 0711
Signing time: Thu 16 Apr 2026 21:01:07 +0000
Manifest this update: Thu 16 Apr 2026 21:01:07 +0000
Manifest next update: Fri 17 Apr 2026 21:01:07 +0000
Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: AnI7+EGkKP5LKVhMgiMBS5vUvTb47Tyd1JXbRbOK63I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:fd:c2:ab:2f:30:16:18:fa:0a:b1:85:96:f6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Validity
Not Before: Apr 16 21:01:07 2026 GMT
Not After : Apr 17 21:01:07 2026 GMT
Subject: CN=12a63edffcee14488818c830009a9641d9979485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8b:36:94:57:84:3a:1e:7b:33:82:eb:5e:39:
e0:8a:95:c7:48:84:e8:05:d8:4f:bf:fe:6f:d4:00:
b9:d8:2c:34:34:f3:30:02:3d:e9:52:19:99:e1:4a:
03:8b:70:fb:2d:08:ef:8f:a6:31:46:23:9c:ac:dc:
28:a4:6c:74:7c:78:7f:a3:6e:49:18:1b:51:63:6f:
a8:3d:10:4f:b2:08:43:2d:49:0d:b3:1e:ad:a8:40:
2c:02:b2:7d:d1:fc:c7:8e:fa:8e:f9:9d:a0:df:11:
45:ed:53:75:3e:9e:ed:18:53:33:b7:7b:de:9c:96:
6c:84:c4:1e:72:43:f6:c4:91:93:a9:90:5d:27:7c:
2c:77:d1:87:db:4e:76:ab:75:1a:e4:78:5d:9d:99:
12:c9:64:ce:44:07:48:f8:ff:59:d3:b0:4f:be:63:
c4:b1:64:32:81:69:0d:1c:ae:d4:a2:bf:d2:5b:40:
fb:fc:e0:1f:40:df:b9:9b:48:34:c5:20:85:95:33:
00:1e:8d:74:8f:6c:6c:61:e6:f4:1f:45:fc:3b:c8:
11:9f:0a:8f:2f:a7:6a:6d:07:08:25:62:53:3a:f4:
63:be:00:9e:d0:2f:e4:bc:37:25:c0:3a:58:05:c7:
6b:25:43:1b:f8:75:50:cd:46:60:96:e0:bf:4d:f9:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:3E:DF:FC:EE:14:48:88:18:C8:30:00:9A:96:41:D9:97:94:85
X509v3 Authority Key Identifier:
keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:01:89:a8:67:39:bc:d3:50:54:fe:44:b0:3d:3c:07:96:b0:
7b:7a:2f:12:29:82:5d:6a:e5:38:17:41:21:e9:a0:38:24:74:
f1:48:d7:08:8c:11:13:6c:65:a4:9f:d2:b2:87:c0:24:e0:e4:
a0:89:5d:da:af:26:44:1a:75:8e:92:08:38:10:19:c5:a6:9b:
75:b3:b2:b1:e0:a7:97:1c:7f:92:5d:49:64:d4:7b:e9:33:1c:
6b:d8:43:af:aa:e3:bf:4e:32:f0:2c:b5:fa:48:82:2c:eb:a6:
73:6d:89:5d:e7:65:89:0a:75:d7:4f:0f:a4:21:52:3e:0e:b8:
c6:53:77:2e:16:3e:98:5e:b0:57:a8:62:3e:90:98:50:19:a0:
25:83:a4:15:d0:5d:83:43:02:80:97:78:cf:2c:e9:9f:98:51:
2b:b3:67:98:7a:d4:41:84:ea:01:79:93:30:70:a6:04:c6:88:
5f:82:e8:2f:0f:84:89:35:bc:96:a9:24:99:d0:38:f0:94:f6:
d8:2a:7e:36:b2:35:97:c5:b2:15:44:48:d1:90:8f:f7:bf:42:
80:37:30:78:78:4b:76:b5:19:6f:a2:7d:3b:0a:d5:28:50:34:
a8:ce:5c:57:14:48:96:5a:62:56:ca:7c:70:a7:50:7e:0e:fe:
c6:72:79:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGP3Cqy8wFhj6CrGFlva8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjBjYWQ3ZmM1OGJjODQyNThkZGMxNTMzZjRhMGRmMjQ4
OWVjNjIwHhcNMjYwNDE2MjEwMTA3WhcNMjYwNDE3MjEwMTA3WjAzMTEwLwYDVQQD
EygxMmE2M2VkZmZjZWUxNDQ4ODgxOGM4MzAwMDlhOTY0MWQ5OTc5NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIs2lFeEOh57M4LrXjngipXHSITo
BdhPv/5v1AC52Cw0NPMwAj3pUhmZ4UoDi3D7LQjvj6YxRiOcrNwopGx0fHh/o25J
GBtRY2+oPRBPsghDLUkNsx6tqEAsArJ90fzHjvqO+Z2g3xFF7VN1Pp7tGFMzt3ve
nJZshMQeckP2xJGTqZBdJ3wsd9GH2052q3Ua5HhdnZkSyWTORAdI+P9Z07BPvmPE
sWQygWkNHK7Uor/SW0D7/OAfQN+5m0g0xSCFlTMAHo10j2xsYeb0H0X8O8gRnwqP
L6dqbQcIJWJTOvRjvgCe0C/kvDclwDpYBcdrJUMb+HVQzUZgluC/TfkZWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKmPt/87hRIiBjIMACalkHZl5SFMB8GA1UdIwQY
MBaAFBnwytf8WLyEJY3cFTP0oN8kiexiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODct
NTdhNDJkZjBjODY3LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODctNTdhNDJkZjBjODY3
LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwGJqGc5
vNNQVP5EsD08B5awe3ovEimCXWrlOBdBIemgOCR08UjXCIwRE2xlpJ/SsofAJODk
oIld2q8mRBp1jpIIOBAZxaabdbOyseCnlxx/kl1JZNR76TMca9hDr6rjv04y8Cy1
+kiCLOumc22JXedliQp1108PpCFSPg64xlN3LhY+mF6wV6hiPpCYUBmgJYOkFdBd
g0MCgJd4zyzpn5hRK7NnmHrUQYTqAXmTMHCmBMaIX4LoLw+EiTW8lqkkmdA48JT2
2Cp+NrI1l8WyFURI0ZCP979CgDcweHhLdrUZb6J9OwrVKFA0qM5cVxRIllpiVsp8
cKdQfg7+xnJ5Kw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:23 2026 by rpki-client