Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
File: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft (raw, json)
Hash identifier: IblE57KvBZ+Ea6Rqa+Rtl0pZshyz1K3DOpZxzQZvCY4=
Subject key identifier: D9:CC:B4:99:AF:BB:3C:B6:97:D5:75:97:39:ED:DF:D6:27:93:16:66
Authority key identifier: 1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
Certificate issuer: /CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Certificate serial: 019D99D0573395EBCF9384F5B07BBA336D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
Manifest number: 08A5
Signing time: Fri 17 Apr 2026 05:01:00 +0000
Manifest this update: Fri 17 Apr 2026 05:01:00 +0000
Manifest next update: Sat 18 Apr 2026 05:01:00 +0000
Files and hashes: 1: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl (hash: k2gdH2dMiLJCX1+svKe3jfolWOw9F/pY6Uxueo5qkCE=)
2: PRWWZTPfSbsdOcFDzXqI07gWKnM.roa (hash: o3ezVQcMSQ90jhxByB5K6ib9QZEeV8XrQMqvctluruM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:57:33:95:eb:cf:93:84:f5:b0:7b:ba:33:6d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Validity
Not Before: Apr 17 05:01:00 2026 GMT
Not After : Apr 18 05:01:00 2026 GMT
Subject: CN=d9ccb499afbb3cb697d5759739eddfd627931666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:8a:3d:61:d9:47:ee:50:74:09:a3:23:2f:
67:53:f5:6d:75:51:b2:19:48:0c:aa:60:ad:3f:90:
15:60:45:07:8f:c4:f9:91:27:c3:93:3a:a1:8e:2f:
cc:91:a2:7b:99:36:a8:cf:d2:8b:1f:7b:c5:9f:2e:
b5:93:4a:44:9f:56:d2:b8:bb:4c:3d:ff:d1:4c:9a:
49:bd:42:3f:43:78:f3:77:23:b3:49:eb:3c:06:a1:
53:bd:6b:28:d5:b9:0d:fd:51:ae:e5:84:24:7c:c0:
70:02:ee:3d:03:85:ef:22:99:56:02:db:5b:f9:51:
51:2a:12:1e:1b:22:ea:0a:66:32:68:3d:ab:05:37:
bd:77:d7:ce:80:b3:88:1f:d6:21:7c:e9:eb:00:c2:
d0:bf:11:ac:0b:48:24:60:7d:d6:41:a7:cf:f0:21:
e9:0c:4a:59:14:45:5e:fe:77:b2:ce:bf:dc:4a:6e:
1c:c9:db:94:bc:de:8b:bb:50:2c:d4:31:c6:1d:ed:
d2:66:57:6a:84:e8:07:90:d1:2c:5d:64:73:22:32:
19:ba:2b:2c:71:72:48:14:f6:9d:3d:fd:a6:c1:56:
00:68:d0:ec:6b:3b:be:6f:ae:d8:f6:ee:3e:e4:a7:
88:31:05:20:9d:d2:76:70:eb:a9:b5:b0:d8:fc:da:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CC:B4:99:AF:BB:3C:B6:97:D5:75:97:39:ED:DF:D6:27:93:16:66
X509v3 Authority Key Identifier:
keyid:1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:97:f9:0a:8b:09:2a:dd:5b:08:81:a2:91:b8:f8:2e:a8:25:
84:22:b3:eb:bd:c2:2f:ba:a6:49:7e:2b:6a:16:9b:b6:45:dc:
40:16:e2:15:8f:2f:49:31:2f:12:8c:6d:d6:2d:bf:10:d1:ff:
3c:fd:38:be:e1:25:94:aa:2e:10:b3:c6:9b:45:71:9f:11:41:
dd:e5:8f:84:aa:ca:49:f0:95:52:ff:ad:e5:ef:04:89:ae:1d:
dd:94:d6:ce:6d:ca:56:f8:7c:48:db:4f:e7:39:38:ef:5d:9b:
ab:59:02:63:a6:76:72:7c:84:ff:cf:dc:92:8d:49:de:4b:71:
67:9e:83:f8:5f:5c:9e:d3:0c:7a:92:78:fc:f8:76:63:61:3c:
fe:d2:ec:d7:ed:51:e9:23:6c:87:a3:61:30:10:53:a3:63:d5:
fe:86:62:b8:c8:04:88:fa:b1:00:f4:7f:86:67:74:e7:2d:4c:
7d:53:fc:b4:98:70:68:5e:d3:5e:9b:bb:34:bf:05:6c:05:e7:
6b:b0:20:35:62:c0:4a:84:35:fd:c4:e6:bd:dd:79:47:d4:25:
3d:9c:b6:19:c9:fe:90:6f:2c:63:24:b0:d3:bd:1f:11:7f:91:
e6:54:e1:83:0e:25:af:0c:23:a4:24:a4:d0:09:1c:96:0f:84:
cf:1a:74:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:17 2026 by rpki-client