Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
File: GJiiVgRCVjlcaoRZET1kmoKa-OI.mft (raw, json)
Hash identifier: 3i4IetIPA4aNiGdAbQTqymlYh25CtE1g7ddyhm0sK2E=
Subject key identifier: F2:BF:11:38:14:5E:26:73:87:CE:15:4D:3B:61:F3:43:93:EB:BD:B5
Authority key identifier: 18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
Certificate issuer: /CN=1898a256044256395c6a8459113d649a829af8e2
Certificate serial: 019FAC76461904A868EBB9467CC75AFCD385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:00 +0000
Manifest this update: Wed 29 Jul 2026 06:01:00 +0000
Manifest next update: Thu 30 Jul 2026 06:01:00 +0000
Files and hashes: 1: GJiiVgRCVjlcaoRZET1kmoKa-OI.crl (hash: KTyI1oQHMsEV4dmVoSeTWSXz7kcgtb/GAhG81umAaYE=)
2: QeFO4WIWKv2ggvxDMB0IIY2ffhU.roa (hash: A3a8EDhaNeBDQqGUsr5v16oyEecMADL0gGFhKmTivEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:46:19:04:a8:68:eb:b9:46:7c:c7:5a:fc:d3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1898a256044256395c6a8459113d649a829af8e2
Validity
Not Before: Jul 29 06:01:00 2026 GMT
Not After : Jul 30 06:01:00 2026 GMT
Subject: CN=f2bf1138145e267387ce154d3b61f34393ebbdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:98:03:3e:bc:db:30:eb:96:36:fb:99:8e:
12:23:ab:5c:a1:8e:1f:0c:e2:5a:d6:18:3c:5e:af:
66:fa:49:9f:10:5d:46:30:0f:cf:39:3f:98:28:97:
7a:b9:79:c3:7a:33:77:19:5e:53:d8:1e:de:5a:cf:
57:da:bb:9e:ac:98:92:a0:5b:28:48:79:9e:8c:cc:
cb:3c:e4:2d:62:8b:1a:9d:5f:3a:1c:e1:3b:74:ad:
96:bd:f6:33:de:b0:91:69:b2:d2:9f:4c:ac:ab:7c:
74:e5:47:28:29:44:67:41:32:d8:8f:41:a5:ee:bc:
e9:a5:22:3a:62:db:3f:57:1b:2d:b7:73:d6:a8:f7:
45:0d:e6:41:db:50:e3:5d:d9:63:42:ab:2a:2b:27:
36:0b:c7:48:6c:d9:75:15:38:95:98:b5:83:17:3b:
51:3a:c0:8d:6a:f9:f5:e1:1a:22:0a:e2:20:65:64:
a1:82:14:5a:0e:aa:43:b4:53:17:8d:ba:75:67:bd:
c1:38:d7:cb:f8:64:17:7b:79:31:18:c7:37:82:34:
28:57:db:c8:6e:6f:d0:67:b2:59:45:95:45:bb:1d:
15:d5:54:6a:94:7e:cc:75:dd:db:7b:3d:f2:a3:75:
a7:39:1a:1b:43:30:c2:5e:a4:f5:11:ad:8a:b4:fd:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BF:11:38:14:5E:26:73:87:CE:15:4D:3B:61:F3:43:93:EB:BD:B5
X509v3 Authority Key Identifier:
keyid:18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b5:b7:48:66:22:bb:fb:43:33:a4:be:85:ad:a9:d0:d1:e0:
17:6d:98:ba:94:55:4f:cd:95:6d:ac:85:3e:c2:73:d3:b8:f6:
52:be:5b:b1:db:db:53:99:50:bf:35:7f:a9:0a:e3:17:99:93:
af:87:bb:84:27:03:a5:55:73:31:3a:69:b5:32:84:c9:14:d6:
d2:69:d8:f7:81:1d:22:9d:1f:3d:9c:96:d4:5b:f3:3d:1b:24:
7d:e2:7d:de:70:57:02:e3:8d:64:6f:64:fd:b2:59:50:63:68:
39:98:a8:99:95:77:16:7f:db:cd:e6:38:62:d4:5a:e3:30:9e:
c4:3a:9a:2d:b6:78:e9:ea:34:6b:bf:93:2e:6c:0e:ea:e7:37:
32:13:3c:ab:39:7e:27:dc:7b:48:22:ce:d4:5f:bb:40:68:cf:
da:1c:b9:16:ef:03:2a:5b:0c:a6:0c:33:02:0e:9d:cb:76:3c:
b0:a1:50:f6:79:79:c4:1f:4b:70:db:b6:14:3a:aa:05:88:ee:
54:7d:26:08:96:b6:3a:9b:c2:48:29:4d:66:52:b0:17:b0:57:
e7:ee:7b:71:f4:30:12:cb:35:af:bf:0b:fc:3e:61:ff:e2:53:
1a:ec:3b:39:1d:50:fc:cd:8e:77:36:6b:de:8d:c1:ef:c0:24:
7c:05:0c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:24:55 2026 by rpki-client