Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: SgjC+OHzxftBraWlfU+R4fVbJ6wNMbrULj3VKIcZagg=
Subject key identifier: 6C:68:D8:63:FD:66:5B:67:02:F9:40:97:2C:5B:49:C7:DD:83:39:1E
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 019CAC0FCE1FA9AA7B8E7D05B2C050C28909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 01:00:42 +0000
Manifest this update: Mon 02 Mar 2026 01:00:42 +0000
Manifest next update: Tue 03 Mar 2026 01:00:42 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: pQtgnE0KieyOLBFeWgJ58DijWKsLMDug4mWYBgvkP9Y=)
2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ce:1f:a9:aa:7b:8e:7d:05:b2:c0:50:c2:89:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Mar 2 01:00:42 2026 GMT
Not After : Mar 3 01:00:42 2026 GMT
Subject: CN=6c68d863fd665b6702f940972c5b49c7dd83391e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:82:4d:73:6c:e6:2a:bd:93:66:cb:c2:ca:
30:60:2a:d5:a1:b5:d7:66:b3:77:56:73:c1:c6:7e:
e0:13:78:48:28:0e:ce:c0:87:76:b5:00:f6:41:7b:
7a:71:39:8f:98:18:11:cb:dc:b0:bf:43:7d:d9:0c:
fb:7e:bd:3e:0e:94:eb:76:3b:9a:b8:97:06:1a:9b:
37:35:f7:c3:a1:35:1f:c2:92:54:e2:b3:15:b3:37:
e7:74:db:99:fd:c6:e6:05:44:26:72:42:35:6b:af:
5a:99:ed:79:db:74:ab:f7:05:59:62:59:5c:4a:14:
6d:a1:85:78:9c:29:d2:b2:fb:f8:3b:f1:35:b7:80:
56:23:3c:e8:a9:1c:8a:86:79:21:a3:04:fa:a6:d5:
a3:31:aa:94:f2:fc:75:e2:47:9f:da:47:0f:22:14:
3f:61:b9:c4:d7:49:65:dd:3b:47:b4:e0:76:48:05:
6f:7f:d6:8c:e9:58:b9:11:7c:85:f8:4e:4a:39:5b:
bd:4e:de:86:1b:4c:e0:5d:7b:e8:a5:97:b3:09:97:
d1:d6:86:b7:5a:9c:82:3a:ea:fc:bd:aa:d5:3c:9b:
17:dc:79:0d:fd:54:8a:2a:9f:5e:3f:5b:b4:df:30:
87:0c:80:da:51:10:81:56:2c:0a:e7:a8:e9:a1:78:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:68:D8:63:FD:66:5B:67:02:F9:40:97:2C:5B:49:C7:DD:83:39:1E
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:07:66:5b:c7:2d:82:63:de:90:13:be:9d:cd:ed:a3:ad:3c:
80:83:fe:94:a5:51:4d:e6:99:91:ff:ee:c4:eb:00:a2:31:80:
db:fd:8b:a8:6f:44:d8:c7:71:d6:6c:91:6b:2e:0d:57:e3:8c:
6f:a8:73:53:9c:39:a3:73:27:bb:52:61:ea:34:0e:9e:be:cd:
c4:8b:5b:48:21:84:c7:c1:9c:4f:bb:07:10:ad:97:c5:7c:b3:
b9:ea:35:eb:f5:c1:59:4c:07:6d:c7:2d:f4:81:e7:38:8b:23:
cc:ec:d9:f4:6a:3d:91:5a:a9:33:30:d3:91:9e:9f:6c:b8:1d:
dd:df:dd:72:08:58:10:ba:60:3f:1f:12:bd:54:0a:30:ce:a4:
e9:fe:20:9d:07:da:fe:3c:fb:fd:43:cf:ba:f8:05:a8:84:d1:
7e:c5:9f:4f:86:69:6b:b5:6d:e1:7b:4b:6e:67:78:a5:04:5c:
cc:f6:7a:80:28:aa:23:1b:7b:38:87:c3:4e:60:07:be:15:d1:
44:c2:bf:53:77:be:ab:9b:dc:4d:43:70:a4:fc:e7:42:4f:d7:
e6:50:aa:7c:2e:dd:62:c2:de:9d:78:59:25:e8:9b:73:ac:29:
3d:44:00:aa:1b:61:3e:f1:d0:99:de:69:9b:77:5c:5f:85:61:
89:32:66:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD84fqap7jn0FssBQwokJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDkwZWQwMDI3ZjBlMzNhNzU0YzI1OWY3ZGM4OGJiN2E3
MmZmYTgwHhcNMjYwMzAyMDEwMDQyWhcNMjYwMzAzMDEwMDQyWjAzMTEwLwYDVQQD
Eyg2YzY4ZDg2M2ZkNjY1YjY3MDJmOTQwOTcyYzViNDljN2RkODMzOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYmCTXNs5iq9k2bLwsowYCrVobXX
ZrN3VnPBxn7gE3hIKA7OwId2tQD2QXt6cTmPmBgRy9ywv0N92Qz7fr0+DpTrdjua
uJcGGps3NffDoTUfwpJU4rMVszfndNuZ/cbmBUQmckI1a69ame1523Sr9wVZYllc
ShRtoYV4nCnSsvv4O/E1t4BWIzzoqRyKhnkhowT6ptWjMaqU8vx14kef2kcPIhQ/
YbnE10ll3TtHtOB2SAVvf9aM6Vi5EXyF+E5KOVu9Tt6GG0zgXXvopZezCZfR1oa3
WpyCOur8varVPJsX3HkN/VSKKp9eP1u03zCHDIDaURCBViwK56jpoXjFEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxo2GP9ZltnAvlAlyxbScfdgzkeMB8GA1UdIwQY
MBaAFBgJDtACfw4zp1TCWffciLt6cv+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjIt
Y2ZmYWQ1MzI5MmNlLzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjItY2ZmYWQ1MzI5MmNl
LzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwdmW8ct
gmPekBO+nc3to608gIP+lKVRTeaZkf/uxOsAojGA2/2LqG9E2Mdx1myRay4NV+OM
b6hzU5w5o3Mnu1Jh6jQOnr7NxItbSCGEx8GcT7sHEK2XxXyzueo16/XBWUwHbcct
9IHnOIsjzOzZ9Go9kVqpMzDTkZ6fbLgd3d/dcghYELpgPx8SvVQKMM6k6f4gnQfa
/jz7/UPPuvgFqITRfsWfT4Zpa7Vt4XtLbmd4pQRczPZ6gCiqIxt7OIfDTmAHvhXR
RMK/U3e+q5vcTUNwpPznQk/X5lCqfC7dYsLenXhZJeibc6wpPUQAqhthPvHQmd5p
m3dcX4VhiTJm3g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:58 2026 by rpki-client