Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: rWDNLOk+2qTpLU36J28H7sR6pvj9J4PTvI2kqP7VNh8=
Subject key identifier: 6F:2B:B6:92:02:CB:A8:2F:A2:EF:38:69:8F:7A:45:F2:57:8C:1E:0B
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 019D99999A2A485F81B730FDAAC66DA5E74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 04:01:13 +0000
Manifest this update: Fri 17 Apr 2026 04:01:13 +0000
Manifest next update: Sat 18 Apr 2026 04:01:13 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: //K3eSyVI+YIYThr90GAm2iWEaCUEqJ+fZQ0bKZkjnY=)
2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:9a:2a:48:5f:81:b7:30:fd:aa:c6:6d:a5:e7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Apr 17 04:01:13 2026 GMT
Not After : Apr 18 04:01:13 2026 GMT
Subject: CN=6f2bb69202cba82fa2ef38698f7a45f2578c1e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:29:f0:67:9d:7c:a6:e9:88:f9:90:ed:63:
01:be:28:42:ea:47:d7:1e:d5:5f:59:a4:bd:97:6d:
bd:b0:f4:ae:fa:46:4d:35:62:f9:91:d9:28:84:08:
9d:f8:fd:b5:6b:04:3d:69:d6:af:25:11:ae:37:64:
64:2c:b4:6a:8c:9e:63:c8:a5:15:c7:2d:9d:8b:21:
14:da:e4:ec:b4:da:1e:34:67:01:0e:5b:b5:d5:60:
80:39:60:1b:88:8c:87:fa:8e:df:a5:f6:c7:4d:06:
5e:97:5e:d1:0e:6e:ef:92:f3:de:9e:33:76:9d:9b:
2a:b1:9d:b0:a0:30:66:60:13:0a:be:72:d4:b6:82:
59:5d:5a:8a:f6:7f:df:22:03:bf:c5:21:da:c1:cd:
b2:e6:18:c1:55:ac:53:35:ee:bb:d2:dc:dd:16:ad:
06:d0:5a:5a:b2:d7:7d:b5:74:48:fe:d2:0c:58:88:
13:f6:cf:9b:ea:1d:8f:6f:d7:3a:2c:5a:79:59:a8:
6c:de:17:aa:d4:86:36:2e:11:c7:af:af:73:90:57:
6c:e1:a3:60:3c:61:d3:de:a4:3f:97:a3:95:42:bd:
b5:c2:a4:48:65:f0:41:02:90:f2:f0:2a:78:cc:68:
e5:13:ba:28:95:df:22:86:c1:e1:1d:63:70:70:ad:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2B:B6:92:02:CB:A8:2F:A2:EF:38:69:8F:7A:45:F2:57:8C:1E:0B
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ec:92:7e:31:38:30:83:a6:81:cd:fc:54:e2:84:16:de:8b:
61:03:98:ba:f2:26:4f:78:d7:5a:29:d2:ec:06:68:b5:d5:bc:
26:de:0c:1f:72:94:f5:91:ee:e1:63:ff:a6:46:c3:5f:65:28:
5f:68:56:f8:3d:94:d4:00:da:c2:48:d1:ef:4e:32:70:7c:10:
d4:44:6e:58:d9:07:0e:c6:07:18:f1:d5:1f:7e:ae:93:4b:be:
b2:b5:a3:be:f0:7e:5d:e8:64:99:73:29:c2:a7:be:a9:cc:bd:
49:56:21:66:d7:ea:95:8f:9c:48:a2:23:25:99:dd:a4:6a:44:
15:b7:00:d9:e0:2f:40:5e:3d:72:65:53:76:8f:5c:2e:6c:3e:
cd:a8:29:01:ec:6d:ae:e0:fb:a5:b4:53:48:0c:89:e8:bc:4b:
90:4c:3f:a2:a8:07:98:60:25:79:cc:2e:d3:ca:b0:fe:f9:5c:
a6:a3:93:81:f6:5f:ed:d1:0b:8b:a5:9a:64:20:1a:4c:e9:1b:
90:6a:13:11:c7:3c:fc:4c:72:85:fd:ae:3f:e6:e0:c0:ba:45:
a5:e6:21:bd:4b:5e:ee:75:18:d2:0b:d9:b9:55:4c:a9:43:8c:
7d:cc:d4:4b:c9:01:9f:18:c8:c0:6f:50:db:2e:2b:5b:01:c1:
72:c9:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:43 2026 by rpki-client