Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json)
Hash identifier: VgaeT1qRavf3EOdonJzOsw0Eb6RCRvGC5CXKLZvHQao=
Subject key identifier: 0E:78:9F:95:71:B3:C2:2E:8A:0F:CE:93:11:99:B7:95:D6:A3:57:13
Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
Certificate issuer: /CN=8260c94351066ec06debfab2bca9dfaed407e698
Certificate serial: 019D9B50A85C370BD16A5ED7CE4DB0B4FAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
Manifest number: 0970
Signing time: Fri 17 Apr 2026 12:00:47 +0000
Manifest this update: Fri 17 Apr 2026 12:00:47 +0000
Manifest next update: Sat 18 Apr 2026 12:00:47 +0000
Files and hashes: 1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: YZlMuD7FebgInuRDTHYbTVsUFDMIO9c06aRknw1tGHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:a8:5c:37:0b:d1:6a:5e:d7:ce:4d:b0:b4:fa:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698
Validity
Not Before: Apr 17 12:00:47 2026 GMT
Not After : Apr 18 12:00:47 2026 GMT
Subject: CN=0e789f9571b3c22e8a0fce931199b795d6a35713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:0b:42:4c:fd:65:08:19:dd:6b:9d:54:fe:
2c:8e:a9:74:47:86:f8:f9:be:f0:bd:59:80:cd:2a:
61:12:cc:6e:eb:fb:e0:7e:72:26:9c:7c:f2:8e:4f:
fa:87:85:9e:69:6e:ea:f2:5e:12:f0:83:06:e1:8d:
c7:6d:12:d2:d2:56:99:df:01:c6:cf:4e:fd:ab:53:
0f:f0:8f:f4:59:18:81:25:9c:44:f4:ac:a1:26:5c:
4c:e6:53:fc:3b:73:40:22:6f:ed:9c:70:af:47:de:
7e:5b:4c:2f:fd:0c:a1:e4:76:7d:9d:02:41:b2:f8:
29:70:0a:bd:78:88:b1:f2:00:10:e2:a7:73:5c:58:
6e:e7:69:3c:38:8f:01:3f:fd:93:27:f8:f9:c6:27:
76:61:62:77:a6:35:2e:8e:46:1a:e0:39:9e:30:ca:
52:83:5b:f2:95:68:14:70:73:f6:4e:2b:1e:b9:9c:
e8:76:8e:ad:70:b7:af:89:86:26:07:dd:40:2f:d0:
f1:6e:b3:c9:b6:86:81:33:75:a2:d9:7e:38:e0:8c:
a7:4e:a6:62:84:2d:bc:c0:b3:b5:26:96:e0:b1:1f:
d8:c2:b0:b3:20:d6:39:69:98:70:5e:53:63:e3:c9:
86:02:b4:8e:1c:c7:55:6d:85:de:6a:25:1c:f7:19:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:78:9F:95:71:B3:C2:2E:8A:0F:CE:93:11:99:B7:95:D6:A3:57:13
X509v3 Authority Key Identifier:
keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:85:dd:66:1d:06:c4:66:08:a1:45:ef:5f:92:36:63:03:af:
a1:65:b6:57:11:62:a8:41:71:85:b5:4b:57:35:db:22:6c:fd:
9c:9d:d1:37:07:c2:c3:6f:f1:bf:12:19:6f:2f:73:5d:28:9d:
4b:b4:87:d3:e4:c3:bd:29:8a:cd:b0:98:fa:82:50:46:d2:b1:
35:47:c4:ae:45:1d:b8:df:41:d0:13:ae:ce:b3:2e:e4:39:4d:
a9:6b:78:c7:64:3b:14:60:3b:4b:e2:af:7b:30:70:ce:50:2b:
1c:56:65:15:37:3d:e6:0a:4d:39:6f:52:fb:ed:2c:e8:79:98:
cf:2c:a6:d3:9c:6b:52:eb:0e:6f:ed:5a:29:9a:5e:dc:c4:5b:
6a:da:e7:95:d7:f8:0c:6a:ab:34:66:5b:d0:ff:36:b2:01:20:
15:47:68:7b:f4:23:8b:3b:de:3f:da:06:b3:d1:84:7f:22:0d:
3d:34:0e:ff:3f:10:bc:a6:e1:76:7d:f4:c7:19:f4:c8:fc:95:
77:55:98:81:0a:79:b4:1c:fe:db:2b:84:69:15:71:bd:88:3d:
9b:19:b0:b3:7f:cc:53:56:59:06:54:27:e7:4d:eb:8c:53:89:
9b:18:34:db:e0:7d:35:60:cc:9b:03:23:b4:8b:09:fc:e5:b5:
3e:9e:ec:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:42 2026 by rpki-client