Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
File: GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft (raw, json)
Hash identifier: EJWbt/vmgqPhbwVM8/I9mJJcuqC6ZRNiIPpOYTF4JZ8=
Subject key identifier: D4:B6:00:94:96:9B:30:89:09:6C:C2:13:68:88:2C:60:A5:85:09:AD
Authority key identifier: 1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10
Certificate issuer: /CN=1af1487e4d0e26c53d593ece6e14712221e24010
Certificate serial: 019D9CD1C7AE42AD399079DD5040D3BDE624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
Manifest number: 01D2
Signing time: Fri 17 Apr 2026 19:01:26 +0000
Manifest this update: Fri 17 Apr 2026 19:01:26 +0000
Manifest next update: Sat 18 Apr 2026 19:01:26 +0000
Files and hashes: 1: GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl (hash: Km+5bu6pojhZxooG5V8NXdwVjFjojG64184XwrObJ9k=)
2: iYUev_wikt3902TuQUS_qA3tCJ8.roa (hash: VqRpsKYPKrdIKnSJSQ7Ajn2eZlKMNhnr5TrpIZme+3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:c7:ae:42:ad:39:90:79:dd:50:40:d3:bd:e6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af1487e4d0e26c53d593ece6e14712221e24010
Validity
Not Before: Apr 17 19:01:26 2026 GMT
Not After : Apr 18 19:01:26 2026 GMT
Subject: CN=d4b60094969b3089096cc21368882c60a58509ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:57:da:98:61:a5:cf:bc:8a:a9:26:fc:4c:
85:4c:d8:1f:72:bb:ab:a7:e6:66:2a:91:94:45:a6:
ee:9b:31:a1:e4:10:6b:a8:10:ed:31:9a:e2:e6:1b:
d4:26:49:9e:66:0f:98:8f:23:65:0d:49:f2:b7:61:
e3:f1:1d:3d:82:5b:96:02:eb:ab:6d:a1:15:fb:65:
4d:8a:5b:eb:f9:4d:58:83:4a:a5:3a:19:ab:09:43:
2d:62:dc:d5:39:6c:00:cf:df:c1:76:69:cb:98:16:
82:b4:3d:de:d0:c5:64:11:98:e0:32:96:a3:23:33:
e6:fe:da:a2:21:ca:a6:ed:16:31:38:88:9e:fb:f5:
b5:f8:5a:62:27:17:b3:db:b5:a1:25:2d:64:44:ca:
cf:25:77:96:57:37:0a:5a:bf:ed:f4:6b:64:da:ff:
02:a0:3f:6d:b8:68:71:86:c5:e1:bc:0f:15:79:a2:
7b:a9:e1:ac:cb:4e:eb:ca:b7:8b:07:f4:11:dc:8f:
8e:e8:37:fe:16:72:98:35:22:60:7f:6b:dc:5d:6a:
e2:67:48:5e:4a:92:3a:6b:10:e4:9a:31:5c:bc:47:
c3:85:e6:a7:5f:a5:1b:71:d4:a9:62:fc:01:4e:88:
b8:50:af:4d:08:a6:38:55:a5:4a:fa:0a:90:07:9c:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B6:00:94:96:9B:30:89:09:6C:C2:13:68:88:2C:60:A5:85:09:AD
X509v3 Authority Key Identifier:
keyid:1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:53:4c:f6:21:aa:83:51:89:10:35:c0:96:54:93:78:56:b1:
f3:67:f9:f5:e4:6a:46:cc:49:6d:6c:6a:7d:c7:99:1a:c7:8b:
c7:8b:c8:3a:74:ac:56:7b:27:7a:b5:ac:fb:69:26:86:2e:70:
b0:56:38:b4:3e:d2:6a:15:e3:3d:3a:b8:a9:55:38:a0:46:55:
82:e5:bb:b5:07:bb:d8:67:b4:e8:79:dd:2f:bb:df:58:a6:d8:
96:8c:bd:78:f2:31:bf:ef:e9:07:a2:e6:4d:e8:3d:6c:74:63:
86:6f:1a:26:81:d9:80:62:6d:81:ac:42:82:23:8b:ea:8b:56:
8e:9b:75:4c:3b:ba:a9:30:83:23:ac:ec:e7:94:b2:fa:96:49:
87:e4:5c:10:fd:7c:d5:d8:28:2a:41:47:0a:59:52:ac:55:07:
a9:85:70:57:77:db:50:14:80:43:b1:6b:aa:66:d4:7f:b1:27:
49:29:03:53:f2:2f:c1:5f:27:77:7b:a3:f9:56:21:64:31:92:
21:d8:db:22:7d:72:e5:62:bc:3f:ea:47:eb:9c:55:44:b3:80:
2a:83:59:c8:3e:bb:6a:6b:03:66:3f:8b:5c:6f:ac:6c:22:ae:
f5:1b:58:d6:bf:cc:5b:9f:5c:28:9d:df:84:ec:be:d3:55:96:
2d:c2:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:36:46 2026 by rpki-client