Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
File: GmoUZyI70xUQwU8hvTPX12mCnSg.mft (raw, json)
Hash identifier: xa5RhW9H34t46ptZUVEQq/UgfSXMQawF3jSAE4p86p8=
Subject key identifier: B7:CA:77:96:E4:DA:35:C8:6E:F0:2C:E2:2B:D0:3B:1B:3C:C8:8D:5C
Authority key identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
Certificate issuer: /CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Certificate serial: 019D9AABF730D25811F943EBC584C32D354A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
Manifest number: 02BD
Signing time: Fri 17 Apr 2026 09:00:54 +0000
Manifest this update: Fri 17 Apr 2026 09:00:54 +0000
Manifest next update: Sat 18 Apr 2026 09:00:54 +0000
Files and hashes: 1: GmoUZyI70xUQwU8hvTPX12mCnSg.crl (hash: aCAZ1PXs0oNi/Se4gKu1EhyrfypgDiTs+DAQRk2L3CQ=)
2: yMHe_AcZ7t0DOCfavN3ISgqxc3c.roa (hash: 9DwkTaaH9QdGqF+hvGsRneF8svXbKCB6hQgeZ0/mVuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f7:30:d2:58:11:f9:43:eb:c5:84:c3:2d:35:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Validity
Not Before: Apr 17 09:00:54 2026 GMT
Not After : Apr 18 09:00:54 2026 GMT
Subject: CN=b7ca7796e4da35c86ef02ce22bd03b1b3cc88d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:f3:a6:25:8b:b0:4f:37:60:e6:5d:38:42:
fb:64:c3:da:63:6f:58:a9:40:eb:34:fe:ce:c3:d1:
ec:fb:7e:eb:a0:ad:f6:ab:e6:4f:c1:11:a5:05:f6:
b3:c1:11:fb:f4:5e:43:ab:46:1e:53:83:bc:18:f0:
06:f6:88:fd:42:14:c5:8a:4a:bf:25:97:ee:35:68:
6e:61:2b:77:5a:76:fe:78:b9:8d:77:94:e9:d7:ce:
96:75:98:90:39:ca:33:97:1a:da:bd:41:54:a8:50:
7d:b3:5b:5c:3b:47:f9:d3:02:70:88:60:6d:0d:f3:
50:41:60:38:71:2f:23:c0:0e:b6:d7:ac:1e:ed:a2:
64:2c:43:3f:f5:32:49:45:20:fb:85:1b:4e:4a:6b:
56:3e:9d:71:33:42:fe:57:34:04:5b:11:cc:aa:7b:
fa:0d:16:ba:d1:ee:d9:cc:f1:3c:5c:df:32:2f:e8:
8b:9c:d1:c8:d5:52:83:f5:73:24:d1:41:4d:c6:8d:
2a:10:46:62:40:8b:c3:16:39:1c:fb:7d:9a:33:20:
bd:75:0d:b4:2b:bb:bc:eb:1e:d3:e3:bf:13:d3:01:
6a:ce:04:71:55:14:83:69:0b:b9:d7:0e:70:01:0c:
f4:81:0a:78:34:b3:79:2b:9c:d3:88:90:4f:62:fe:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CA:77:96:E4:DA:35:C8:6E:F0:2C:E2:2B:D0:3B:1B:3C:C8:8D:5C
X509v3 Authority Key Identifier:
keyid:1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:62:69:82:21:c1:df:1c:fe:c2:1b:17:af:89:25:88:12:f3:
71:85:a8:44:5c:de:f4:c4:e9:f2:09:e4:15:9b:c9:16:14:f9:
1c:7b:93:0a:c1:ab:d7:6e:ee:97:a2:23:a7:51:28:88:90:7b:
45:76:1e:99:04:26:09:07:37:ee:51:26:03:7d:8e:0b:b6:72:
00:2e:5e:fd:90:52:34:94:ab:48:84:54:02:68:ee:01:7e:f8:
2b:85:a4:97:4e:6c:b0:f7:be:87:fd:fb:78:41:4b:0b:d5:34:
a2:40:f8:bb:e3:21:cd:c6:f8:57:f8:ce:75:b7:06:4e:2a:06:
d9:2c:bf:87:b1:58:1a:15:a6:19:a2:1b:c1:66:26:d9:66:52:
b1:95:ab:ed:f5:71:50:39:05:ad:94:26:47:9d:a9:e9:85:43:
c1:25:d4:17:0d:c7:2e:d5:45:0f:e5:4c:e8:42:b0:36:de:07:
7d:3e:ee:40:f5:04:f3:82:3f:dd:89:49:46:18:85:3c:f5:ac:
31:1b:cd:21:6e:3f:22:fa:e6:a9:aa:c0:4c:4b:22:e8:ab:fe:
05:b5:2b:2c:0e:b5:7e:83:72:f4:24:ae:f9:13:25:8e:5d:07:
2b:86:f1:28:14:c1:e0:53:8c:42:ff:1d:56:22:c1:0b:20:1f:
5a:a6:17:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:08 2026 by rpki-client