Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier: u8X+0oT43PyjHT60Q5B3XLXVEsSncY3e+PNuH8lHygc=
Subject key identifier: 2F:A8:85:AF:9B:F4:D6:23:DA:A8:14:A0:A0:16:FA:2A:D2:65:6B:CB
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 019D9A7520AA6E88A5A90A7473A714937A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 08:01:00 +0000
Manifest this update: Fri 17 Apr 2026 08:01:00 +0000
Manifest next update: Sat 18 Apr 2026 08:01:00 +0000
Files and hashes: 1: 9iYRo82i9hRkUCgmREahdJYxLLE.roa (hash: Iaajzt1IR/GS2dadWD8d0yfp4+37Bgf5XHM3q2W76dA=)
2: Jm12F1fJac9AdzTGN7xQVn8K_U4.roa (hash: P/nVz8qxvVHC3IkIASDUTBADr0JHFnsbfxbsnkdVypc=)
3: U17Ig7TH3Hf9u0Hjug4B8FqbaeM.roa (hash: h4vlRYblnFE5NeXhaGifoUzHbL8gvX60WPtBD/isPek=)
4: Z81lv8qaADBtEGYsx0-brJvvQeg.roa (hash: r6SobeHV+YoGbEJkji/z1sNc1KoSoCEgvZU8Lt5eYac=)
5: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: Cw17mAl/u12JnkUrKjeugAMM8vWKsVJtNtKyROA99YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:20:aa:6e:88:a5:a9:0a:74:73:a7:14:93:7a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Apr 17 08:01:00 2026 GMT
Not After : Apr 18 08:01:00 2026 GMT
Subject: CN=2fa885af9bf4d623daa814a0a016fa2ad2656bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:3e:6b:d4:89:35:8e:3e:de:58:64:76:22:
cb:05:33:96:65:8c:1b:83:db:14:e9:02:00:ee:db:
14:ad:42:98:3d:97:58:d0:be:3f:6c:04:01:d9:03:
3b:7d:45:44:b5:de:1b:3f:8f:b9:db:f2:73:4e:ef:
27:de:9b:76:07:20:9b:cc:dc:e5:0b:e5:73:f6:10:
8a:5e:12:0d:13:37:7b:ee:53:09:f6:19:e4:9b:5d:
40:25:a0:83:65:9d:c6:cb:02:b7:d6:66:4a:1f:fa:
2f:55:35:64:0f:60:07:36:7c:00:f1:b3:c2:71:68:
f7:19:1d:fd:8a:aa:3d:00:68:d6:1f:98:72:59:04:
d4:09:bb:8d:20:8f:e8:e7:32:ae:f5:93:e1:dd:c0:
40:b2:f3:ef:11:d6:b1:5d:bb:df:f4:4b:e2:a1:b3:
23:b2:1f:b4:53:85:82:28:d4:f7:ce:59:cb:7f:fc:
02:fb:17:22:f8:55:eb:6b:31:db:42:bf:3f:4f:e8:
83:7e:59:26:88:8e:65:50:6f:1d:97:e6:d6:03:2d:
20:8c:9d:6f:16:0b:a1:79:44:5c:db:68:60:a2:57:
e9:b4:f0:e0:e2:16:2a:94:13:ea:f5:0c:4e:26:40:
25:9b:03:d9:6f:e9:c7:ae:e7:b3:0a:dd:61:8e:89:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A8:85:AF:9B:F4:D6:23:DA:A8:14:A0:A0:16:FA:2A:D2:65:6B:CB
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:47:b3:c7:ea:08:45:b0:53:b3:e1:31:1e:9a:52:a6:22:4b:
b9:6b:6c:f3:71:00:61:3e:f7:b5:d1:a2:f8:c8:26:da:b8:72:
84:81:52:d6:0c:6f:55:88:74:26:8f:92:8b:7d:f8:2d:88:68:
ed:83:bc:8e:6c:a0:d8:80:63:59:c0:73:67:0e:55:80:91:84:
64:11:5b:8d:5d:a3:03:e4:a8:68:f8:7f:17:ab:33:39:80:e6:
80:0b:4e:57:aa:52:70:68:b5:51:69:cd:44:4d:5e:f5:c3:57:
89:a6:7b:5b:5d:ee:e8:5f:e9:16:3c:c2:00:1e:f4:0a:96:ca:
37:f6:0d:58:47:3b:e2:05:19:2d:90:d7:36:74:15:e2:5f:60:
80:e6:a7:b1:3e:f0:84:a7:4d:d2:a6:2e:9d:ed:a4:c2:76:96:
3e:ad:ca:f9:f0:31:db:d4:f5:38:da:2f:8c:b4:11:f7:7d:76:
b8:f0:04:04:93:e8:6f:f6:4a:5e:e6:ff:5d:03:6e:a4:06:5d:
ad:64:89:2d:15:24:ee:5b:e7:8a:3b:5c:b4:1d:50:6d:1c:63:
e0:0d:08:a4:98:1b:22:88:46:5d:64:32:f7:c4:03:e6:40:87:
0b:7d:0e:ee:d1:a0:2c:51:80:bc:99:aa:22:8e:37:e6:34:9f:
c1:0a:c9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:18 2026 by rpki-client