Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier: r/I401yUJzq6eGnXgZ9zYaFaMHFL8F+YlBkpX9rt1RI=
Subject key identifier: 70:6F:7E:1B:37:29:AF:3A:E7:6C:79:81:10:9D:73:3B:D1:BF:BE:58
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial: 019D9B876F1B4397F71E8249B9425B8C357C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 13:00:37 +0000
Manifest this update: Fri 17 Apr 2026 13:00:37 +0000
Manifest next update: Sat 18 Apr 2026 13:00:37 +0000
Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: pSUxsDUPTxR5CXcZ7GdkxXvlIUsplpg92E2IKOtiYQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:6f:1b:43:97:f7:1e:82:49:b9:42:5b:8c:35:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Validity
Not Before: Apr 17 13:00:37 2026 GMT
Not After : Apr 18 13:00:37 2026 GMT
Subject: CN=706f7e1b3729af3ae76c7981109d733bd1bfbe58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:6f:f6:51:1c:ec:e3:d9:02:36:d3:b3:89:
b5:7f:ea:08:04:ba:31:74:e7:75:ed:ff:21:a9:a4:
6e:71:23:06:60:f1:25:e2:fe:3f:53:6c:09:5f:eb:
9f:ef:9a:a0:59:64:e0:d8:97:cc:10:10:5e:a3:56:
a6:7b:0d:1f:c9:34:43:5c:ac:b0:6b:72:0d:56:3b:
2c:a0:71:22:18:38:30:5c:ab:b0:c7:0e:6e:e1:3e:
ff:e8:0d:d7:3e:02:33:a4:e5:9b:f0:75:9c:56:73:
e8:d5:1a:9a:e5:27:22:cb:53:e7:f4:23:36:b4:99:
40:18:7f:fd:cf:b7:ee:0e:eb:02:32:bd:16:10:2a:
15:94:5c:d3:be:26:6c:21:86:8c:ff:d8:a4:d2:31:
c4:12:f8:ee:f1:19:fa:14:3a:fe:bd:ec:84:a9:b3:
ff:8c:96:8a:49:10:c4:d2:db:34:29:07:90:7d:07:
5d:99:0c:06:62:55:e3:2d:fe:2f:ed:49:81:46:38:
1d:4e:99:54:07:3d:2a:d7:48:4f:17:d7:01:5a:aa:
67:09:c4:9f:a2:f3:21:03:33:e5:5d:86:94:2a:eb:
b5:4d:22:62:e8:67:61:6b:1a:43:ae:68:47:50:07:
63:50:f5:4f:c5:b5:90:90:d4:c4:9f:58:59:0e:5e:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6F:7E:1B:37:29:AF:3A:E7:6C:79:81:10:9D:73:3B:D1:BF:BE:58
X509v3 Authority Key Identifier:
keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bf:de:40:60:92:58:c1:ec:d3:cb:1d:6d:34:40:a1:fc:82:
40:0a:49:91:3a:0d:6f:5d:a8:5a:0b:0b:49:41:c7:0c:00:57:
3b:63:1c:90:b5:30:78:28:7a:ce:b3:e0:d5:fe:9f:70:d4:88:
29:78:b1:79:99:b7:db:a4:bc:9e:6e:c8:ff:0f:07:91:7c:53:
e0:08:64:0f:c8:7f:cb:25:85:fb:4d:bc:64:87:7d:6d:be:d8:
76:ff:87:e1:31:75:47:1f:b6:55:10:9e:41:80:e8:8c:fa:40:
0c:30:e0:f9:6d:34:62:b7:92:ae:da:d8:d7:25:3b:bc:d3:c1:
64:45:ec:56:b9:9a:33:74:67:69:5f:8d:22:31:6a:bd:cd:f7:
51:5b:ba:1d:2a:d4:11:db:6b:08:a3:17:5b:63:ed:5d:79:ff:
23:39:bd:96:98:8f:f7:ac:2c:ad:f8:85:d8:a5:2c:66:6a:ac:
8f:1a:f5:78:f2:5d:7d:56:46:37:76:d7:6c:34:65:e0:e5:0a:
57:1b:69:4c:99:a9:e0:fd:a5:24:6f:b5:3e:ce:5a:38:94:7e:
10:18:30:8c:fa:e6:d6:af:3f:a5:da:e2:f4:58:4c:43:05:af:
6b:71:db:32:07:f0:de:31:22:b0:65:e4:1f:45:45:0f:68:fe:
a5:c6:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:37:06 2026 by rpki-client