Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
File: GPe8sFBdSWl9bFFzJBWGc257DXA.mft (raw, json)
Hash identifier: 7CssGUujLeXef/SB5b24QR64zfMW3jyO++PeinsdMNU=
Subject key identifier: EE:18:2A:DE:14:9D:EA:E4:44:EE:13:3D:B6:BE:F6:15:7F:F6:40:56
Authority key identifier: 18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
Certificate issuer: /CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Certificate serial: 019D9818C3C5846CB32AB78722E38CFFD4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
Manifest number: 18BD
Signing time: Thu 16 Apr 2026 21:00:52 +0000
Manifest this update: Thu 16 Apr 2026 21:00:52 +0000
Manifest next update: Fri 17 Apr 2026 21:00:52 +0000
Files and hashes: 1: GPe8sFBdSWl9bFFzJBWGc257DXA.crl (hash: Zz1Dl0a3xsYGnIrvm6UwHcGa7xBNpqnFAiSnxo3RpvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:c3:c5:84:6c:b3:2a:b7:87:22:e3:8c:ff:d4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Validity
Not Before: Apr 16 21:00:52 2026 GMT
Not After : Apr 17 21:00:52 2026 GMT
Subject: CN=ee182ade149deae444ee133db6bef6157ff64056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:c0:22:93:ef:ef:fd:7b:20:61:85:72:9a:
75:6a:f7:8f:77:6a:a1:a8:ba:40:6c:a8:1a:ab:ee:
64:75:76:3c:b9:83:40:6f:17:c4:f6:55:45:07:5c:
23:c6:16:ae:3b:ce:cd:05:22:32:df:f5:16:5a:a0:
eb:aa:b9:7e:22:34:9b:73:4e:07:5d:dc:ce:4b:f3:
73:a7:68:1a:7e:2b:f2:78:e6:0d:df:84:8f:b1:ef:
61:cb:c3:47:ba:d4:7c:cd:cb:78:d6:0b:47:c7:fa:
6d:6c:c7:bc:a5:5b:4a:c3:52:e2:83:07:4c:d3:39:
7f:e4:f9:c6:33:41:3e:eb:cb:92:ae:44:8f:cd:38:
27:a4:47:fe:5c:e4:7f:ce:00:69:f8:3e:2b:44:9a:
6d:b9:bd:8c:a1:df:07:7c:71:a1:b1:08:e6:c4:c6:
0c:5a:d1:52:3e:db:e4:a0:0b:d8:de:d9:49:ec:82:
3a:60:d4:ba:79:52:44:c7:80:c8:67:16:f9:71:67:
25:25:b0:f2:85:37:aa:7a:a7:8f:08:04:59:70:bb:
6e:29:4d:c9:89:69:ab:cd:45:28:43:2e:eb:15:59:
fe:d8:b3:54:a1:d8:79:0c:3d:5a:b6:8f:0d:0e:f3:
14:76:f2:55:52:f7:be:63:b5:2c:e2:ab:cf:65:b7:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:18:2A:DE:14:9D:EA:E4:44:EE:13:3D:B6:BE:F6:15:7F:F6:40:56
X509v3 Authority Key Identifier:
keyid:18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0b:6b:20:59:ac:ff:9d:0a:c2:f4:c6:29:31:ab:8a:5d:3d:
e4:cc:d1:56:2d:c3:8b:ed:5e:0b:0b:22:d9:15:2a:5d:09:5a:
64:f3:2d:ff:a0:4a:02:c1:67:f5:3f:f1:09:3f:87:b8:a8:d6:
10:96:47:88:19:3f:28:21:7c:7f:14:7f:b6:de:72:ba:71:60:
df:6a:8e:f0:16:5d:ec:3e:5b:09:43:d8:6c:e7:2f:bd:07:40:
87:07:1f:e9:93:5f:c5:cc:06:db:b8:f6:05:25:dd:0a:2e:5a:
65:74:f1:4c:a5:f2:b0:68:0c:a9:4e:c1:8c:2a:10:43:6e:2c:
67:ea:b2:d1:76:13:55:86:bb:2d:b4:2a:9e:97:b4:84:7e:8f:
b3:a6:d3:25:71:1c:68:f7:81:ff:e1:ef:29:11:91:86:4c:2e:
3e:af:ab:3b:7c:52:7c:c6:58:c5:28:b8:70:6f:29:c2:6f:49:
df:bc:b2:9e:d9:fd:6d:f9:40:e2:6b:4a:25:79:73:23:0e:85:
8d:70:d2:c2:20:ae:27:ef:d6:7e:25:6e:fd:62:66:be:81:8b:
5a:f5:80:74:b6:47:39:8c:ed:5c:88:89:3b:16:97:71:a0:42:
82:6c:d2:c9:3d:d5:2e:e1:6a:cf:2c:e2:f3:74:c6:5d:d7:2e:
a6:df:f6:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGMPFhGyzKreHIuOM/9T+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZjdiY2IwNTA1ZDQ5Njk3ZDZjNTE3MzI0MTU4NjczNmU3
YjBkNzAwHhcNMjYwNDE2MjEwMDUyWhcNMjYwNDE3MjEwMDUyWjAzMTEwLwYDVQQD
EyhlZTE4MmFkZTE0OWRlYWU0NDRlZTEzM2RiNmJlZjYxNTdmZjY0MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp/AIpPv7/17IGGFcpp1avePd2qh
qLpAbKgaq+5kdXY8uYNAbxfE9lVFB1wjxhauO87NBSIy3/UWWqDrqrl+IjSbc04H
XdzOS/Nzp2gafivyeOYN34SPse9hy8NHutR8zct41gtHx/ptbMe8pVtKw1LigwdM
0zl/5PnGM0E+68uSrkSPzTgnpEf+XOR/zgBp+D4rRJptub2Mod8HfHGhsQjmxMYM
WtFSPtvkoAvY3tlJ7II6YNS6eVJEx4DIZxb5cWclJbDyhTeqeqePCARZcLtuKU3J
iWmrzUUoQy7rFVn+2LNUodh5DD1ato8NDvMUdvJVUve+Y7Us4qvPZbdb5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4YKt4UnerkRO4TPba+9hV/9kBWMB8GA1UdIwQY
MBaAFBj3vLBQXUlpfWxRcyQVhnNuew1wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1BlOHNGQmRTV2w5YkZGekpCV0djMjU3RFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMjYyYjAtNWNkMC00ZjQxLTlmNzct
ZTU4NGQ5ZTQ4MDIyLzEvR1BlOHNGQmRTV2w5YkZGekpCV0djMjU3RFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9mMjYyYjAtNWNkMC00ZjQxLTlmNzctZTU4NGQ5ZTQ4MDIy
LzEvR1BlOHNGQmRTV2w5YkZGekpCV0djMjU3RFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwtrIFms
/50KwvTGKTGril095MzRVi3Di+1eCwsi2RUqXQlaZPMt/6BKAsFn9T/xCT+HuKjW
EJZHiBk/KCF8fxR/tt5yunFg32qO8BZd7D5bCUPYbOcvvQdAhwcf6ZNfxcwG27j2
BSXdCi5aZXTxTKXysGgMqU7BjCoQQ24sZ+qy0XYTVYa7LbQqnpe0hH6Ps6bTJXEc
aPeB/+HvKRGRhkwuPq+rO3xSfMZYxSi4cG8pwm9J37yyntn9bflA4mtKJXlzIw6F
jXDSwiCuJ+/WfiVu/WJmvoGLWvWAdLZHOYztXIiJOxaXcaBCgmzSyT3VLuFqzyzi
83TGXdcupt/2Vw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:57 2026 by rpki-client