Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier: KkkpeQgvrltQK0mfr7JcRYw6lWhA5rRjbWCMZ0nSLYg=
Subject key identifier: 5A:93:BB:BF:92:17:8E:92:9E:BC:40:06:63:29:B5:8B:0C:60:E1:04
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial: 019D9A071F9875C1490E46C838E324FE44C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 06:00:51 +0000
Manifest this update: Fri 17 Apr 2026 06:00:51 +0000
Manifest next update: Sat 18 Apr 2026 06:00:51 +0000
Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: 1ZxxwySODF7qJnIWoL7xfuhnsvJPscAUrpcNthaBuCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:1f:98:75:c1:49:0e:46:c8:38:e3:24:fe:44:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Validity
Not Before: Apr 17 06:00:51 2026 GMT
Not After : Apr 18 06:00:51 2026 GMT
Subject: CN=5a93bbbf92178e929ebc40066329b58b0c60e104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:a0:81:ed:92:02:8c:97:0f:cc:69:6e:8e:
39:68:e4:d8:30:1a:b9:3e:0c:89:06:ce:18:f7:5e:
ff:1a:2f:85:f0:78:00:59:89:e7:1e:bf:b7:ed:ab:
06:0a:59:2a:67:dd:9d:8c:42:b4:fe:92:69:b2:fc:
2c:18:2f:ff:2f:30:3a:b8:f5:0f:87:e8:11:05:d0:
29:0c:74:3c:42:24:08:07:26:54:e0:36:9c:12:71:
4c:5b:7f:6e:db:ca:cf:af:c0:52:f8:38:47:90:2b:
5f:e8:07:1a:07:b8:ce:ec:4a:c2:9e:31:d8:c2:93:
ea:bc:03:87:67:1d:ad:23:b8:da:68:b6:3c:17:a0:
ec:6b:7e:f8:91:38:32:45:10:13:43:e8:77:e3:06:
8c:8e:f6:a3:ad:e5:52:34:8e:da:3e:e0:2a:b9:a6:
01:a8:c2:13:40:be:4c:be:8a:df:af:46:0b:a8:5f:
3a:39:70:3f:b7:ac:3e:73:14:50:e6:ff:23:5d:73:
a6:ef:bc:0c:63:b6:78:44:1c:43:fd:21:20:b1:66:
ce:40:1d:47:fe:f2:56:32:7d:02:64:51:e6:de:7f:
d8:30:34:a4:58:02:01:2c:0b:f7:c4:f6:85:cd:a7:
59:98:9e:9f:30:5a:d3:c5:b8:7b:bf:52:58:fc:d8:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:93:BB:BF:92:17:8E:92:9E:BC:40:06:63:29:B5:8B:0C:60:E1:04
X509v3 Authority Key Identifier:
keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5e:fb:d7:68:9a:ed:95:c4:8c:ee:a7:64:3d:9a:a2:09:ba:
76:74:25:c6:b1:f5:51:ba:1e:b4:66:50:99:ae:a9:2c:f9:c4:
30:e3:6c:81:9a:44:5b:a7:88:83:87:67:d1:3e:1d:7a:b4:c5:
ed:01:14:48:65:89:8b:ba:fd:d5:44:89:38:63:98:2d:ad:c4:
22:25:0f:61:c7:1c:85:cd:21:d1:23:9f:b1:e9:db:a1:0a:bb:
9b:e4:2e:c8:af:f2:34:4d:05:11:e9:51:3a:d6:1e:09:d3:c5:
4d:6d:37:fa:a5:8d:ea:97:5c:74:cf:40:10:a6:a9:3c:ae:5f:
1f:86:50:fa:e4:92:97:e4:d1:5f:9e:cb:2e:9a:06:62:41:50:
98:26:c5:c8:a0:dc:11:c3:02:e6:79:e7:65:5a:38:af:df:0f:
74:db:cf:c3:cc:29:12:7f:3a:ce:96:7c:ba:e2:ef:1f:a3:ff:
bc:f7:8e:bc:4e:6c:04:ee:64:45:ef:3c:42:12:44:04:66:b4:
3c:d4:dc:69:3c:fd:99:5c:2f:54:4e:84:c4:5e:c1:93:76:2e:
2d:f5:9f:82:bd:32:be:d9:ca:5f:dc:8e:d4:fe:41:e8:5a:81:
3f:27:81:1e:63:32:15:7a:1d:82:ce:b1:09:4c:4e:bf:47:a8:
8e:39:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:47 2026 by rpki-client