Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json)
Hash identifier: +GeTIVMYsNSPvAgLJL64FahZXCiHLHE9QKoC9beRfdw=
Subject key identifier: 8F:7D:29:00:4F:63:34:D7:11:1B:07:AD:56:00:5C:87:DF:F9:7C:93
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial: 019D9B50918F2788177A4EF948E3D1AFFE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
Manifest number: 0C36
Signing time: Fri 17 Apr 2026 12:00:41 +0000
Manifest this update: Fri 17 Apr 2026 12:00:41 +0000
Manifest next update: Sat 18 Apr 2026 12:00:41 +0000
Files and hashes: 1: IVL7dLrg6wGDU1LsfYsBBP5fLww.roa (hash: nXXz2gE0BqsxA3+AlASgnT6agymsn4mqf9G776nMdI8=)
2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: fJx1rIcPjkvUzyEF6V0tjxQN3BLefY3wZRwI1HoAIB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:91:8f:27:88:17:7a:4e:f9:48:e3:d1:af:fe:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Validity
Not Before: Apr 17 12:00:41 2026 GMT
Not After : Apr 18 12:00:41 2026 GMT
Subject: CN=8f7d29004f6334d7111b07ad56005c87dff97c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:70:bf:05:6c:bd:7e:3a:56:92:ee:3a:fa:28:
b9:89:60:e0:af:04:67:f2:77:6d:9b:d0:2f:8e:1b:
c4:5c:c9:b3:bb:53:59:1e:e1:28:96:b3:da:2e:04:
1b:f3:d9:15:0b:3c:83:9d:a7:49:a9:73:3e:1f:fb:
3a:d6:e4:fa:68:ec:dd:87:8f:52:ae:a5:eb:84:99:
03:91:71:40:c5:e0:6c:ea:7e:da:30:f5:6d:19:19:
84:97:36:a8:01:9d:6b:c9:c6:db:fa:ea:38:83:07:
0b:4d:e7:1a:a7:48:ea:c3:ac:6a:c3:02:34:b9:2f:
79:27:6d:fb:2d:d9:2f:19:23:8d:cb:b6:5c:b7:79:
29:b7:37:62:85:94:4b:fa:33:a0:e5:db:6d:2a:87:
a7:a4:68:00:d3:67:fc:19:cd:8a:ef:1a:ad:0c:19:
66:6a:6c:1a:1b:64:0c:2a:3d:c7:1a:aa:ef:cd:0b:
1b:e9:e7:c4:41:9a:02:30:3a:2e:f3:d1:7d:e6:bc:
ca:0c:6b:7c:5c:6a:f7:63:fc:47:02:76:37:4c:a8:
34:42:91:bd:45:a0:11:b9:89:37:f5:fa:98:2c:28:
c3:c9:4b:ed:22:2a:50:30:fc:57:d9:3e:ed:ec:5b:
12:cf:97:7c:a7:27:d2:a5:a4:bf:3c:bf:c6:ef:32:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7D:29:00:4F:63:34:D7:11:1B:07:AD:56:00:5C:87:DF:F9:7C:93
X509v3 Authority Key Identifier:
keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ed:12:70:de:cf:4a:54:32:29:63:c6:45:05:7d:a1:12:d5:
1c:2e:32:f6:a2:46:e3:c2:59:eb:70:53:c3:f2:04:0c:87:ce:
ca:c5:63:3d:a4:ee:02:52:d7:40:27:25:ab:77:00:b3:bb:bf:
28:3e:6a:36:d5:26:4a:e0:76:76:dd:86:89:6d:37:b2:ac:c8:
c3:d0:08:c4:04:40:d7:88:07:ca:63:6b:30:32:45:90:7c:2a:
2c:4e:83:06:e6:a5:26:92:c5:b2:7f:71:3a:59:fc:e9:c6:d2:
38:e4:38:a0:5e:38:1f:c6:de:59:76:83:eb:27:f8:26:fd:0e:
51:1c:e1:40:73:ed:3f:1f:01:ce:5f:b3:52:4a:66:63:a8:64:
f2:02:9d:a8:d0:ca:45:e4:9f:83:fb:6c:9e:1b:5e:80:1f:7a:
d5:f2:c9:37:de:90:59:3c:95:1a:d3:47:20:e6:cb:56:02:5b:
fd:46:2e:5a:96:f4:10:22:72:29:27:f3:a6:c9:36:5a:ea:17:
59:c3:a4:64:84:c4:c2:00:18:a5:2e:8c:c0:37:86:52:5c:02:
5e:22:04:bc:49:a8:0d:f4:3a:36:47:9c:ca:a2:a3:1e:3d:59:
6a:60:b2:56:1f:89:f7:b9:2e:60:8c:bf:ca:91:da:d8:f6:41:
06:f5:99:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:02:46 2026 by rpki-client