Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: f8+UrOTSOXikl1gw4E2Lywr5GlG74XI+5pa7ePI6eLw=
Subject key identifier: E5:8F:12:9B:4E:84:F1:D7:06:D4:A5:C5:99:EB:07:D4:96:A1:04:1C
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 019D9BBF228D3E349E00FAE14AFA126B213A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 15DB
Signing time: Fri 17 Apr 2026 14:01:27 +0000
Manifest this update: Fri 17 Apr 2026 14:01:27 +0000
Manifest next update: Sat 18 Apr 2026 14:01:27 +0000
Files and hashes: 1: 1-6iaGXxnmZAQPnrgq_8F_icO1g4.roa (hash: 0E9/yZaAdb1/Mv9Vi0wA6mVdKYXwLD+kDlf9BylOAkE=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: YPFmhLBbPwSufzpCYvKR/necpNX1KAJnCbui9ld7XvI=)
3: cDH3zRFxxa5MCdHGhfO_X-DrZiY.roa (hash: XO1nhE/daEhAYwuXZgOrEgjLVoR1QTpbhv4y3qZNEo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:22:8d:3e:34:9e:00:fa:e1:4a:fa:12:6b:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Apr 17 14:01:27 2026 GMT
Not After : Apr 18 14:01:27 2026 GMT
Subject: CN=e58f129b4e84f1d706d4a5c599eb07d496a1041c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:1f:8c:54:3b:41:93:0a:cd:e8:65:e1:5a:
4d:59:5d:ce:b5:69:84:cc:b7:ed:1f:db:f4:91:3d:
c1:51:92:fd:dd:f1:0b:a0:1a:e9:fb:05:46:7d:d2:
d5:7e:8f:51:05:f0:33:b7:a5:3d:ad:31:91:1c:e3:
b5:b6:ce:88:28:ab:21:51:c8:f6:f5:89:11:7f:b1:
f2:da:16:5b:c7:0d:64:35:e2:99:6f:e2:e2:4a:7c:
fc:63:61:b3:45:79:c0:1a:15:61:91:f5:e2:da:bf:
78:7f:47:88:32:0f:ee:57:ab:71:0c:59:3d:95:b3:
1c:51:aa:cf:0d:fe:1d:53:9b:6d:cd:5c:35:89:27:
c0:b4:9a:97:8f:1d:46:ab:eb:40:7d:6c:27:e2:0a:
b2:14:0a:98:6e:65:8e:1a:93:4f:01:9d:3e:48:a6:
97:47:30:68:d1:39:1a:c0:f8:bb:f1:42:2e:78:e3:
b8:39:fc:c3:38:93:3f:23:cc:bb:6a:f1:b5:5a:c7:
ef:4c:fb:15:66:47:77:33:c3:19:6b:f1:fe:2c:85:
33:93:3b:6a:f7:63:66:1b:7d:a6:98:09:36:c7:38:
8d:2d:cb:cf:6b:59:fd:97:98:79:54:2c:90:e1:75:
23:5e:e5:6e:14:ee:de:dd:ff:ad:de:b2:ef:76:40:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8F:12:9B:4E:84:F1:D7:06:D4:A5:C5:99:EB:07:D4:96:A1:04:1C
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ee:0d:7a:2c:91:f7:6d:42:43:aa:82:fd:ae:b8:03:d5:4b:
03:df:03:a2:2d:6c:5b:ba:4b:82:69:5e:fc:8a:28:d3:9b:31:
16:ec:ce:65:f6:f0:54:47:78:20:74:c0:76:f4:5d:94:5a:fb:
88:db:a4:bb:fd:5d:8d:ce:be:cb:57:ea:13:7a:57:8f:9a:c1:
76:63:85:1e:78:ef:5a:98:c4:bc:97:e7:2d:26:86:e9:99:f3:
b1:e4:57:84:22:10:24:4c:a7:01:dc:a6:d1:fd:44:a9:0a:65:
35:e3:c2:81:a0:47:66:33:f5:1b:f8:58:b2:63:47:26:11:8b:
11:38:86:b6:cd:c3:ad:7b:b1:5c:8b:bb:a7:8a:1d:86:03:a5:
ad:35:9b:93:02:7b:1f:aa:c5:c2:be:14:26:a4:a0:68:7f:7a:
cf:81:e5:53:ea:dd:ef:73:1f:65:65:b9:da:6b:b2:9a:3c:b3:
19:33:5b:62:b1:e1:bd:e1:25:7d:3c:6b:23:ea:0e:c2:ea:0a:
59:54:6f:b3:1d:fc:04:04:33:8a:53:18:a5:8e:9a:b0:2e:98:
1a:a6:76:22:00:81:1f:43:90:cd:d9:aa:12:5a:5c:c4:95:19:
48:2a:f7:67:5e:0b:b7:54:ec:4d:f9:dd:92:de:bd:36:dd:ad:
4d:e9:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:43:44 2026 by rpki-client