Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: RWNiW1IXO+QhQpZBBcRvxA96qkaz2252ZAluC+qdi3g=
Subject key identifier: 80:E7:90:C0:14:50:60:23:CF:72:82:36:CE:13:CC:BF:1D:19:6C:DD
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 019D9AE2DE827D35E1B2333AFA1A6F1626A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0CDA
Signing time: Fri 17 Apr 2026 10:00:52 +0000
Manifest this update: Fri 17 Apr 2026 10:00:52 +0000
Manifest next update: Sat 18 Apr 2026 10:00:52 +0000
Files and hashes: 1: M00pliKuNDats_ZC6HyNepm6oHs.asa (hash: G3itmzhXQg35jkvFpR4kKmB9KsdkESgaFNJeidZ7FPE=)
2: TtXo5-QRvXwKIgknKnZ4_4t2vL8.roa (hash: mXHeMxujxsacK8/QlflktbO+DxAXX0UCko2MtIwDM0I=)
3: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: uhzqBcYyeozXE35cuewMdIEaXshPdkm4i6DGyBHBua0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:de:82:7d:35:e1:b2:33:3a:fa:1a:6f:16:26:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Apr 17 10:00:52 2026 GMT
Not After : Apr 18 10:00:52 2026 GMT
Subject: CN=80e790c014506023cf728236ce13ccbf1d196cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:ab:1b:f0:a2:f9:ed:b7:a2:00:fb:cc:2e:
67:08:b8:31:dd:61:98:e1:de:73:4a:15:72:d7:47:
69:42:d4:b2:9e:aa:de:88:3b:f7:70:06:1b:7d:c7:
35:a9:c3:a9:e5:96:ed:89:68:a4:6d:ee:af:47:85:
19:1a:f6:35:dd:48:6b:42:ad:dc:dd:da:6c:1d:8c:
97:b0:a6:10:4b:5b:47:81:f4:59:0d:ce:55:ff:d0:
be:37:87:d2:66:60:94:19:ac:2e:09:e1:43:71:da:
12:bd:2c:a8:e7:e9:d9:e5:58:db:cd:c7:42:22:08:
73:df:15:11:96:3f:e4:11:e3:36:8c:d1:1c:5c:bc:
34:a1:2f:51:d5:ec:ee:01:d0:75:d3:bc:66:7a:c3:
56:1a:31:99:41:ff:97:04:6d:a1:08:7b:76:a2:21:
21:73:00:6c:39:d2:38:3b:f8:c9:28:18:e0:c1:1e:
ec:54:d2:e1:02:2b:16:e9:7e:97:8f:6d:73:0c:a1:
ed:ed:f8:75:36:18:b9:55:57:28:37:7d:7b:d5:c2:
e7:0f:9b:ae:a0:a4:a1:da:96:e2:28:49:e7:2d:0c:
97:a7:4f:68:a0:6f:9d:d0:60:77:53:e7:ae:75:9c:
61:d9:c2:23:f5:e4:48:d6:0e:40:2a:70:34:af:ba:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E7:90:C0:14:50:60:23:CF:72:82:36:CE:13:CC:BF:1D:19:6C:DD
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cc:f3:94:32:ef:30:23:e8:4f:0d:f9:87:76:37:a7:a5:eb:
20:20:c3:ae:38:d8:8d:ab:4c:81:72:79:fc:ad:94:37:4d:7b:
58:51:be:b2:97:ff:f0:b9:a8:be:73:90:0f:1d:1b:23:76:05:
8d:eb:19:1a:12:51:1c:45:19:96:ca:8d:6d:b5:7a:c1:c4:0b:
5d:6f:db:83:01:f5:c2:44:b3:7d:c2:f1:dd:fe:88:fc:ac:90:
52:3c:6c:49:fa:ab:6c:48:62:ea:43:76:87:01:bb:82:ba:2c:
a4:a3:93:e9:e9:db:ac:30:a4:d8:97:1f:1e:ab:86:e6:c9:09:
3d:75:12:e3:6b:c0:aa:88:6f:ca:6a:07:09:6f:6a:39:98:71:
a8:19:2f:3c:7f:b8:9d:b7:2c:1b:81:e1:22:44:51:53:e4:68:
b3:14:ee:32:b2:a2:0d:f7:d0:89:1a:62:1e:94:9c:39:6d:2c:
ef:8f:01:9e:69:a6:11:b9:85:b5:01:ee:0e:b5:b6:a0:bf:c7:
ca:57:ec:b9:b3:4a:20:3a:6a:db:69:ed:e0:54:0e:2d:d5:56:
1e:40:ac:23:5b:e4:83:53:5a:48:d5:aa:62:98:2f:9c:79:f6:
28:6b:07:3e:e8:1a:59:ff:11:67:e2:27:8f:a8:19:a8:fa:7b:
b7:e8:be:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:00:53 2026 by rpki-client