Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier: 84e+SMFl+Ajnb7rLXtfe5opiTyZMSuU9pmECFf7/VSs=
Subject key identifier: 47:97:6C:2B:53:F7:14:C4:B3:23:93:8D:0E:A6:F9:0B:33:3D:63:44
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 019D98BD23513C5FAF4BCF79ECA50DD625C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:00:25 +0000
Manifest this update: Fri 17 Apr 2026 00:00:25 +0000
Manifest next update: Sat 18 Apr 2026 00:00:25 +0000
Files and hashes: 1: GHGkwEVylqYxr15hWfLzxHp9MA0.roa (hash: 6MgKNZ/wr6UP8/R75FjFSF75c2qdb4J/GZr8B0Cgj+s=)
2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: E31xXR1Z3eJzVZ2/KZEy4oON+e0iXtZ6ZkvVQuFQW04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:23:51:3c:5f:af:4b:cf:79:ec:a5:0d:d6:25:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Apr 17 00:00:25 2026 GMT
Not After : Apr 18 00:00:25 2026 GMT
Subject: CN=47976c2b53f714c4b323938d0ea6f90b333d6344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:9e:d6:a9:04:0c:da:cb:6c:ac:44:7a:5b:
80:5f:d3:1f:c9:1b:31:86:71:0c:67:ac:30:82:de:
07:2a:fc:66:06:69:89:22:35:77:78:56:b0:4c:94:
86:3a:06:a1:9e:e4:2f:22:e6:e4:c3:20:d6:e6:15:
0f:4d:1d:6d:be:a1:14:44:f1:71:4a:36:89:ef:a8:
ac:fe:6f:72:ab:6c:c3:b4:e4:87:75:e2:01:be:74:
ef:99:0b:95:45:09:3d:78:67:71:06:52:a8:19:d2:
1f:e6:08:1e:ef:18:81:e8:00:82:ad:dc:63:bf:5e:
20:ed:99:8b:fe:44:3a:a0:ed:f8:20:e5:49:32:6a:
ef:68:47:9e:bf:74:f1:7c:c6:b5:44:dc:02:62:dd:
a0:1d:00:c3:56:00:af:59:a4:6f:33:d4:7d:56:af:
1e:da:5c:8a:0a:f5:a0:63:70:8c:41:56:63:fa:82:
8e:63:99:ad:23:00:60:6f:ad:e1:5a:27:92:5d:70:
c6:0e:b0:c2:f0:27:ec:31:b6:04:58:fc:18:ca:0a:
64:80:30:30:26:f2:dc:e8:f2:dc:5a:eb:28:4e:9a:
63:75:ba:3f:b8:3b:fc:61:a0:90:37:e3:80:b9:5e:
a4:b8:b1:8b:e1:ed:6a:21:05:c3:a3:98:4e:6c:7b:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:97:6C:2B:53:F7:14:C4:B3:23:93:8D:0E:A6:F9:0B:33:3D:63:44
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d3:35:e4:5e:58:b6:59:99:f0:34:88:75:e9:b7:7f:24:82:
3f:b3:10:90:29:1e:cf:8e:77:43:36:4e:10:86:80:30:de:fb:
9a:4d:ea:be:77:12:63:36:d2:b2:33:f8:87:ec:5a:e4:72:43:
a0:37:24:00:87:bb:28:03:9f:08:fa:1e:f3:35:b3:df:a5:8d:
53:9b:7c:01:d6:01:b3:55:90:20:6e:fe:0b:ae:4d:60:66:3f:
57:1d:d0:8b:5f:2d:59:96:96:1e:20:2b:83:bb:f4:9e:93:e4:
42:93:20:bb:73:31:b2:b2:60:ee:0d:5f:20:78:23:02:d7:03:
14:3c:93:23:d3:0c:06:52:96:f8:3c:dd:aa:c9:65:04:b3:0e:
2e:61:57:dc:11:18:76:91:9b:9e:59:c9:1b:2d:76:7f:9d:01:
0b:07:06:69:b1:cf:98:33:5e:1b:46:8a:98:8f:cc:45:0d:f1:
72:4b:f5:54:a8:f0:8f:e6:26:c0:87:b7:eb:6f:35:44:0d:db:
c9:9d:88:ae:b8:15:d5:7e:f7:8e:22:86:d6:b1:57:6b:a8:1f:
25:22:7d:29:89:27:20:68:de:af:35:c6:29:c3:ec:f7:14:e9:
19:6a:46:87:31:12:cc:b3:04:f8:53:57:3d:95:72:9b:85:d6:
92:d0:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:21 2026 by rpki-client