Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
File: GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft (raw, json)
Hash identifier: lAUEoAmjiRATJvrPwreK0XjvpEyrxHwlNd81XJ6FZcI=
Subject key identifier: E1:8A:39:19:73:CE:96:8E:4D:B1:BF:F7:8E:E6:E9:70:A9:80:15:87
Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
Certificate issuer: /CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Certificate serial: 019D992BBEF2788020458B82C9DF93D7F741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:01:14 +0000
Manifest this update: Fri 17 Apr 2026 02:01:14 +0000
Manifest next update: Sat 18 Apr 2026 02:01:14 +0000
Files and hashes: 1: 2gMkKbJA554Yq2voG-iU3zjpglc.roa (hash: wMFCnORiTnuilB2AGLAPYKYN/hd+vlQrA8D8lSugV4Y=)
2: GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl (hash: HOMzLnQSvbonOyOUiuvnR6GNpZkXK+/u8EPsI1jj9Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:be:f2:78:80:20:45:8b:82:c9:df:93:d7:f7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Validity
Not Before: Apr 17 02:01:14 2026 GMT
Not After : Apr 18 02:01:14 2026 GMT
Subject: CN=e18a391973ce968e4db1bff78ee6e970a9801587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:14:2c:29:a3:5e:69:5b:59:61:47:7c:4d:33:
96:1e:f2:e6:e6:ab:74:1f:f2:ef:63:b2:99:65:1d:
6b:30:79:39:08:87:b5:0a:44:cd:ec:19:1d:7f:4b:
00:1f:ee:bb:1b:66:eb:27:ea:f5:c5:40:c4:fd:73:
f2:5c:57:04:e6:bc:f9:f2:a1:8b:43:fd:52:a3:ae:
7e:c6:91:d4:78:57:e1:54:83:d4:51:2d:2c:9e:f1:
10:07:c8:cf:68:da:f8:01:99:be:05:97:7e:9e:7c:
38:90:cb:c0:42:7f:6a:c2:d1:e9:4d:82:ea:8c:1e:
dc:47:b2:f7:bb:78:21:95:1f:ae:20:f0:c7:cc:dc:
46:35:e9:82:c4:4f:38:6e:32:b9:5d:3c:cd:6c:d2:
31:50:a9:d0:43:ad:b0:5e:c7:26:5b:ed:9f:af:30:
5b:6d:57:b0:b4:1b:f7:98:28:6a:e9:e3:63:db:8a:
97:15:c0:22:c9:fd:f5:e8:ab:3c:b3:da:0b:a8:ed:
a5:18:55:6b:f1:f3:b3:78:b1:1d:fc:68:ff:3a:07:
52:63:bc:8b:1c:a9:aa:6f:93:2e:f3:4d:cb:da:65:
d7:bb:aa:68:b2:de:31:e8:66:73:49:af:be:a7:1e:
fc:19:1e:96:0d:40:f0:4a:9d:62:65:95:c3:a1:ed:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8A:39:19:73:CE:96:8E:4D:B1:BF:F7:8E:E6:E9:70:A9:80:15:87
X509v3 Authority Key Identifier:
keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:33:d7:dd:7c:27:71:68:d4:f5:8c:c0:33:d7:5d:9f:49:ab:
88:06:fb:38:b0:9f:86:74:c7:78:9b:8c:64:e4:6e:d2:73:f6:
b5:40:68:4f:06:8b:f0:21:2b:7e:07:eb:4f:13:9b:af:f1:e3:
b9:08:6d:ef:73:0a:77:a1:68:09:1a:e0:79:ce:08:20:3a:7b:
5a:3a:26:69:5e:e1:c6:fc:c5:89:6b:38:26:84:fb:aa:3c:34:
0c:99:b7:0b:8e:58:c2:08:c6:d7:4a:f5:43:ed:25:05:2d:ff:
64:d4:57:64:ed:2e:9d:84:50:a6:8e:13:21:02:58:1c:4e:12:
18:45:29:b7:3d:84:fd:df:dc:eb:c3:d4:d9:5f:0e:2e:c5:9a:
08:34:07:59:54:5f:f1:e1:09:71:5e:16:da:99:ac:97:aa:04:
ef:5e:99:2a:77:c2:06:7b:4d:93:72:a7:55:b0:d8:7b:fa:27:
b4:87:7d:69:4b:4c:63:d2:06:2e:3b:b7:46:29:7b:d2:13:fb:
01:98:97:f7:fd:af:01:79:6e:1a:63:dd:70:2e:d2:ce:cc:7b:
72:ff:1f:c6:c9:0c:24:db:95:f2:34:38:43:c4:45:39:19:d4:
58:4d:8f:3b:48:6c:13:13:75:47:94:9f:77:c3:01:64:d7:6b:
af:2c:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:04 2026 by rpki-client