Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: PdvhDcF6gWOKhG0aKbkCr2mycOLo4BiUj4J9pGB/j6o=
Subject key identifier: A0:3C:59:36:6C:52:4F:04:AA:BD:81:08:E3:97:A8:22:FE:41:29:EE
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 019D992B1DA8EED74CF0B32ECDBADF725652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:32 +0000
Manifest this update: Fri 17 Apr 2026 02:00:32 +0000
Manifest next update: Sat 18 Apr 2026 02:00:32 +0000
Files and hashes: 1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: aFHDmB4aK4xspjxVQwSOR0KJ/etxizcqmiyANZniAug=)
3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:1d:a8:ee:d7:4c:f0:b3:2e:cd:ba:df:72:56:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Apr 17 02:00:32 2026 GMT
Not After : Apr 18 02:00:32 2026 GMT
Subject: CN=a03c59366c524f04aabd8108e397a822fe4129ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a8:19:ac:aa:08:08:10:e3:43:5f:91:d7:c9:
ab:5f:d4:d8:ca:29:80:1d:08:65:c4:94:2a:c8:cb:
2c:49:17:29:72:6d:b0:32:42:8b:54:ee:49:a1:d2:
19:33:2d:ae:2f:b2:7e:1b:83:22:39:71:22:9e:c7:
14:8a:66:2e:60:c7:e7:75:22:4f:d2:06:61:f3:8d:
9d:6a:bb:81:bb:c5:85:2e:e4:ba:bf:6b:6f:d7:2c:
b0:dc:8c:77:da:84:89:a9:a3:ed:37:63:10:7b:3d:
69:ab:e0:51:aa:3d:b5:0a:40:56:14:10:92:62:d0:
46:d8:b6:bc:98:93:87:4c:ff:6e:6b:02:9a:01:e0:
47:16:38:21:de:4c:e0:f5:0f:0a:a5:ee:94:c3:0f:
09:51:09:68:ee:dd:f6:64:2c:2e:6e:78:29:e9:4f:
8f:4a:65:eb:ff:40:7d:59:eb:81:b0:9d:52:47:10:
2d:3f:5e:91:93:e5:f7:3c:5d:e8:e8:7f:da:4b:bf:
20:9e:7b:f8:80:78:04:32:29:05:e0:0b:ac:51:53:
2f:51:f0:d5:08:a1:a8:54:01:28:58:13:79:56:3f:
bc:09:3b:9d:a0:7a:e7:da:e1:84:6c:08:36:a1:54:
2f:db:74:c4:23:65:c1:76:26:59:fe:d0:f4:a7:64:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3C:59:36:6C:52:4F:04:AA:BD:81:08:E3:97:A8:22:FE:41:29:EE
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6f:10:34:1f:02:d6:14:af:63:03:e2:35:50:be:aa:14:24:
94:01:5a:cb:a4:8b:d4:b6:75:80:1c:d2:79:f5:0c:d7:8c:d1:
72:04:a6:c6:e9:8d:dc:cc:ee:30:69:88:a9:91:03:dd:f4:7b:
6d:77:5c:7b:4e:74:12:01:a5:77:9d:6e:c8:83:a8:91:8d:52:
83:93:8b:df:6a:61:a6:c2:66:fb:11:cd:31:81:ba:d1:4f:bf:
93:dd:83:e5:c4:8f:fb:e3:87:f4:24:2a:80:5f:3d:43:4f:5e:
a7:ec:89:21:68:fd:90:e3:c2:62:41:85:c0:9d:1f:e5:cf:3b:
d1:0b:f6:15:2d:d2:0e:64:2f:38:4a:e9:e1:b7:76:c2:85:1d:
02:9f:9a:f4:8a:b8:50:cf:e6:23:e2:fd:53:ac:4a:d5:05:6b:
40:e1:97:2a:9e:f2:80:cd:c0:86:2f:5d:1d:00:8b:43:d5:6d:
18:9d:94:74:63:7f:ed:67:a9:2d:e8:ba:46:7d:c9:aa:12:5b:
df:b7:a4:b9:4e:91:21:78:44:d9:bf:1b:90:16:dd:3e:b9:28:
92:54:10:04:4d:65:7c:71:cd:e5:7a:aa:43:bd:3d:62:83:30:
0b:8e:ce:9b:9c:a1:04:72:42:d5:f9:86:1f:4c:6b:67:a3:eb:
33:58:7e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:21 2026 by rpki-client