Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
File: gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft (raw, json)
Hash identifier: K/LJR3lLagwQRzFS0kHXOW83XODQLqq9cP5MhBP4mhM=
Subject key identifier: C1:8D:D4:08:84:E1:9C:82:41:6D:01:00:BE:4D:7D:F5:7B:1D:B2:8F
Authority key identifier: 81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
Certificate issuer: /CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Certificate serial: 019D9B878AB15D65755E282BD0029F315F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
Manifest number: 1605
Signing time: Fri 17 Apr 2026 13:00:44 +0000
Manifest this update: Fri 17 Apr 2026 13:00:44 +0000
Manifest next update: Sat 18 Apr 2026 13:00:44 +0000
Files and hashes: 1: 61ONFvLT5Rg0-imK5TJAXsyuc_s.roa (hash: 7I5ltFHrgSt2SphyinCJqzIRRXKzrlYeALmK4YgvaSA=)
2: gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl (hash: KfEivaKqg45DWQsNyNh41uT3k+h3S4464JfNX83GdSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:8a:b1:5d:65:75:5e:28:2b:d0:02:9f:31:5f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Validity
Not Before: Apr 17 13:00:44 2026 GMT
Not After : Apr 18 13:00:44 2026 GMT
Subject: CN=c18dd40884e19c82416d0100be4d7df57b1db28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:30:f2:8d:0f:49:d6:46:8b:ef:f7:29:d0:
6a:ad:3f:95:ce:96:07:ff:83:47:98:4a:ea:bf:0a:
ae:c4:79:a6:e6:b7:ff:55:6a:87:9a:f3:80:d4:b9:
f2:18:41:af:8b:8c:c1:a3:d9:db:1b:ae:2c:c8:f9:
8f:16:49:b2:09:f5:14:33:ce:ca:fa:35:28:af:bc:
08:93:16:3b:13:87:50:51:cc:00:28:0b:a3:a1:35:
89:b0:35:d8:0b:86:74:7a:eb:39:41:f2:cc:13:9b:
7e:f4:17:52:16:e7:38:54:dd:b6:59:be:55:9f:bf:
a3:d4:28:8a:fb:20:33:c1:fa:56:2d:3c:5e:b5:eb:
52:69:b5:76:a0:b1:28:48:65:f8:2d:0f:1a:de:af:
13:f9:7a:ea:70:e9:ae:05:a2:e1:72:38:0f:dd:16:
00:97:b1:1a:9c:b5:cd:6d:f0:06:4f:b2:d6:5d:85:
27:2d:ed:2f:e8:20:93:5f:19:de:16:1f:a9:96:d2:
3f:bf:81:c3:b4:37:e6:e8:f5:9e:1f:84:07:39:d7:
dc:02:8b:c9:ba:f3:49:80:5d:91:ac:2a:7e:c1:d0:
bc:c9:80:01:1b:ab:47:63:80:ad:07:27:1b:c3:3c:
d7:ac:42:cd:fb:df:87:0e:3b:23:5f:e2:8f:ed:dd:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8D:D4:08:84:E1:9C:82:41:6D:01:00:BE:4D:7D:F5:7B:1D:B2:8F
X509v3 Authority Key Identifier:
keyid:81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e7:af:a8:86:0b:21:8a:c6:98:9d:42:45:94:55:79:9d:90:
0d:11:13:c0:94:4d:ed:07:d3:cf:ae:29:92:ba:6c:8e:3e:86:
4f:e7:ae:66:e2:2a:2a:d5:e8:49:16:7e:64:31:22:48:d5:f4:
68:29:8a:71:56:af:37:75:92:2b:6e:d4:9d:78:5f:8a:30:e5:
97:2d:87:24:ba:3c:13:0b:48:4e:ed:12:93:6e:03:61:c3:42:
6c:e2:77:41:1b:3a:0c:b9:da:47:61:f1:7f:b5:5f:8f:24:5c:
0d:ed:00:17:3c:35:c4:e3:0b:62:51:7d:eb:1d:d4:6e:db:43:
6a:96:d7:7c:ec:2f:4f:d8:a9:e5:5e:b8:6d:ba:42:c5:d6:78:
62:f8:63:b2:c1:a0:54:d7:be:d8:00:cb:37:ff:a9:80:66:9e:
ab:57:2f:d6:93:56:f4:1e:bd:d7:9d:a5:e6:d0:d5:c4:ca:68:
17:81:bb:29:7c:a1:00:63:c8:64:f8:10:59:60:93:b3:19:5d:
5e:30:db:f2:c8:90:8a:c3:f3:4d:49:fc:14:f2:0a:62:8c:74:
38:91:38:0e:e2:c2:5b:5a:35:8b:34:42:20:77:42:9d:a2:d5:
0b:2a:d9:12:d6:16:bb:5e:dc:88:4c:6b:c7:58:47:2e:68:69:
e1:3e:51:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh4qxXWV1Xigr0AKfMV94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTAyMWQ1NDBlZDdkODJjNjkwYWRjMDRmYmQ5ZGQ2ZWU1
MGU4ZDUwHhcNMjYwNDE3MTMwMDQ0WhcNMjYwNDE4MTMwMDQ0WjAzMTEwLwYDVQQD
EyhjMThkZDQwODg0ZTE5YzgyNDE2ZDAxMDBiZTRkN2RmNTdiMWRiMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr8w8o0PSdZGi+/3KdBqrT+VzpYH
/4NHmErqvwquxHmm5rf/VWqHmvOA1LnyGEGvi4zBo9nbG64syPmPFkmyCfUUM87K
+jUor7wIkxY7E4dQUcwAKAujoTWJsDXYC4Z0eus5QfLME5t+9BdSFuc4VN22Wb5V
n7+j1CiK+yAzwfpWLTxetetSabV2oLEoSGX4LQ8a3q8T+XrqcOmuBaLhcjgP3RYA
l7EanLXNbfAGT7LWXYUnLe0v6CCTXxneFh+pltI/v4HDtDfm6PWeH4QHOdfcAovJ
uvNJgF2RrCp+wdC8yYABG6tHY4CtBycbwzzXrELN+9+HDjsjX+KP7d3TNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGN1AiE4ZyCQW0BAL5NffV7HbKPMB8GA1UdIwQY
MBaAFIGgIdVA7X2CxpCtwE+9ndbuUOjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FBaDFVRHRmWUxHa0szQVQ3MmQxdTVRNk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMmI5NDYtMWI0YS00MjE0LTkyMzQt
YWQwMjczMjdmOWQ4LzEvZ2FBaDFVRHRmWUxHa0szQVQ3MmQxdTVRNk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lMmI5NDYtMWI0YS00MjE0LTkyMzQtYWQwMjczMjdmOWQ4
LzEvZ2FBaDFVRHRmWUxHa0szQVQ3MmQxdTVRNk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeevqIYL
IYrGmJ1CRZRVeZ2QDRETwJRN7QfTz64pkrpsjj6GT+euZuIqKtXoSRZ+ZDEiSNX0
aCmKcVavN3WSK27UnXhfijDlly2HJLo8EwtITu0Sk24DYcNCbOJ3QRs6DLnaR2Hx
f7VfjyRcDe0AFzw1xOMLYlF96x3UbttDapbXfOwvT9ip5V64bbpCxdZ4YvhjssGg
VNe+2ADLN/+pgGaeq1cv1pNW9B69152l5tDVxMpoF4G7KXyhAGPIZPgQWWCTsxld
XjDb8siQisPzTUn8FPIKYox0OJE4DuLCW1o1izRCIHdCnaLVCyrZEtYWu17ciExr
x1hHLmhp4T5ReA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:24 2026 by rpki-client