Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier: I+DnslOtdorjki84Np6YMNsqnVICO24sMaYoxkJBuPo=
Subject key identifier: 33:02:A4:E5:57:F8:7F:07:7C:C0:21:16:60:84:83:59:78:C6:C2:E4
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial: 019D9E890C0E3A2A51D208D908E433097C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number: 03ED
Signing time: Sat 18 Apr 2026 03:01:14 +0000
Manifest this update: Sat 18 Apr 2026 03:01:14 +0000
Manifest next update: Sun 19 Apr 2026 03:01:14 +0000
Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: J51jBs7MFGms3jrqz7pSaYkxLEGl9KxMSh6WNaa1ovE=)
2: tW75xisNBw44jYns_Y3WtNvzf4M.roa (hash: 1hevvajdIYdR4n3mWoJRqh1PcCq2VWdl5U2HS1l2lMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:89:0c:0e:3a:2a:51:d2:08:d9:08:e4:33:09:7c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Validity
Not Before: Apr 18 03:01:14 2026 GMT
Not After : Apr 19 03:01:14 2026 GMT
Subject: CN=3302a4e557f87f077cc021166084835978c6c2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:d7:ea:a4:76:e7:8b:2d:a7:b3:f7:ba:ca:
07:4b:0f:38:d1:bb:0a:74:36:bf:45:61:26:3d:e4:
0a:71:86:c5:e1:cf:d1:25:a6:d8:3d:0f:4f:b6:29:
07:fb:17:26:d5:c9:d1:69:e1:a0:e7:61:e4:85:ef:
bf:d5:bc:84:d7:5c:44:39:2b:71:87:80:ef:61:33:
6d:cb:a1:ed:d6:72:fb:c4:3d:70:a5:ae:53:85:6a:
60:51:21:d9:1f:0a:37:2e:23:f1:65:50:e0:58:4b:
4f:18:e4:ee:3d:37:9e:dc:ba:7c:26:1d:59:5f:d2:
eb:01:e3:0b:00:c2:74:77:1f:b4:1d:f3:d6:64:1c:
d9:c6:3b:99:34:d3:c8:06:6c:22:c2:fa:2d:d7:e0:
fd:60:b5:11:dc:1b:f2:bd:8c:07:bc:67:73:3f:4a:
f9:74:0c:60:1a:9e:53:58:37:e2:e3:2f:6e:3f:12:
f0:2a:0e:7b:1c:eb:5c:2a:e5:62:df:08:fa:53:09:
f8:40:72:ca:da:3a:fd:bf:ac:5e:d3:e6:3d:26:e5:
18:80:ee:f2:ce:84:14:8d:e6:56:34:f7:7b:27:fd:
76:0b:ae:34:10:0a:5e:af:02:db:3b:bf:98:4a:2b:
b2:33:1f:49:10:28:5b:9f:76:88:61:72:7c:60:c0:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:02:A4:E5:57:F8:7F:07:7C:C0:21:16:60:84:83:59:78:C6:C2:E4
X509v3 Authority Key Identifier:
keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:db:d1:73:34:48:bf:24:43:48:e9:72:b3:5a:a5:d8:e3:b6:
f7:77:49:be:dc:78:ce:ab:d1:e3:f4:2b:86:70:9b:2d:ae:db:
e0:37:fc:53:fe:2f:c2:73:e2:fe:34:b0:04:13:d6:b2:88:db:
bb:80:6b:13:83:c7:9f:75:f6:75:eb:6b:f9:85:58:15:7b:5f:
0e:98:d4:e2:27:eb:77:14:a3:7b:91:9a:0a:da:89:b6:a3:46:
15:68:2d:fe:e8:11:f4:70:c5:e7:cf:e2:5b:28:79:b9:c6:f6:
b1:3d:dd:3e:bb:08:b2:68:bb:d3:a1:fd:b2:80:d4:dc:08:12:
e1:73:91:ec:91:56:a5:e6:a9:86:68:ab:84:8c:9e:0b:ff:5d:
2b:66:6f:c2:31:ce:75:c3:4e:39:33:9b:ea:00:82:cb:5b:03:
3b:62:f0:51:6f:9e:c6:0c:c6:32:b1:ac:1c:fb:98:5f:78:b5:
66:d4:d8:a7:e4:d2:e6:c6:d7:cb:0c:1c:5c:1d:3c:58:51:a2:
01:c4:35:db:cd:8a:19:dc:14:81:fa:9e:a4:0b:36:ed:07:cf:
a5:74:7b:2f:c4:b3:5d:aa:5d:74:e8:6d:53:96:01:60:85:9a:
16:bc:27:05:00:04:80:38:19:76:ab:8f:7c:be:ae:6d:9d:58:
12:4a:f6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:28:10 2026 by rpki-client