Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File: gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier: +sJqz0N4lrsDAUqRRpo5vNXLXC6dt4/mrljmAcrN6aY=
Subject key identifier: 27:C4:82:1E:A2:F0:C8:A6:2C:39:8B:C3:64:2C:7A:11:8E:FA:BD:9A
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer: /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial: 019D992B0021964290469B6248B97ACBB4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number: 0A08
Signing time: Fri 17 Apr 2026 02:00:25 +0000
Manifest this update: Fri 17 Apr 2026 02:00:25 +0000
Manifest next update: Sat 18 Apr 2026 02:00:25 +0000
Files and hashes: 1: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: phzXcen9nq9DXzsgCLCIqq27OFiqANlbYUam+eqm5WU=)
2: qG_zm-_87cXSw0_LhJiatFGZjco.roa (hash: 845weVVX02y1u2NuqLxhj3PGe6p4QBfV9nv+gr8bpog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:00:21:96:42:90:46:9b:62:48:b9:7a:cb:b4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Validity
Not Before: Apr 17 02:00:25 2026 GMT
Not After : Apr 18 02:00:25 2026 GMT
Subject: CN=27c4821ea2f0c8a62c398bc3642c7a118efabd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:a6:15:c2:44:da:b7:bf:7a:da:46:23:85:
f4:7c:01:dc:34:6e:70:72:25:d5:28:78:ec:99:ae:
ee:5f:e9:ce:bd:8f:0a:93:f4:90:84:66:2a:9b:30:
29:e4:60:ac:68:e1:61:87:2e:c6:25:aa:06:d9:55:
82:a5:1e:c3:69:d8:1a:ed:4e:af:df:80:3b:7a:03:
eb:27:a6:f1:11:16:36:c2:a6:61:c2:af:ae:e4:1d:
dd:72:5c:c5:a1:4a:0d:c4:78:2f:e2:8f:dc:de:89:
a8:44:23:63:a6:a7:82:db:b0:dc:eb:92:21:5d:96:
c3:2c:fa:c3:e2:77:95:4c:30:f3:3b:56:52:14:f6:
67:eb:cb:c4:82:fc:9b:1a:5d:57:5a:9e:8f:ce:32:
51:5c:5f:27:e0:73:1b:7c:60:bc:de:1c:c7:59:9c:
60:e4:c9:12:9d:8a:11:41:2e:34:46:df:ff:2e:ea:
9c:44:57:ef:35:43:03:02:d0:30:4d:c1:92:22:9d:
ab:e6:11:4d:4c:20:54:6f:9f:1c:a9:96:e2:b5:8f:
1b:67:3e:ee:d4:7a:0d:d2:25:71:bd:e0:c6:6c:e7:
f3:c0:1e:8d:e2:3d:0e:50:ac:56:5c:d1:64:4c:7c:
00:21:af:c6:a8:89:7e:80:e2:ba:cf:69:15:23:47:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C4:82:1E:A2:F0:C8:A6:2C:39:8B:C3:64:2C:7A:11:8E:FA:BD:9A
X509v3 Authority Key Identifier:
keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:83:80:a4:1a:f2:91:a9:8d:43:bc:84:80:29:61:b1:b1:25:
cf:3b:2a:96:66:e0:10:48:18:42:fb:82:de:a5:b5:9d:df:27:
54:f4:96:d7:0b:2c:a5:f5:3f:95:14:12:a0:fc:e6:35:30:9c:
8d:47:be:c3:c0:84:58:59:4f:e9:f1:11:82:93:9a:01:ef:d2:
96:0c:0b:94:92:bc:da:2f:62:98:ff:1f:61:79:45:87:6c:d6:
dd:e1:56:23:2d:a2:28:4c:63:41:58:f6:c2:da:9e:26:2e:67:
69:f8:8e:98:f5:3d:d1:cd:f6:99:2c:d1:8d:87:2f:34:b8:65:
e5:89:8f:36:16:3c:85:a8:e1:22:34:7c:bd:e6:14:93:81:44:
08:05:6b:04:a1:a5:31:ca:97:39:0b:86:36:5e:dd:75:ca:b8:
b2:4e:da:2b:57:1a:6d:08:4a:0c:f8:87:b8:05:66:f1:0e:2d:
19:9e:ee:de:2b:47:97:63:13:76:94:0e:fb:4a:4c:94:f5:44:
ac:ec:f0:68:88:bc:8d:09:94:88:a5:d6:4f:f9:b4:0b:34:c9:
54:41:dd:5a:2b:bf:29:6b:d1:ad:80:35:e0:28:f7:52:36:83:
33:5b:fc:da:4e:cb:3a:9b:3c:a0:0e:63:a4:25:55:43:f3:2a:
b6:51:10:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:46 2026 by rpki-client