Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
File: GmoUE8yJZe6SQWtgWfkLGHeMizg.mft (raw, json)
Hash identifier: 9TflMECWcA57CqDuKGRPknfgAnXiT56NGhmEQkzdz3U=
Subject key identifier: F1:F8:21:C6:5B:E2:79:2E:71:18:27:0F:A4:9B:14:AD:80:B0:46:3B
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 019D9A3DE29F0310397BFAD49623BCA43D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
Manifest number: 1220
Signing time: Fri 17 Apr 2026 07:00:40 +0000
Manifest this update: Fri 17 Apr 2026 07:00:40 +0000
Manifest next update: Sat 18 Apr 2026 07:00:40 +0000
Files and hashes: 1: 6-OKgajr9v823pHOsspSDLg9nr0.roa (hash: NwM+C7ZC5FzvcWLiIPRWkD1+69dXcTrTBwmQOx+Eypo=)
2: GmoUE8yJZe6SQWtgWfkLGHeMizg.crl (hash: c+AZ52NpN5UadZfWxhODdbu6aFHX3U2QSiuEr1vFZFs=)
3: Rir5qUdiM3zzTUT-Xkj3rqlToCI.roa (hash: AEK9ReBz0aDKpQLz2sCl8uFxNfkDOQwbvwIUAoemDV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e2:9f:03:10:39:7b:fa:d4:96:23:bc:a4:3d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Apr 17 07:00:40 2026 GMT
Not After : Apr 18 07:00:40 2026 GMT
Subject: CN=f1f821c65be2792e7118270fa49b14ad80b0463b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:74:f5:64:d5:2c:d8:f2:e5:7b:d4:14:1e:
27:47:37:2a:fd:5e:e8:b8:43:ac:08:4e:34:5a:fc:
85:41:74:6f:bd:0f:7e:6d:f4:c4:3c:70:16:b8:3b:
bd:78:55:17:84:df:74:a5:d3:3a:c9:0b:87:98:e2:
7a:82:90:ae:0e:3d:4c:02:b2:52:eb:4e:8f:d9:39:
12:a8:e5:1a:d2:4c:61:b0:c9:14:d5:85:d4:be:cc:
59:de:e2:d9:c9:13:4e:73:04:5c:ee:23:54:f1:b0:
53:12:c5:92:1b:1b:c7:f7:f0:78:df:75:81:bf:81:
c9:6c:a2:c9:7b:f6:d6:75:02:53:18:31:8f:20:12:
43:85:22:4f:0f:4f:57:9d:2f:a0:f1:f3:89:63:c6:
da:ca:58:dd:33:c2:dc:af:0e:7f:c8:08:2f:a0:dd:
cb:04:00:54:d1:36:36:fd:57:9a:9a:15:2b:f6:60:
65:cf:8b:f8:25:36:26:23:ea:31:fc:f9:66:ef:e5:
86:fa:eb:85:91:0f:fb:56:76:fc:a2:5e:5a:32:df:
49:d3:f3:94:4a:99:de:f0:75:ad:d0:5f:d0:4b:c8:
e7:cb:ee:0a:9f:4d:84:7a:ef:d0:de:31:85:5f:b8:
c2:ba:ed:50:a6:f0:a8:4b:b2:5d:31:1c:89:30:67:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:21:C6:5B:E2:79:2E:71:18:27:0F:A4:9B:14:AD:80:B0:46:3B
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:83:f9:6d:da:3e:97:eb:b5:15:0d:5b:fd:89:88:2e:b8:45:
ef:18:54:09:37:79:f2:da:00:08:f3:96:38:0d:1f:51:df:5d:
ef:7d:12:cf:c1:e5:5e:5d:36:a8:b7:30:2d:e6:af:cc:21:36:
06:24:9b:05:b9:64:ba:84:05:ad:e4:db:44:b3:f2:a1:eb:4f:
b1:98:06:a2:23:79:89:f2:69:f1:38:10:b1:b5:d8:7a:70:bc:
20:ff:53:f4:85:ee:b6:2b:98:65:14:80:d0:3e:c9:6f:f3:c4:
ef:70:3f:d1:43:a4:bb:f8:b0:e7:68:80:f5:e5:d8:ae:35:af:
12:17:84:79:d3:2b:90:52:2f:95:50:2e:5d:3e:68:d4:cb:43:
dc:62:cb:11:31:90:4a:30:aa:40:da:45:8e:b3:11:03:32:10:
7d:3a:50:14:fb:07:68:ff:b1:73:af:55:9b:bc:94:3c:ad:a6:
38:95:7e:f2:84:df:97:cf:0f:d6:e4:d3:4b:d6:ad:87:3b:1c:
0b:a5:be:63:62:fc:d6:c9:bc:7f:43:5f:ff:78:af:85:0c:3f:
8e:45:31:ec:8c:3c:50:61:45:1f:3d:63:86:16:bc:d1:8d:1e:
6b:0a:ea:2c:ee:db:7e:56:3c:3b:d2:ac:e7:64:8d:5b:e0:15:
b7:ac:05:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:36 2026 by rpki-client