Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: NNKC79AeFGHh4meR/CVRJMBkGr3JukWIvNPefnXm87M=
Subject key identifier: C4:A5:33:E5:80:CD:0B:A1:1B:DE:C9:FE:9E:FC:22:69:D9:60:54:D4
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 019D9B1A0BE3B2B0729810D23FC0A5BD6AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 11:01:08 +0000
Manifest this update: Fri 17 Apr 2026 11:01:08 +0000
Manifest next update: Sat 18 Apr 2026 11:01:08 +0000
Files and hashes: 1: _gHdc_o1Sg4bPmajOZmaGT6ZXNU.roa (hash: fbP0Eisnj7ta1eL91x/ykjZ4/I+oNZYVlLK/j2viYek=)
2: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: P2rWywHB/Kvm9KXe91AxEMS3F/1VWro7ydibdkjrl3A=)
3: xfg6ND62VE_NEsRerQpNDEtguWY.roa (hash: jV8up19wMmKrYo3rkVmGEitD0urDFX1Xvcb39PAZzRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:0b:e3:b2:b0:72:98:10:d2:3f:c0:a5:bd:6a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Apr 17 11:01:08 2026 GMT
Not After : Apr 18 11:01:08 2026 GMT
Subject: CN=c4a533e580cd0ba11bdec9fe9efc2269d96054d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f7:32:85:88:2f:ff:52:04:c7:00:93:1b:0c:
75:03:e4:b4:ce:75:67:b6:66:a5:19:fe:df:32:87:
ae:5a:35:a7:06:76:ab:cd:f1:be:d9:49:18:e6:c6:
2d:8e:8c:28:ff:c1:85:04:1d:b6:08:71:e1:82:b1:
11:d4:7e:f8:1d:7e:2f:e1:39:ba:6d:e4:c9:e5:6e:
06:6f:b4:4b:8f:ea:08:64:d0:e0:9c:60:a2:b0:ce:
27:5c:6e:8f:d1:c0:54:84:ef:47:3d:d2:3c:02:91:
47:99:ba:c7:32:79:e8:da:0d:5a:a1:03:7a:c0:c2:
1f:a4:79:ea:b9:3d:59:8e:7f:25:50:ec:a2:17:7a:
91:d5:3e:c4:36:65:8c:0c:87:52:be:78:24:e6:7a:
9e:be:da:f5:63:b7:6b:35:20:b7:32:fc:6d:a1:86:
f6:8d:a8:cf:c5:01:ba:d6:06:f0:90:77:f0:62:f4:
8d:3a:d0:40:f8:c9:ef:47:72:96:46:3c:05:bc:c4:
16:5f:b9:a6:46:01:36:c6:08:02:77:74:47:ce:c9:
5f:d5:9c:52:da:0a:ab:c4:e5:e1:85:aa:7f:99:0a:
b1:10:f3:a4:dc:75:6a:54:db:ff:63:f6:9d:11:6c:
0f:c5:9a:14:83:88:64:34:a2:5b:1f:f5:fd:ea:96:
89:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:33:E5:80:CD:0B:A1:1B:DE:C9:FE:9E:FC:22:69:D9:60:54:D4
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:42:46:13:85:bb:13:28:be:a8:6e:fc:1d:fe:22:65:8a:99:
af:c6:1d:56:34:04:03:3b:5b:1d:66:d2:7a:88:ba:dc:e3:64:
a3:b6:05:6a:69:a0:bd:e7:27:40:c7:2d:c7:79:f9:56:08:f4:
c6:d8:31:b9:b8:e7:f2:54:35:76:20:bf:df:bc:0d:38:0f:4d:
9c:8c:a2:11:5a:ca:46:ff:75:c3:df:48:ac:6b:19:0f:30:c9:
7a:e2:ef:f5:b8:d1:63:56:3a:75:9e:29:20:e7:72:bb:6e:2a:
f5:cb:fa:d6:31:1a:49:d2:12:72:c9:90:a2:14:0b:07:79:81:
19:fd:1c:2b:c3:d1:cb:cc:77:0d:9a:f1:0d:ed:3e:b4:5b:a0:
8a:c4:cd:e8:82:df:69:d8:e2:4a:f7:18:1d:b7:ea:76:36:e7:
f3:ad:f6:de:79:0a:d9:ef:1d:d6:e5:78:11:32:71:c3:f0:9c:
ef:69:92:e6:9c:89:27:8a:7c:0d:5e:97:9c:2b:f1:dc:92:f3:
ba:34:52:a9:5e:a9:fb:a2:e7:2c:4f:45:d2:f8:29:b3:d5:42:
c5:ee:96:e7:5b:f4:ac:88:6e:e7:8b:c4:0a:a5:4c:eb:04:e5:
68:4c:c3:a7:ac:61:e2:df:a5:cb:68:2b:76:c9:a9:8b:4f:67:
9c:61:15:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:00 2026 by rpki-client