Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier: h/o8Ave8OHh/cAhfONdKYScJtTh554JEMoS7i69aeC0=
Subject key identifier: B6:5A:84:DC:EB:88:E0:CE:AE:2F:A4:9C:7C:49:01:19:69:0B:E8:6F
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 019D9B873EFCD1CBDF49626635A7746F81CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 13:00:24 +0000
Manifest this update: Fri 17 Apr 2026 13:00:24 +0000
Manifest next update: Sat 18 Apr 2026 13:00:24 +0000
Files and hashes: 1: 1-GJxYFfHhPUGldIW84G9cSjaROo.roa (hash: xnT7kV2Yd837mUQZhjujVXj3ng6jUmkGRRzKFJTHREg=)
2: FcCot_n8byTOtYnTcT9gqTdXqgI.roa (hash: W7M2MGUSVVgsXq7kupYfdmxLZ/fDswJFwIWF+JWAWi0=)
3: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: 690pLbWVFAIkJsQWbrTuyAOssuOl+nEVor/JHVksrws=)
4: jZxaU0gUqcmTgelMnTTUvkNfM7g.roa (hash: fm/mYWmhHVRNa3vFUylMM5LunZsCT8Akl9JuHlA1Fb8=)
5: lGhTp3LLyxy8beBvhY8lnM4Yjhs.roa (hash: /3CeCfqpeIvLkc9UntZNryGgsw4LpxUtcTdUNK/e4Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:3e:fc:d1:cb:df:49:62:66:35:a7:74:6f:81:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Apr 17 13:00:24 2026 GMT
Not After : Apr 18 13:00:24 2026 GMT
Subject: CN=b65a84dceb88e0ceae2fa49c7c490119690be86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1e:96:ee:9b:2c:72:14:ef:7f:34:fb:88:f3:
c8:fb:04:31:5d:ef:a5:d3:a5:56:88:18:6b:01:73:
bf:91:e0:e5:34:b2:0e:0d:82:a9:5b:32:da:b3:8e:
91:85:6e:54:10:f7:0d:2d:03:48:4d:a2:ca:c2:68:
a9:8d:fa:d2:37:4e:f6:bf:50:7e:2e:66:8d:d4:3d:
c4:00:3d:e0:11:e2:fb:42:19:99:bf:8f:13:33:27:
bb:ab:77:30:4b:ef:28:30:ff:e1:eb:3e:ca:80:83:
37:8e:b1:72:5d:49:2a:6d:61:e1:76:7e:ab:32:c0:
6c:fe:8c:d2:f2:b6:42:6a:b8:ee:1d:bd:84:66:e8:
b7:71:1b:05:23:fc:e5:43:d1:e1:0e:ef:73:d5:29:
52:7e:92:86:28:32:41:16:5f:90:5a:c6:2c:cd:1f:
79:61:e6:7f:2e:2b:b6:e0:d8:b3:cc:79:f9:a4:11:
14:c2:64:43:7c:01:86:a5:e7:a5:52:27:3c:c2:b5:
68:07:a0:74:91:2f:bd:cf:a5:3d:ac:6c:48:10:92:
69:00:0b:49:fd:f6:1f:1c:30:d8:ba:fb:cf:31:ae:
ad:3c:8b:75:15:0e:4c:f5:8e:b4:a5:01:f6:f1:f7:
5c:d4:9e:35:da:8b:3e:6f:67:3b:81:0c:5c:24:1d:
e4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5A:84:DC:EB:88:E0:CE:AE:2F:A4:9C:7C:49:01:19:69:0B:E8:6F
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f5:af:d5:fe:0d:c0:fe:13:86:d3:93:8e:ef:03:d0:33:b6:
61:b2:89:ef:24:21:e2:a1:66:55:66:23:5a:2c:ab:2f:00:c5:
0a:33:02:38:cd:9e:44:ed:c4:16:4d:89:2a:5d:4f:fb:15:3c:
a1:a7:6b:1b:d4:a1:46:ad:c3:19:46:35:7c:39:2f:81:5c:01:
e0:ec:d8:3f:ec:c9:54:d4:29:f1:73:66:af:a4:ea:13:81:db:
a7:0e:71:e8:12:63:24:3e:08:02:ce:c0:92:4c:76:a4:d2:67:
ae:48:fd:ae:b6:ad:d0:74:1c:93:ce:fd:ac:dd:25:a2:ed:79:
d1:e7:83:f5:28:48:8e:8f:a2:6b:e1:c7:a1:db:ef:00:49:4c:
b4:53:3a:3e:88:d1:97:6c:7f:5b:e8:af:cf:96:94:23:e0:46:
bb:83:d2:1b:81:aa:d7:41:55:32:a4:2f:c4:32:b3:28:09:1d:
6a:e1:02:27:4d:eb:2c:b3:87:be:42:6b:ae:cb:3c:4f:6d:e6:
ea:6f:db:a1:7e:b8:af:c4:9a:bb:13:af:6e:03:2c:9f:cd:96:
33:7f:38:9e:03:e8:90:71:cb:fc:b9:d5:99:5b:05:f8:88:a0:
42:34:11:1e:7b:83:c5:0c:42:03:4f:02:ac:d0:4d:1c:b5:94:
f5:8b:53:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:31 2026 by rpki-client