Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File: GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier: kLPWOEutUEo4mDYiUVoN5lZRn6rPM42Jnc7oV9mKWD0=
Subject key identifier: 75:6D:87:58:78:FF:BD:1A:BA:C9:E1:57:5B:12:39:E2:80:FE:8D:88
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer: /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial: 019D9850552F2B83AD2932DD92CFC4A63497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number: 17FF
Signing time: Thu 16 Apr 2026 22:01:34 +0000
Manifest this update: Thu 16 Apr 2026 22:01:34 +0000
Manifest next update: Fri 17 Apr 2026 22:01:34 +0000
Files and hashes: 1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: swkTv8XgGDlPKIwzAJaEs6q4S7VtKuEVzNoOyrg02qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:55:2f:2b:83:ad:29:32:dd:92:cf:c4:a6:34:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Validity
Not Before: Apr 16 22:01:34 2026 GMT
Not After : Apr 17 22:01:34 2026 GMT
Subject: CN=756d875878ffbd1abac9e1575b1239e280fe8d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:70:18:74:d0:b4:73:00:9b:8f:a2:ca:23:
2d:9c:d4:ae:4c:ef:99:96:1b:e6:0b:39:d2:63:8c:
14:cc:38:25:2a:ed:3f:ba:3a:c3:ab:32:bb:c0:a8:
6b:0f:1b:6c:ff:31:55:9b:03:c9:13:71:9b:7c:88:
3b:07:99:09:78:5d:3c:81:2c:f5:d6:ab:48:13:f6:
f1:60:54:c2:27:3c:fe:8a:d1:8c:f7:b3:b8:ce:c4:
be:07:d6:5f:9f:55:bb:94:29:e6:8c:98:84:7a:5d:
84:27:c2:31:f2:16:04:6a:56:33:d2:33:1a:7c:dc:
33:5f:c5:17:b0:40:14:3e:b7:95:17:0a:d3:67:70:
58:87:ff:d1:9a:68:e6:5b:81:95:ff:f3:3d:0b:5d:
bf:b2:45:df:f3:ee:95:a8:95:ac:d0:6f:9f:51:92:
80:51:71:4d:ac:45:ff:9d:91:aa:7f:0b:1c:73:08:
17:b4:6a:72:4d:48:ac:e1:12:36:57:79:0d:69:41:
fb:47:4f:f8:57:e1:f9:a5:23:3a:5e:b6:fb:ec:ae:
9b:6c:3e:61:b1:6b:4c:5f:50:af:8f:67:e2:63:12:
1c:85:c6:6a:4b:c2:01:01:0b:e2:bb:20:8c:81:57:
76:ab:7a:f6:07:b2:8b:6d:4b:85:b0:a5:e2:d4:b6:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6D:87:58:78:FF:BD:1A:BA:C9:E1:57:5B:12:39:E2:80:FE:8D:88
X509v3 Authority Key Identifier:
keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2d:73:88:2e:5b:3a:66:e0:12:ba:4f:dd:51:a3:d6:c7:08:
18:04:19:f3:58:84:4c:61:c9:4e:91:a7:22:53:d8:3f:05:45:
7d:a7:e3:3e:cf:83:bd:73:61:fe:e3:3f:4e:7a:0e:40:a0:6a:
d9:19:2b:ce:1d:32:df:af:85:9d:44:d0:3c:4f:c0:08:ca:98:
4c:fb:ac:00:aa:05:c5:49:9b:a0:f6:0f:24:8b:9a:cc:ed:91:
08:20:39:86:82:ce:78:14:24:0e:0e:52:ba:3d:d9:cb:37:2f:
e0:c9:2d:b4:0b:5f:1c:fa:e4:75:b8:e6:b8:ca:2e:c7:a5:40:
f4:27:39:e1:69:9d:2d:5f:f0:82:d7:48:32:50:d4:41:c9:f4:
b5:52:3a:68:9d:67:36:22:68:4d:02:1e:9b:0c:fb:b2:0f:d2:
0a:ed:ea:9e:59:0c:48:8f:94:33:77:c3:7e:95:c2:bc:ea:42:
52:30:d3:71:11:08:01:57:31:bb:ce:0a:eb:b6:79:83:c0:a0:
fe:3e:ce:f5:85:83:48:52:ad:1f:fe:40:84:cf:d2:c3:bb:7e:
27:d7:eb:30:76:1b:de:48:18:e0:7e:66:ab:77:ae:fb:45:ca:
b6:d8:ca:15:32:52:e7:da:b5:e0:98:8d:34:b0:bf:b2:a7:f3:
7b:72:c4:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUFUvK4OtKTLdks/EpjSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODdiYjY4NTljOTM4YzhiNjNlNWFhYTU2ZDkwN2JkMDQ0
NGUzY2UwHhcNMjYwNDE2MjIwMTM0WhcNMjYwNDE3MjIwMTM0WjAzMTEwLwYDVQQD
Eyg3NTZkODc1ODc4ZmZiZDFhYmFjOWUxNTc1YjEyMzllMjgwZmU4ZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0FwGHTQtHMAm4+iyiMtnNSuTO+Z
lhvmCznSY4wUzDglKu0/ujrDqzK7wKhrDxts/zFVmwPJE3GbfIg7B5kJeF08gSz1
1qtIE/bxYFTCJzz+itGM97O4zsS+B9Zfn1W7lCnmjJiEel2EJ8Ix8hYEalYz0jMa
fNwzX8UXsEAUPreVFwrTZ3BYh//RmmjmW4GV//M9C12/skXf8+6VqJWs0G+fUZKA
UXFNrEX/nZGqfwsccwgXtGpyTUis4RI2V3kNaUH7R0/4V+H5pSM6Xrb77K6bbD5h
sWtMX1Cvj2fiYxIchcZqS8IBAQviuyCMgVd2q3r2B7KLbUuFsKXi1LaaKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVth1h4/70ausnhV1sSOeKA/o2IMB8GA1UdIwQY
MBaAFBmHu2hZyTjItj5aqlbZB70EROPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lZjIyZGItZTNiMC00MzlmLWEwYzIt
YmY0ZDQ1N2U5NTE4LzEvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lZjIyZGItZTNiMC00MzlmLWEwYzItYmY0ZDQ1N2U5NTE4
LzEvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARC1ziC5b
OmbgErpP3VGj1scIGAQZ81iETGHJTpGnIlPYPwVFfafjPs+DvXNh/uM/TnoOQKBq
2Rkrzh0y36+FnUTQPE/ACMqYTPusAKoFxUmboPYPJIuazO2RCCA5hoLOeBQkDg5S
uj3Zyzcv4MkttAtfHPrkdbjmuMoux6VA9Cc54WmdLV/wgtdIMlDUQcn0tVI6aJ1n
NiJoTQIemwz7sg/SCu3qnlkMSI+UM3fDfpXCvOpCUjDTcREIAVcxu84K67Z5g8Cg
/j7O9YWDSFKtH/5AhM/Sw7t+J9frMHYb3kgY4H5mq3eu+0XKttjKFTJS59q14JiN
NLC/sqfze3LE/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:57 2026 by rpki-client