Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier: aApuujJAK7qc6ngzM7vgOkfBEDY2oUzhyp7BeQaQ4vg=
Subject key identifier: DE:38:6F:F8:70:40:36:02:53:85:6F:AF:2C:73:36:6D:84:58:C4:E6
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial: 019D9962052121869D9575CE09B221F1B885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number: 0F18
Signing time: Fri 17 Apr 2026 03:00:30 +0000
Manifest this update: Fri 17 Apr 2026 03:00:30 +0000
Manifest next update: Sat 18 Apr 2026 03:00:30 +0000
Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: hW4qZ+r+8lbe2zANH6CShTVP14i9YJWD3VjDS9rGVB0=)
2: qGxTxAsu5FkWitZ0KPLQqCXDGFM.roa (hash: zXhXvgnmYSnohs5FpeFJ6bYBqVk7H7oowzouCmYZY/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:05:21:21:86:9d:95:75:ce:09:b2:21:f1:b8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
Validity
Not Before: Apr 17 03:00:30 2026 GMT
Not After : Apr 18 03:00:30 2026 GMT
Subject: CN=de386ff87040360253856faf2c73366d8458c4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:0b:eb:73:dc:ef:2d:5a:cc:4c:65:26:37:
67:2d:6b:d0:d0:3e:d3:17:f4:12:cd:af:39:5a:77:
e5:b2:df:16:63:cc:3d:ea:fd:3f:0c:34:5a:cc:3b:
10:db:66:49:ff:02:48:83:d1:51:43:54:89:c3:d1:
5c:bc:de:2b:5c:71:a5:a3:a2:7b:e6:c1:f1:9c:61:
47:72:98:e6:0f:bb:2e:6a:68:25:56:c0:d7:62:c4:
3b:d3:59:61:b6:b4:72:b5:35:23:f4:d2:bc:e0:25:
2a:0d:6d:e5:9c:bd:fc:95:9b:df:34:72:88:83:0a:
4d:bf:e0:ce:3b:94:29:89:e0:b0:fb:99:9f:9a:81:
4a:f1:f6:4f:d9:df:63:45:f9:6f:55:bb:a1:d8:90:
d6:f2:b4:34:4a:7e:a4:ad:53:15:07:e8:b7:36:ca:
87:c8:e0:88:8c:20:44:20:9e:58:24:7a:3c:d1:17:
43:a2:a9:4e:0a:d3:69:26:29:d7:04:bb:fa:f2:e1:
47:3b:c3:1c:43:e1:c7:16:84:ab:9e:1b:99:43:56:
12:11:23:ff:97:1b:b7:6f:2e:32:f8:03:e1:be:6d:
67:6e:81:9a:31:d0:de:8c:bf:45:90:d3:af:81:97:
e4:e6:f2:47:20:6c:b7:fe:78:d3:2e:03:c9:7a:fb:
04:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:38:6F:F8:70:40:36:02:53:85:6F:AF:2C:73:36:6D:84:58:C4:E6
X509v3 Authority Key Identifier:
keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:74:3a:19:60:c6:29:b9:ed:df:8b:51:d2:66:f7:68:41:7e:
10:93:26:bb:d2:e8:70:b2:19:8d:e6:51:86:f8:a6:a7:d5:59:
98:c4:40:e5:c9:0b:9b:a8:db:0d:82:49:f4:5b:4b:5c:d4:30:
5f:49:3f:38:f1:67:bc:d2:74:71:2e:4b:eb:84:4c:89:9c:ef:
b5:67:42:12:8b:2b:94:c9:9b:60:52:99:39:1b:e7:ef:8a:67:
a9:10:df:7a:4b:37:dd:e0:ac:ee:b2:f8:49:64:6a:ee:b6:4b:
0e:43:94:46:87:8c:ec:1d:fc:4c:cf:f8:1f:ba:a9:35:46:f8:
51:12:9c:4c:aa:bb:b9:b5:bc:09:07:19:75:89:d2:e6:7d:4f:
10:93:a3:1a:63:a6:52:b1:9c:28:5d:1f:5c:af:28:2f:cc:9a:
14:c6:43:5a:e4:57:0c:a3:0e:95:26:ae:f1:12:fa:dd:fe:3c:
9a:85:7b:b1:b6:34:de:8c:d6:0c:bd:b5:e0:98:29:f1:3c:d0:
45:08:ed:ea:74:40:69:ba:cf:d4:08:2b:72:25:ea:49:ab:66:
36:bd:ef:10:bf:01:46:32:f3:cc:cf:ca:9a:d4:1a:41:dc:f1:
82:0b:0c:c3:6a:89:28:b0:5e:7a:7f:43:11:54:ee:7f:99:b6:
1e:65:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:35 2026 by rpki-client