Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File: GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier: P8etBOmO7ZS+JhjMjNasuisQJvldxQke0dlZgCMcg5I=
Subject key identifier: 13:33:D7:C3:95:36:28:BF:F6:61:06:C3:FD:8F:D1:14:B6:A6:EB:75
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer: /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial: 019D99D0A0D165A9FC8086D690A50A93E60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number: 15FA
Signing time: Fri 17 Apr 2026 05:01:19 +0000
Manifest this update: Fri 17 Apr 2026 05:01:19 +0000
Manifest next update: Sat 18 Apr 2026 05:01:19 +0000
Files and hashes: 1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: 8Dgr6BuPRhXuF7QSudGSUrnVTvMZHdUR2ENEW94MwPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a0:d1:65:a9:fc:80:86:d6:90:a5:0a:93:e6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Validity
Not Before: Apr 17 05:01:19 2026 GMT
Not After : Apr 18 05:01:19 2026 GMT
Subject: CN=1333d7c3953628bff66106c3fd8fd114b6a6eb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a1:5a:7e:f1:21:9d:83:fd:6a:2c:59:68:6b:
aa:08:ba:55:af:50:03:4c:4d:87:a8:68:a9:11:9f:
53:37:c0:99:49:9f:03:e0:2a:ba:55:d7:e4:75:6f:
cc:22:13:10:6d:4b:58:9c:c9:c2:eb:0d:f1:64:09:
8f:9a:ef:0c:36:49:8b:4b:55:9b:ca:35:41:64:2d:
92:dc:bc:0f:61:20:c3:23:ed:7b:05:66:33:c1:64:
54:f6:6b:c0:5c:d6:53:bf:c3:de:79:61:3b:87:8d:
4e:ec:2b:13:38:81:25:18:d2:de:b8:b9:1f:8c:fc:
bb:f7:4f:ba:19:ee:b4:a2:da:d8:aa:7a:bd:72:6e:
d2:30:1c:db:87:b7:26:02:6a:0d:48:94:7a:3b:f2:
bf:62:27:83:b0:bb:23:79:c7:95:3f:31:c1:08:76:
49:c0:c9:82:b9:fb:8b:88:ba:e7:b8:ab:c6:66:79:
5d:9a:c6:12:0b:62:3a:73:d7:5c:25:a3:09:dd:9d:
a9:d9:5b:ae:73:96:2a:69:90:d4:e8:80:cb:0c:34:
f3:33:e7:df:45:98:90:b5:8f:4f:d1:e9:2a:de:82:
70:2c:d3:fe:a2:0a:7c:48:02:00:7e:4f:0c:0a:06:
f2:80:a1:f5:ee:74:ec:a6:87:ac:2a:92:8b:6b:70:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:33:D7:C3:95:36:28:BF:F6:61:06:C3:FD:8F:D1:14:B6:A6:EB:75
X509v3 Authority Key Identifier:
keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b1:e2:9b:98:1c:93:b2:34:0f:e5:79:3c:6e:2d:53:bb:89:
53:0f:bf:3f:02:41:8f:51:b5:69:b3:aa:d8:8b:53:3c:b8:3d:
22:31:16:c6:bc:a1:8d:36:59:cc:5e:26:e2:5b:8e:42:b6:28:
57:3e:c3:86:47:15:da:c6:6a:ef:26:57:c5:bd:67:c8:7f:e9:
ca:aa:de:a8:9b:e6:55:9d:82:5a:63:fa:75:48:09:b8:0a:43:
1f:d9:f6:34:c9:f1:fa:0d:74:37:76:b6:8f:65:f3:38:43:73:
bd:88:5d:16:23:72:8f:fe:5d:b4:39:d1:f3:15:bd:cf:51:fe:
bf:d5:32:b5:39:6e:96:04:0d:ae:d3:85:64:33:78:04:09:3e:
d8:d3:3b:25:c7:dc:9c:2f:fe:40:1d:ef:73:b6:a3:79:6f:9f:
1e:63:cf:9e:34:03:fc:36:2a:9e:6c:3c:b4:76:f2:2d:02:22:
ec:11:13:7e:67:b2:3f:1e:0b:7a:6f:19:f4:c7:5f:12:0e:97:
57:62:09:2e:2c:1b:1e:98:e4:be:2b:a9:c6:d3:ad:44:12:72:
ce:45:7b:00:d5:58:51:8b:b2:07:28:eb:f4:1c:31:40:98:b4:
67:c4:1c:17:ed:f5:fa:b8:eb:43:87:6a:90:18:85:c4:a6:98:
8d:7a:d5:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0KDRZan8gIbWkKUKk+YOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OTg5NGZmZDA3ZjViYTExZGM2NWJmMzhmZDk1ZWM0MWM4
YWY3OGUwHhcNMjYwNDE3MDUwMTE5WhcNMjYwNDE4MDUwMTE5WjAzMTEwLwYDVQQD
EygxMzMzZDdjMzk1MzYyOGJmZjY2MTA2YzNmZDhmZDExNGI2YTZlYjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56FafvEhnYP9aixZaGuqCLpVr1AD
TE2HqGipEZ9TN8CZSZ8D4Cq6VdfkdW/MIhMQbUtYnMnC6w3xZAmPmu8MNkmLS1Wb
yjVBZC2S3LwPYSDDI+17BWYzwWRU9mvAXNZTv8PeeWE7h41O7CsTOIElGNLeuLkf
jPy790+6Ge60otrYqnq9cm7SMBzbh7cmAmoNSJR6O/K/YieDsLsjeceVPzHBCHZJ
wMmCufuLiLrnuKvGZnldmsYSC2I6c9dcJaMJ3Z2p2Vuuc5YqaZDU6IDLDDTzM+ff
RZiQtY9P0ekq3oJwLNP+ogp8SAIAfk8MCgbygKH17nTspoesKpKLa3BoPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMz18OVNii/9mEGw/2P0RS2put1MB8GA1UdIwQY
MBaAFBiYlP/Qf1uhHcZb84/ZXsQciveOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81MjM0NzMtMWZlMC00ZTdlLTk0NTUt
Y2NjOWIzMzdjY2EwLzEvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81MjM0NzMtMWZlMC00ZTdlLTk0NTUtY2NjOWIzMzdjY2Ew
LzEvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7Him5gc
k7I0D+V5PG4tU7uJUw+/PwJBj1G1abOq2ItTPLg9IjEWxryhjTZZzF4m4luOQrYo
Vz7DhkcV2sZq7yZXxb1nyH/pyqreqJvmVZ2CWmP6dUgJuApDH9n2NMnx+g10N3a2
j2XzOENzvYhdFiNyj/5dtDnR8xW9z1H+v9UytTlulgQNrtOFZDN4BAk+2NM7Jcfc
nC/+QB3vc7ajeW+fHmPPnjQD/DYqnmw8tHbyLQIi7BETfmeyPx4Lem8Z9MdfEg6X
V2IJLiwbHpjkviupxtOtRBJyzkV7ANVYUYuyByjr9BwxQJi0Z8QcF+31+rjrQ4dq
kBiFxKaYjXrVkQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:15 2026 by rpki-client