Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: Rar5fSxd4I04pOwMiGfZLNJQBU7xoipgc/2RmJctimc=
Subject key identifier: 51:E0:B3:F9:81:02:31:91:C8:25:EB:C0:D4:0D:8D:50:23:53:CB:13
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 019D98BD5DF24911D72A483333747181E845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:00:40 +0000
Manifest this update: Fri 17 Apr 2026 00:00:40 +0000
Manifest next update: Sat 18 Apr 2026 00:00:40 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: 9nshIXZpvYCHZBHcEF4bkf9pIsnPX3RQItmPHlbU/g4=)
2: I5h_-n6q20lsOaRJZ1RaRmHMf8U.roa (hash: zer7O7oW6HZhNmqlr1aPUcsYOzbLm/tHkE6ZSX4C2TU=)
3: QiybHyZYXADSID7uWkeeef6I9FM.roa (hash: nffxcFthp0YuUEIfa7lK0CY+6Pk1YEGmytbZGeUzOYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:5d:f2:49:11:d7:2a:48:33:33:74:71:81:e8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Apr 17 00:00:40 2026 GMT
Not After : Apr 18 00:00:40 2026 GMT
Subject: CN=51e0b3f981023191c825ebc0d40d8d502353cb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:4a:bc:5d:c4:3e:a2:1d:8f:55:96:9d:57:
8d:27:15:d3:0b:72:3e:44:3d:9d:0b:b4:06:b7:2c:
37:0b:6c:55:d0:7f:ac:41:97:7a:be:90:55:75:37:
5f:8b:61:4c:c6:3b:78:c6:43:aa:d4:01:06:9b:0c:
9c:b6:13:c5:fd:a4:55:2e:3e:0d:fc:0d:0e:49:63:
21:3e:aa:66:80:f4:00:1b:bf:02:ed:89:74:22:6a:
61:1c:35:75:ac:52:92:34:c1:3d:cd:48:b0:37:d9:
f1:2a:3e:41:b7:7b:17:93:9d:2a:7a:a8:9b:aa:b8:
c1:64:27:f2:31:ae:54:d9:95:31:2d:e3:c7:c1:1f:
7e:39:2c:30:0d:5b:f1:64:43:13:f2:99:4b:98:22:
98:b4:fa:e9:99:9e:82:ca:9f:3a:a2:d5:17:51:d5:
ab:d4:7f:52:98:80:8d:e6:bc:67:c7:69:ac:d4:4c:
f1:29:fd:88:85:02:fc:1c:43:f9:9c:78:3b:85:91:
52:90:03:92:00:fb:c0:7f:0b:e5:29:e1:1e:b2:90:
9a:36:43:08:aa:2e:d6:65:9b:08:1b:7b:52:2f:0a:
b5:5b:74:e9:bf:e4:4a:26:90:68:a2:f2:c1:01:aa:
b2:6c:69:6c:11:09:a5:63:78:58:e6:cf:50:1d:ef:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E0:B3:F9:81:02:31:91:C8:25:EB:C0:D4:0D:8D:50:23:53:CB:13
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:96:cb:3d:1a:d0:2e:a4:73:f6:48:81:9e:ee:6c:92:7b:ee:
26:6b:03:fa:a7:1a:e9:06:db:0c:65:f6:f4:20:7f:1d:4e:d5:
c2:10:5c:f3:03:36:dc:74:43:a8:ca:8c:1b:59:95:78:8a:ed:
18:bf:9d:f9:5e:24:fd:b0:b9:65:28:70:5e:8f:68:88:d8:8c:
3f:70:f4:3e:25:81:b2:1e:e7:79:e0:30:3e:de:52:02:6a:f1:
29:75:95:80:51:33:45:7d:7b:5a:c6:c4:e8:76:3f:cb:11:0e:
04:0d:f4:29:fb:b1:8e:13:f2:6a:09:48:b2:3a:00:5a:c2:09:
76:58:33:94:23:47:bd:33:da:91:34:84:c5:da:f8:d3:1b:15:
13:94:b1:db:7b:07:4f:7a:fe:31:94:41:10:4a:d2:4b:83:69:
9d:dd:a8:ec:fa:7a:0c:e7:78:ae:d0:71:52:7f:43:c0:2c:5a:
4c:e7:dc:09:b8:73:42:08:e4:85:23:90:2f:ac:a5:83:7f:69:
4b:95:b9:42:57:47:4f:ac:03:a9:7b:93:bd:a5:0b:17:c9:d3:
9e:5d:8c:55:8e:17:5a:75:e6:b9:1c:7e:d9:a5:17:58:9f:3b:
b3:0e:ba:72:db:a4:1a:aa:69:81:8b:58:63:dd:12:aa:9e:08:
d5:26:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:35 2026 by rpki-client