Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier: 324AgeSPTAvw9UgPfzV3ZfHI2jvJgrSVFkrWUC2jI+w=
Subject key identifier: 11:57:EE:45:3A:72:2B:09:60:C9:1D:36:90:13:8D:46:7C:DA:91:1A
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 019DA30AF269302565E4C0D0FB5B5A77325C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number: 0E2B
Signing time: Sun 19 Apr 2026 00:01:36 +0000
Manifest this update: Sun 19 Apr 2026 00:01:36 +0000
Manifest next update: Mon 20 Apr 2026 00:01:36 +0000
Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: b0mQtrq2YJ1iqKEWbEgm+4kJAhHWqVx4uX2SOxNdq7M=)
2: gUt7m6bm6Ypt3vXyTgso7fl3C6k.roa (hash: WJiA2MwI/PZpVcjUqZwtFs+YN8agHp3vSy+iuxG93eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:f2:69:30:25:65:e4:c0:d0:fb:5b:5a:77:32:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Apr 19 00:01:36 2026 GMT
Not After : Apr 20 00:01:36 2026 GMT
Subject: CN=1157ee453a722b0960c91d3690138d467cda911a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:18:f7:e7:07:6d:75:b3:0c:98:32:c9:b7:
e1:d7:df:ff:d1:73:64:6a:39:9b:0d:a4:0c:b3:dc:
5a:c2:93:a2:96:5f:92:93:ed:ce:99:c1:68:d1:10:
13:91:e6:37:b5:09:17:c7:1b:4f:57:04:e6:61:1d:
45:74:fa:c2:b5:b2:be:e1:61:e7:79:c9:6b:8e:34:
eb:8c:92:fa:f0:2c:53:4c:a5:e4:2f:8e:e6:43:12:
d7:44:3a:2d:75:16:96:7c:39:2b:1e:0f:49:1f:04:
77:85:a3:03:33:c3:22:3f:a2:84:0a:38:8b:27:11:
98:40:11:11:e7:de:62:a5:ce:5f:9e:a3:15:69:02:
2a:d7:41:6e:50:00:a2:07:39:be:9f:5c:39:36:4a:
e4:24:dd:93:e2:04:3b:f2:ce:39:43:e7:03:e9:07:
60:61:4e:4d:7d:da:0c:c7:8c:39:37:12:f0:2e:86:
9f:81:3e:e6:0e:a9:49:42:e3:b7:12:7e:53:21:8e:
3f:f5:73:3c:2e:49:32:25:ba:3b:bb:04:7f:10:19:
e8:1b:40:15:15:5f:f3:a7:6e:b3:29:7c:cf:a4:6e:
de:54:51:c1:a6:b2:7d:63:06:08:3e:76:1e:35:2d:
40:a9:f0:f8:a6:c5:5e:bf:67:71:b7:ed:78:b8:2c:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:57:EE:45:3A:72:2B:09:60:C9:1D:36:90:13:8D:46:7C:DA:91:1A
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:13:30:aa:e9:da:4d:2e:f9:c0:da:9f:a9:b6:31:0e:15:e0:
8e:90:79:20:ce:f6:08:4e:16:38:ad:f7:d5:f8:d2:14:6f:ce:
50:92:78:12:37:7d:5f:46:51:f3:a1:35:60:93:2a:99:a4:81:
45:51:d2:f9:8c:d3:51:fc:2c:49:51:d5:20:2e:7e:04:d0:2a:
8d:a8:de:46:69:0a:d8:ae:45:2e:ff:bb:1c:32:c7:21:6a:cb:
78:4c:c1:c7:ac:57:5e:d6:3d:cf:c9:70:3f:1c:54:f8:be:68:
8f:61:3f:98:68:f7:15:a2:03:24:de:59:08:cd:e5:57:dd:35:
b7:cd:d3:60:cf:0a:c8:21:6f:a3:61:b7:9f:d6:5c:17:93:12:
d0:db:ca:cd:e7:a7:52:54:f1:a6:1e:92:f3:d3:69:06:75:c6:
82:91:33:1c:a7:28:31:e2:93:91:8a:31:a3:e8:eb:df:32:a0:
8b:e2:3c:82:8a:f7:51:a7:55:5f:67:ce:9e:c8:f8:9b:14:6e:
86:c1:c6:12:d4:73:87:8c:4f:4c:3e:fc:a4:13:a4:29:92:22:
0a:28:8c:1f:35:e5:78:35:08:ce:69:06:7f:a9:87:7b:37:b4:
27:ff:1e:4b:d2:25:a2:95:2c:e6:0e:c8:60:37:59:53:7f:54:
be:89:20:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCvJpMCVl5MDQ+1tadzJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDFjMGI0ZWYwOTBjNDRkNzhiN2NjYjBiZjcyZjA5ZDA4
MzFmMzQwHhcNMjYwNDE5MDAwMTM2WhcNMjYwNDIwMDAwMTM2WjAzMTEwLwYDVQQD
EygxMTU3ZWU0NTNhNzIyYjA5NjBjOTFkMzY5MDEzOGQ0NjdjZGE5MTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+8Y9+cHbXWzDJgyybfh19//0XNk
ajmbDaQMs9xawpOill+Sk+3OmcFo0RATkeY3tQkXxxtPVwTmYR1FdPrCtbK+4WHn
eclrjjTrjJL68CxTTKXkL47mQxLXRDotdRaWfDkrHg9JHwR3haMDM8MiP6KECjiL
JxGYQBER595ipc5fnqMVaQIq10FuUACiBzm+n1w5NkrkJN2T4gQ78s45Q+cD6Qdg
YU5NfdoMx4w5NxLwLoafgT7mDqlJQuO3En5TIY4/9XM8LkkyJbo7uwR/EBnoG0AV
FV/zp26zKXzPpG7eVFHBprJ9YwYIPnYeNS1AqfD4psVev2dxt+14uCxYiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFX7kU6cisJYMkdNpATjUZ82pEaMB8GA1UdIwQY
MBaAFIDRwLTvCQxE14t8ywv3LwnQgx80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMt
YmVkY2JjNWEwMTc0LzEvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMtYmVkY2JjNWEwMTc0
LzEvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRMwquna
TS75wNqfqbYxDhXgjpB5IM72CE4WOK331fjSFG/OUJJ4Ejd9X0ZR86E1YJMqmaSB
RVHS+YzTUfwsSVHVIC5+BNAqjajeRmkK2K5FLv+7HDLHIWrLeEzBx6xXXtY9z8lw
PxxU+L5oj2E/mGj3FaIDJN5ZCM3lV901t83TYM8KyCFvo2G3n9ZcF5MS0NvKzeen
UlTxph6S89NpBnXGgpEzHKcoMeKTkYoxo+jr3zKgi+I8gor3UadVX2fOnsj4mxRu
hsHGEtRzh4xPTD78pBOkKZIiCiiMHzXleDUIzmkGf6mHeze0J/8eS9IlopUs5g7I
YDdZU39Uvokgyw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:39:56 2026 by rpki-client