Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
File: GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json)
Hash identifier: RMLAApUXP9rneJD8/5ghvgB5+nRA0KUxoY2c0ch4wbs=
Subject key identifier: 56:32:BA:E3:46:9D:D7:77:56:00:24:49:DF:F4:CE:25:8D:2A:C2:13
Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
Certificate issuer: /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Certificate serial: 019D9A3E946010A1E60F36069AEB946B2A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
Manifest number: 1762
Signing time: Fri 17 Apr 2026 07:01:25 +0000
Manifest this update: Fri 17 Apr 2026 07:01:25 +0000
Manifest next update: Sat 18 Apr 2026 07:01:25 +0000
Files and hashes: 1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: QME5QEjnW15sDmaBL2k4BHh6r66wzDtW4NytkZmq6Eo=)
2: ddzzutA4t5_bTS59x-ViP0VnX0A.roa (hash: LM9NwYw2Z3ZadyCbFgStTauj7LtTwJI2w9ItE8haIGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:94:60:10:a1:e6:0f:36:06:9a:eb:94:6b:2a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Validity
Not Before: Apr 17 07:01:25 2026 GMT
Not After : Apr 18 07:01:25 2026 GMT
Subject: CN=5632bae3469dd77756002449dff4ce258d2ac213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:60:db:0c:09:fd:38:6a:59:85:cd:ae:48:ac:
e0:88:ff:9f:93:9a:e4:23:21:9c:c6:7b:e3:94:12:
1d:60:64:d3:ef:64:b9:11:d4:9f:03:b7:43:79:04:
13:c2:8c:4f:27:57:57:59:ac:4c:94:4d:ab:8d:15:
4a:59:b5:f7:c0:6e:a1:92:57:22:66:31:30:75:6a:
60:f0:d9:2b:84:64:24:47:d6:e6:d9:01:60:fb:ee:
b1:10:83:21:a7:ab:46:5b:bd:7b:65:9d:2f:3e:9c:
4c:4c:ab:f3:0e:58:3e:f4:0b:f6:79:e2:26:3b:31:
69:04:04:33:1b:99:c3:d4:f2:37:c5:7f:3c:45:e0:
7e:01:e9:b8:79:44:73:ca:27:ef:56:bc:eb:49:21:
98:cd:35:48:83:1e:df:a4:04:56:34:e7:3e:81:58:
29:1a:7d:98:b3:cb:7d:fe:74:84:cb:71:94:4e:18:
c8:98:c4:b9:be:3f:d5:26:d0:93:af:e7:a5:2b:00:
44:61:f9:31:7f:05:80:47:a0:6b:a2:81:9a:72:2c:
34:30:26:1c:65:8e:f8:5a:ad:e4:24:14:de:8a:de:
2f:46:62:79:1d:3b:18:4c:45:75:82:17:8e:46:86:
45:f2:e5:de:d8:17:06:71:fe:12:61:d8:c7:b3:ff:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:32:BA:E3:46:9D:D7:77:56:00:24:49:DF:F4:CE:25:8D:2A:C2:13
X509v3 Authority Key Identifier:
keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4f:ac:47:15:e3:90:31:31:f4:c8:91:b6:db:6b:4e:9e:b0:
68:2e:40:bf:71:2f:ea:d0:b1:c0:5b:cd:a7:e1:a1:9f:51:60:
18:b4:1f:80:a2:4e:0e:a1:b2:a7:ef:58:8c:67:28:58:e1:86:
6f:38:af:90:96:ce:dd:d5:43:a4:07:08:59:71:4e:5a:11:21:
bf:86:f9:c1:a9:16:53:a1:43:ef:07:db:05:a4:8f:5f:0e:82:
07:19:f6:e8:52:37:7b:64:f2:07:da:52:17:94:f6:bb:0a:20:
31:d9:17:2d:dd:81:5e:77:49:03:08:90:3d:2c:5c:fe:9c:7c:
e7:44:cb:b6:db:99:03:d8:a1:f9:b1:48:26:29:46:27:d2:e3:
c4:fe:d0:a0:17:1c:bd:ff:77:a4:e6:86:59:66:2b:94:63:a2:
40:01:25:2d:0b:6a:a9:a2:a0:5d:47:30:6f:95:f9:fc:93:d3:
03:1f:2a:01:32:98:aa:e4:e7:31:06:b8:08:f9:9e:8e:84:3a:
7e:36:74:7f:eb:33:47:63:62:ca:38:c1:82:9b:99:3f:6e:bd:
0a:b1:e2:31:c1:58:db:7f:40:a4:d9:47:d9:b8:d4:32:29:70:
8b:75:f6:69:ff:59:96:55:9b:96:09:1d:94:16:a4:20:99:39:
95:a8:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:25 2026 by rpki-client