Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
File: 1-GSAgviI1Al6xM26hGYLkw91A18.mft (raw, json)
Hash identifier: IBbFaQA7LCwZUZN9Ugb1ILW9X0uwQYhAEFpinpA7D98=
Subject key identifier: 1C:3D:AE:EA:58:C9:8D:26:EC:D1:20:53:49:73:C3:FC:9A:9D:75:23
Authority key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
Certificate issuer: /CN=f8648082f888d4097ac4cdba84660b930f75035f
Certificate serial: 019D9C636C546DA502845D167BBE32F670CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
Manifest number: 0179
Signing time: Fri 17 Apr 2026 17:00:54 +0000
Manifest this update: Fri 17 Apr 2026 17:00:54 +0000
Manifest next update: Sat 18 Apr 2026 17:00:54 +0000
Files and hashes: 1: 1-GSAgviI1Al6xM26hGYLkw91A18.crl (hash: GsZqdJD8bJGEdgZM4Zi+8SYvLS8O8W3Q/M2ZiH3EFJQ=)
2: Ld1IptB75UF1wrERs5D-utW7pW8.roa (hash: qkhGZ0ztjC9ORXPQw0r6Rit5ibpjpCY4xiHV/vyohFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:6c:54:6d:a5:02:84:5d:16:7b:be:32:f6:70:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8648082f888d4097ac4cdba84660b930f75035f
Validity
Not Before: Apr 17 17:00:54 2026 GMT
Not After : Apr 18 17:00:54 2026 GMT
Subject: CN=1c3daeea58c98d26ecd120534973c3fc9a9d7523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:8d:6b:1b:19:39:e6:79:bc:63:b3:06:a6:
bc:8d:8f:fa:a0:86:1f:53:cc:2f:dc:91:c6:d5:c8:
dd:fe:d3:e9:4b:cc:19:4f:3a:b8:29:35:d1:e2:52:
f8:b9:40:22:a9:53:a7:03:90:9d:63:5b:24:21:bd:
18:de:55:fb:a0:fc:ec:e6:e4:ee:fe:f7:e9:73:da:
8b:2a:62:69:47:64:90:88:a6:75:f5:d4:cf:6e:c2:
6e:07:cd:bd:ee:22:d5:d4:5f:fd:81:46:29:7f:8d:
e4:54:c4:2a:32:ab:76:5f:9a:88:d9:cc:ed:d2:df:
7b:a6:de:ea:23:4e:3b:f7:09:0f:a3:4c:c6:78:ff:
63:c8:22:3a:7a:f3:05:5e:ae:4c:40:20:3d:e9:f5:
07:5a:68:2d:f5:56:2e:3c:e2:3d:c1:89:e4:87:fe:
cc:1b:81:39:aa:9b:b8:e7:bd:11:0f:9a:c0:b5:c8:
98:8b:c5:7b:11:e3:39:de:15:5f:6a:89:30:4e:d0:
8f:8d:4a:63:5a:3a:ca:2e:85:7e:6c:88:98:50:d1:
d0:94:a4:1e:59:e9:cc:7a:53:55:a3:b5:d9:05:86:
94:2c:31:03:7f:e2:68:13:39:d0:1a:63:12:82:79:
09:65:54:a7:98:c6:cf:5d:c2:e6:d8:30:d1:6f:fa:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:AE:EA:58:C9:8D:26:EC:D1:20:53:49:73:C3:FC:9A:9D:75:23
X509v3 Authority Key Identifier:
keyid:F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7b:a3:4b:2b:57:86:94:f1:5d:8b:6b:bf:60:96:fe:43:a6:
3c:d8:07:75:81:2d:74:dd:a7:fa:2a:2c:ca:d0:53:e0:a2:94:
97:96:e8:5a:98:ea:5b:0a:d8:d1:7e:50:20:70:3f:ec:91:45:
77:a6:ae:71:06:b3:ed:1b:3b:25:bb:01:ab:59:1f:83:3a:db:
a7:18:a0:8e:e5:cd:af:25:03:5b:22:22:cb:b2:f6:7d:37:e7:
af:25:ed:b5:9e:be:08:81:b7:54:56:0d:bf:bb:45:0e:86:62:
83:71:82:37:2b:96:f9:b8:7b:8c:80:b5:2f:05:77:aa:e7:54:
2a:91:00:ae:45:0a:75:22:4c:1c:14:d3:4c:27:7a:60:4a:78:
74:ce:fc:b5:ac:94:28:3c:3d:0f:cc:05:7c:2c:c8:18:a0:e6:
07:47:ed:78:33:db:c0:ad:68:6f:5c:d0:8f:e5:88:ed:a0:bc:
16:c5:7e:26:fc:e1:e7:1a:b9:72:18:6a:62:2f:07:fc:2b:54:
39:e2:5f:f9:2c:e3:65:68:0c:ac:26:06:24:81:9a:e3:ff:8a:
95:82:7c:1d:f8:74:78:cc:eb:90:76:47:91:cd:e3:f5:58:5e:
f8:cc:a6:34:c1:c4:67:c7:60:44:65:7c:ab:f7:33:e1:e0:29:
0e:3e:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:30:58 2026 by rpki-client