Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier: ljz5IWuFF3s2OXG9ScmzY+Cxl9AuKuweaN6vYvosFMw=
Subject key identifier: DE:BA:37:7E:6B:5B:3B:8B:8C:5D:C6:6C:88:56:0D:CA:FE:51:06:D2
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 019D9A3E40ADCBD3859F434DC4D85038F8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number: 099D
Signing time: Fri 17 Apr 2026 07:01:03 +0000
Manifest this update: Fri 17 Apr 2026 07:01:03 +0000
Manifest next update: Sat 18 Apr 2026 07:01:03 +0000
Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: r6deLB+9x1zREzILGv0MZmWtAuSfsdIcZEEe6zGftyg=)
2: Op0Xld0AvV9D-Gn5dQ7yl5fha9k.roa (hash: w+2GDqO3QQPP7xUHnZq2EDl7NnG4Qd4Bmp0KetYUXf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:40:ad:cb:d3:85:9f:43:4d:c4:d8:50:38:f8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Apr 17 07:01:03 2026 GMT
Not After : Apr 18 07:01:03 2026 GMT
Subject: CN=deba377e6b5b3b8b8c5dc66c88560dcafe5106d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:0c:71:23:9b:65:d5:09:75:5b:ef:1d:ce:
d0:04:e3:de:13:3f:8a:b4:e2:ed:0c:b4:5c:97:3f:
7b:cd:f8:37:88:49:82:10:d9:80:bb:03:53:03:18:
d2:bd:1d:20:1f:ca:a0:73:6a:a1:3c:d1:4f:62:c3:
dd:23:e5:96:04:c2:4f:58:0e:28:1f:73:7d:42:04:
93:87:4a:85:56:61:6e:0c:d9:86:fd:bd:ec:26:ed:
56:e2:3c:ad:3d:3f:d0:fd:c2:a8:61:9a:f6:49:1f:
0d:ba:98:81:53:d3:10:a8:78:3a:6e:61:bb:9d:f0:
ce:ba:66:c0:7e:65:a1:7a:9e:d4:60:83:a7:b9:4a:
68:2a:be:90:17:2e:57:85:0e:9e:51:b6:65:f7:dd:
88:38:26:c5:c3:36:ca:4a:65:68:19:cc:a7:40:78:
2d:65:96:b6:7d:37:fa:fd:a2:df:d4:63:8a:de:ac:
ab:27:a6:9a:b7:d2:5f:f3:80:51:58:fc:d2:30:2b:
a9:e4:02:66:cd:35:8a:44:ae:7c:f4:3a:5b:3f:15:
b7:bf:c5:22:f6:d6:d7:10:c9:65:9e:0b:4a:7f:0b:
5b:dc:bc:31:ef:8d:06:d5:ea:0e:4f:c3:05:28:7f:
24:69:be:99:44:8a:ef:f9:15:14:f6:06:72:4f:4d:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:37:7E:6B:5B:3B:8B:8C:5D:C6:6C:88:56:0D:CA:FE:51:06:D2
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5a:84:72:c6:b5:b4:ad:6f:68:28:aa:e2:af:07:97:47:f2:
99:54:c7:57:5a:8f:72:86:d7:b7:7a:af:dc:2b:0c:4f:99:83:
34:68:a6:fc:a0:cb:f1:46:0a:98:de:04:60:65:ec:aa:db:b4:
24:be:57:9b:63:c6:21:44:68:e3:37:c3:92:25:41:32:a9:00:
d6:4c:d8:c0:e9:c2:cf:90:a4:5a:c0:53:4f:82:b2:a5:61:82:
11:90:10:e5:02:34:d5:0a:86:68:70:7c:b2:1f:35:e7:90:dd:
1e:83:45:0b:b4:ba:36:d1:75:44:28:92:a9:f9:26:a7:b0:a7:
77:42:0a:72:60:63:dd:9f:45:89:7b:49:3d:bd:fd:b9:26:5f:
47:61:ce:72:3d:52:1d:34:e5:2a:76:e3:2b:b3:4c:2c:fa:2a:
2a:15:40:a6:56:89:f2:c1:d5:f8:00:fd:9d:21:44:78:c2:5d:
9e:75:52:c4:6e:16:0d:a6:0c:6e:3b:2d:2c:aa:3b:e1:d1:3a:
a1:a6:fc:b6:6c:5b:f6:14:f7:b8:dc:e1:9d:d1:86:65:e3:22:
83:19:f7:45:d1:9b:ee:af:39:45:06:64:ad:df:f5:9d:5a:61:
87:d2:cd:23:35:d9:16:86:ed:a2:d8:29:bb:ce:13:15:a5:2b:
8b:64:99:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPkCty9OFn0NNxNhQOPi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTRiMmVlM2ZkOTgxOTQwMWRhY2JhNDNlYzBhYzIwMGIy
OTU5YzAwHhcNMjYwNDE3MDcwMTAzWhcNMjYwNDE4MDcwMTAzWjAzMTEwLwYDVQQD
EyhkZWJhMzc3ZTZiNWIzYjhiOGM1ZGM2NmM4ODU2MGRjYWZlNTEwNmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtksMcSObZdUJdVvvHc7QBOPeEz+K
tOLtDLRclz97zfg3iEmCENmAuwNTAxjSvR0gH8qgc2qhPNFPYsPdI+WWBMJPWA4o
H3N9QgSTh0qFVmFuDNmG/b3sJu1W4jytPT/Q/cKoYZr2SR8NupiBU9MQqHg6bmG7
nfDOumbAfmWhep7UYIOnuUpoKr6QFy5XhQ6eUbZl992IOCbFwzbKSmVoGcynQHgt
ZZa2fTf6/aLf1GOK3qyrJ6aat9Jf84BRWPzSMCup5AJmzTWKRK589DpbPxW3v8Ui
9tbXEMllngtKfwtb3Lwx740G1eoOT8MFKH8kab6ZRIrv+RUU9gZyT02U3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN66N35rWzuLjF3GbIhWDcr+UQbSMB8GA1UdIwQY
MBaAFBoUsu4/2YGUAdrLpD7ArCALKVnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDct
ZmRhOWNkYzkwZmUzLzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDctZmRhOWNkYzkwZmUz
LzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlqEcsa1
tK1vaCiq4q8Hl0fymVTHV1qPcobXt3qv3CsMT5mDNGim/KDL8UYKmN4EYGXsqtu0
JL5Xm2PGIURo4zfDkiVBMqkA1kzYwOnCz5CkWsBTT4KypWGCEZAQ5QI01QqGaHB8
sh8155DdHoNFC7S6NtF1RCiSqfkmp7Cnd0IKcmBj3Z9FiXtJPb39uSZfR2HOcj1S
HTTlKnbjK7NMLPoqKhVAplaJ8sHV+AD9nSFEeMJdnnVSxG4WDaYMbjstLKo74dE6
oab8tmxb9hT3uNzhndGGZeMigxn3RdGb7q85RQZkrd/1nVphh9LNIzXZFobtotgp
u84TFaUri2SZrg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:44 2026 by rpki-client