Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: q58DnYw4PQAQmp3UiZ3ysKYliquPC/vn9SfiK7BjQ1E=
Subject key identifier: 36:F0:DF:30:36:DD:BF:FC:D9:0E:99:AC:B9:46:45:07:AF:3C:40:BC
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 019D9962AFF5CA062A51EB8D3DBB502B6B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0AE5
Signing time: Fri 17 Apr 2026 03:01:14 +0000
Manifest this update: Fri 17 Apr 2026 03:01:14 +0000
Manifest next update: Sat 18 Apr 2026 03:01:14 +0000
Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=)
2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: qj+bIGJlp1WhiVbfXwOW6yW9xXPtzrb8NetK9LuBkd4=)
3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:af:f5:ca:06:2a:51:eb:8d:3d:bb:50:2b:6b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Apr 17 03:01:14 2026 GMT
Not After : Apr 18 03:01:14 2026 GMT
Subject: CN=36f0df3036ddbffcd90e99acb9464507af3c40bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:dd:b6:ec:65:b7:2c:ce:0f:ce:e9:05:7e:
40:56:94:80:7e:ae:d6:df:bc:44:f5:a9:7a:2d:cf:
58:6d:5a:df:8e:85:5e:53:74:be:f9:92:c9:7a:39:
be:b4:ef:41:16:af:77:4b:2d:fa:78:7a:a4:e3:21:
a3:7d:c2:d7:a0:42:db:e8:13:95:29:66:06:da:03:
42:03:d2:4e:fd:20:2a:74:8e:53:e8:90:44:ae:d1:
d4:c9:ea:e5:79:46:5d:49:40:2e:2d:5e:15:57:11:
b4:00:0f:c6:11:08:e4:2f:0a:f8:6f:6e:4d:fd:8a:
df:ce:90:0d:28:7f:32:a3:84:f9:24:ec:d3:61:1f:
d7:a4:58:76:f5:2a:f9:1b:c9:41:2c:55:5e:4f:53:
ac:e2:1d:59:86:0c:4d:42:10:c1:9e:4d:86:61:3f:
1c:ad:87:dd:15:60:76:84:e5:fb:4d:12:05:e4:87:
fa:9b:f4:29:4d:2b:5d:e9:4e:14:1a:ae:a3:f7:ed:
9c:fa:c1:e8:c2:07:92:a8:b4:23:db:d7:bd:87:43:
a2:4c:57:87:37:de:3e:0e:c1:ea:50:c6:6d:b1:71:
2f:b2:cd:70:42:6e:0d:70:e2:6e:9d:1c:6d:53:6c:
5e:32:ae:3c:03:bd:74:de:b5:09:64:64:fa:5c:42:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F0:DF:30:36:DD:BF:FC:D9:0E:99:AC:B9:46:45:07:AF:3C:40:BC
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6e:e2:dc:92:cf:0a:bf:d9:e1:36:78:06:d8:74:d2:55:6d:
5e:4e:f9:24:07:84:4d:02:4b:6e:d9:80:fb:4c:f3:b9:ff:79:
56:ac:a7:0d:73:97:9b:f0:f0:32:00:b3:b1:1c:9d:c9:0b:30:
b6:30:44:03:73:e6:1a:4c:e0:5b:03:67:bf:c0:16:b8:e6:79:
24:ab:9f:d5:10:25:82:c7:90:8e:15:af:73:8a:50:ad:ae:ed:
b3:c3:6b:4a:07:4d:6b:18:28:cb:bd:58:66:f7:36:c8:a9:72:
fb:28:23:73:5b:86:a1:87:2a:5f:d9:0b:6c:1e:7d:38:06:09:
36:d9:5c:6f:4a:d5:cb:49:7d:ed:61:eb:56:bd:22:ef:3d:f7:
7e:ef:d9:f6:f4:55:c4:f6:b6:8c:0d:a5:57:4a:ad:06:46:ff:
aa:a8:73:d4:7c:0b:9d:c9:de:bd:a0:d5:7e:88:ad:97:2a:80:
c4:c5:9a:9c:99:42:c8:d0:ae:c7:b5:00:00:8c:c5:96:39:74:
3c:f7:b1:39:95:b5:a1:c7:b0:4a:90:6c:7b:5c:da:21:e4:64:
f8:3f:46:cb:5f:61:a2:76:37:fb:4b:9e:26:49:e2:64:74:1b:
5d:d0:7e:19:36:2f:ad:88:7e:fc:58:0f:5d:27:24:3c:5a:e3:
0c:49:43:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:53 2026 by rpki-client