Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier: Jh2hxVORgC6IfabW6q9nFeRcCAgTtKupYknJL4JJgQE=
Subject key identifier: CB:E1:72:08:DF:D9:CD:DE:4A:49:31:83:D1:81:D1:CA:14:7D:C9:FF
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 019D9B880FC8B35BD15CE89C8BD91AC6C394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 13:01:18 +0000
Manifest this update: Fri 17 Apr 2026 13:01:18 +0000
Manifest next update: Sat 18 Apr 2026 13:01:18 +0000
Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: 3sp8hPyF9er3ghhxtGrplgFcwMDGLFBwrhKqL3xPn1Q=)
2: i220VObPvHT4HgCF-uOpmI807FY.roa (hash: s9QayADVhAmQKcOJ9dlrMCwrdZV1G0CVNvgi0G197E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:0f:c8:b3:5b:d1:5c:e8:9c:8b:d9:1a:c6:c3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Apr 17 13:01:18 2026 GMT
Not After : Apr 18 13:01:18 2026 GMT
Subject: CN=cbe17208dfd9cdde4a493183d181d1ca147dc9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:69:3c:ef:a9:cf:63:26:77:8b:ad:16:fb:6b:
12:c0:ca:bb:63:64:bd:54:5a:ee:5f:24:42:c3:3a:
cd:e0:cb:a5:7c:f4:bb:2c:92:f3:ac:74:4a:70:ad:
ec:fa:b1:fc:40:f6:d4:c7:00:44:27:56:cd:98:75:
49:fd:ef:2a:82:76:85:67:bc:a4:6e:23:5c:9a:82:
b0:85:54:3f:99:5f:98:55:02:61:04:30:8a:5e:f4:
96:a0:25:80:04:b5:0e:26:a6:fe:72:ba:e6:3a:0d:
64:49:0f:18:64:1c:9b:e9:5f:00:a1:46:1d:fb:49:
bd:e2:85:a8:73:82:38:20:bb:7e:98:8c:67:f9:b9:
a6:a7:0a:d9:0f:79:5f:3a:e4:73:f1:9a:d0:b3:13:
b5:f8:11:f2:62:d6:f6:20:04:89:2b:30:b4:4a:10:
af:d4:d3:03:f1:4c:03:af:55:07:13:55:18:b0:55:
6e:d9:9b:e8:90:e9:a1:4a:17:b3:81:4b:d9:a7:d5:
b8:f5:a5:eb:70:01:a4:1c:c4:69:d7:08:d4:a2:f8:
4c:96:52:43:98:ee:f9:1b:67:86:fb:a8:f6:6c:d8:
d0:d9:ef:db:17:76:93:e4:61:a9:d3:6f:b2:c0:fe:
6c:e0:b6:5e:16:bf:ce:f7:7e:2a:18:66:24:12:3a:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E1:72:08:DF:D9:CD:DE:4A:49:31:83:D1:81:D1:CA:14:7D:C9:FF
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6d:18:04:6e:d7:cd:6d:72:27:39:eb:c9:84:b8:91:90:69:
e0:43:3b:a6:59:e7:d9:84:f3:0a:0c:eb:1e:da:a2:0f:d9:da:
ae:f6:0a:1e:0f:2a:67:30:4a:ab:8f:d3:0d:72:0d:74:41:26:
99:c7:15:33:a6:7b:65:20:06:31:ce:cb:1c:0c:16:c3:55:f3:
b4:a8:81:47:47:80:12:b1:22:06:d8:a9:c0:cd:c0:ce:68:6e:
ce:7f:89:5b:44:94:f1:03:07:31:ed:02:11:f5:6b:f3:b3:92:
d6:69:e0:ba:a3:02:5e:1c:09:f4:bb:60:cf:a6:7b:1a:4b:21:
43:89:90:df:fa:9e:e8:db:f1:bf:8d:9f:fa:5c:97:b5:00:ae:
fe:e8:dd:45:36:ae:64:40:06:af:65:ce:40:6c:5e:a4:17:14:
48:25:59:24:dd:9d:39:3c:74:46:c2:69:65:50:b1:79:fd:94:
b8:9f:50:f3:be:0d:33:4e:27:05:3a:25:07:81:e9:ad:a9:da:
ad:a2:0a:be:50:9c:c9:e7:73:4c:5b:a7:cd:f6:08:b5:fd:a2:
f7:3f:3c:84:af:e7:24:5f:b4:cf:66:45:f2:70:f5:7c:24:dd:
ca:18:5d:b4:aa:7b:bf:0d:a6:77:9a:65:2c:ad:24:61:13:de:
99:3a:8b:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2biA/Is1vRXOici9kaxsOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YWNmMDdmMTM1MjIyMjY1OGI3ODllNGZlNDBlYTM4YThh
YTcxZGYwHhcNMjYwNDE3MTMwMTE4WhcNMjYwNDE4MTMwMTE4WjAzMTEwLwYDVQQD
EyhjYmUxNzIwOGRmZDljZGRlNGE0OTMxODNkMTgxZDFjYTE0N2RjOWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gk876nPYyZ3i60W+2sSwMq7Y2S9
VFruXyRCwzrN4MulfPS7LJLzrHRKcK3s+rH8QPbUxwBEJ1bNmHVJ/e8qgnaFZ7yk
biNcmoKwhVQ/mV+YVQJhBDCKXvSWoCWABLUOJqb+crrmOg1kSQ8YZByb6V8AoUYd
+0m94oWoc4I4ILt+mIxn+bmmpwrZD3lfOuRz8ZrQsxO1+BHyYtb2IASJKzC0ShCv
1NMD8UwDr1UHE1UYsFVu2ZvokOmhShezgUvZp9W49aXrcAGkHMRp1wjUovhMllJD
mO75G2eG+6j2bNjQ2e/bF3aT5GGp02+ywP5s4LZeFr/O934qGGYkEjqx8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvhcgjf2c3eSkkxg9GB0coUfcn/MB8GA1UdIwQY
MBaAFBms8H8TUiImWLeJ5P5A6jioqnHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMt
NzE2YzAzNDdhYTc2LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMtNzE2YzAzNDdhYTc2
LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAom0YBG7X
zW1yJznryYS4kZBp4EM7plnn2YTzCgzrHtqiD9narvYKHg8qZzBKq4/TDXINdEEm
mccVM6Z7ZSAGMc7LHAwWw1XztKiBR0eAErEiBtipwM3Azmhuzn+JW0SU8QMHMe0C
EfVr87OS1mnguqMCXhwJ9Ltgz6Z7GkshQ4mQ3/qe6Nvxv42f+lyXtQCu/ujdRTau
ZEAGr2XOQGxepBcUSCVZJN2dOTx0RsJpZVCxef2UuJ9Q874NM04nBTolB4Hprana
raIKvlCcyedzTFunzfYItf2i9z88hK/nJF+0z2ZF8nD1fCTdyhhdtKp7vw2md5pl
LK0kYRPemTqLPA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:59:13 2026 by rpki-client