Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: fLPxmN2A8laf6Xu+56xDw9JUN8ucTWNJ484Lz3vQF0k=
Subject key identifier: D3:84:AA:DD:D1:D7:99:2A:E5:26:FF:C1:64:50:10:9C:FA:96:9D:FA
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 019D9AABD5753C604D74FDE8D26DA3092634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:00:45 +0000
Manifest this update: Fri 17 Apr 2026 09:00:45 +0000
Manifest next update: Sat 18 Apr 2026 09:00:45 +0000
Files and hashes: 1: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: 3+X6y+8FJgEEda8F42+64AClz6Tk+XpqLCLDLioVLUk=)
2: NYfYWYZMa_439o1QRYF0WdRM5MM.roa (hash: 8UO+Z6kVQhD/teXdacx0W8x4zMZ5SdEkPaLtrfrmHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:d5:75:3c:60:4d:74:fd:e8:d2:6d:a3:09:26:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Apr 17 09:00:45 2026 GMT
Not After : Apr 18 09:00:45 2026 GMT
Subject: CN=d384aaddd1d7992ae526ffc16450109cfa969dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:7d:01:4e:91:66:cf:f6:68:59:79:44:3e:
9d:46:06:1a:57:0e:be:66:c2:0c:7f:24:3f:7f:7f:
02:87:e5:2a:3b:aa:31:72:26:67:3d:bd:31:2a:de:
67:b4:74:6c:a8:e0:a5:a2:75:83:4a:09:1a:83:09:
57:1c:a6:69:b1:67:a8:40:d4:d1:7f:90:21:64:a1:
f2:93:49:6b:f8:00:18:bf:1f:5a:ea:88:48:47:21:
32:5c:c6:a8:93:5a:8e:7f:89:6e:b9:76:35:e0:86:
a2:bc:0e:10:48:9f:d0:19:2a:67:ae:15:e6:83:31:
1c:44:37:de:d5:5c:fe:dc:d9:4b:6b:d0:82:ba:e7:
e4:3d:43:80:74:3d:39:b8:c0:e5:b7:94:4d:90:0a:
1f:cd:d0:89:90:3f:a7:0b:3a:9a:59:f3:89:94:47:
1c:4a:9c:2e:f8:8e:f5:5e:c8:af:03:98:48:69:54:
d7:29:b5:a0:1e:70:4d:97:4f:9f:36:59:d2:d6:27:
c3:d0:29:10:76:4f:49:6b:bc:85:3a:65:f4:bb:05:
32:15:8c:ca:74:3c:86:95:04:8e:66:e9:27:b1:d7:
bd:ef:42:61:21:90:a4:68:ec:e1:b2:d2:32:33:e7:
e9:19:b6:fb:b4:2b:17:e9:60:d7:25:36:7a:89:26:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:84:AA:DD:D1:D7:99:2A:E5:26:FF:C1:64:50:10:9C:FA:96:9D:FA
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:db:4b:78:e6:6a:be:a2:d2:4d:1f:86:21:0d:d0:32:67:4d:
7c:6a:9f:68:91:28:20:48:4b:73:45:11:c1:89:3b:2e:2b:47:
25:06:87:75:95:c8:a4:4b:2b:18:a1:5b:20:08:23:53:83:7d:
49:f9:a1:dc:59:06:5a:30:e9:10:db:7d:01:f1:c3:4d:dc:54:
1a:64:e2:48:fa:12:35:6d:21:0f:fc:61:32:c7:a0:4b:62:7a:
3c:36:ee:57:a8:bc:09:24:ce:4c:68:35:dd:b5:8c:f9:06:e0:
4a:d9:4c:1e:7a:09:3f:11:18:56:69:77:9b:be:8f:94:2d:0f:
0b:80:cd:80:75:75:8c:3c:20:6e:ce:1a:ef:50:b6:3d:b5:e6:
b7:7b:46:8a:86:42:5b:1a:ba:9c:0b:e6:ec:77:bc:de:a2:26:
bf:79:ec:44:70:c7:15:5a:08:b1:96:82:40:b5:e8:d1:ca:b9:
36:e5:c7:29:ff:89:e6:73:67:a7:8d:97:f1:d9:7d:bb:c6:0f:
58:a6:8f:5a:35:e7:bd:3e:4b:d2:fe:e1:42:5b:6b:ac:49:14:
c3:1c:42:59:ad:f8:ef:0f:0e:ae:d2:ab:4f:4c:84:17:3e:e5:
3a:47:41:67:d8:e4:6b:85:ae:fc:ed:35:ef:33:67:48:ad:8e:
3e:63:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:52 2026 by rpki-client