Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json)
Hash identifier: bjLqzdahrlSs4yvd7wMHt7YQdb6mmME40o5upxzU2L8=
Subject key identifier: 8C:8F:79:3D:9F:79:B3:8F:D9:5F:73:11:75:0D:C0:5C:0E:46:6E:6D
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 019D97E1CFB7D3FFAF22F302BE03E8954EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 20:00:51 +0000
Manifest this update: Thu 16 Apr 2026 20:00:51 +0000
Manifest next update: Fri 17 Apr 2026 20:00:51 +0000
Files and hashes: 1: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: b5TgeLJjwTl1FB4MIXyaVwjURgQ3HZWzETdAvX4FS8M=)
2: T9LuV_lKN_28uDuP4XufTzMSbP4.roa (hash: RqEiAiqPldTyuCtIL3PVLaEYZ+maSd+fgKyN1HQoYbc=)
3: TgCNYCVBJe7DHibK2wEIBWCuz98.roa (hash: QIFBXUnI5cHb70d+ToykREH9LNgrc+X3rqWxt+px7zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:cf:b7:d3:ff:af:22:f3:02:be:03:e8:95:4e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Apr 16 20:00:51 2026 GMT
Not After : Apr 17 20:00:51 2026 GMT
Subject: CN=8c8f793d9f79b38fd95f7311750dc05c0e466e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:ac:58:f5:b1:95:cd:73:86:88:62:c8:e3:
5a:21:db:9b:fb:63:33:c5:90:6f:32:ec:ff:dd:f2:
77:86:aa:9a:82:fe:7e:17:b3:a8:1e:3c:e5:a5:37:
53:73:40:8c:5a:c2:28:21:a8:3d:d1:28:7d:94:04:
03:27:04:cf:56:a3:4a:f4:7e:8d:eb:eb:ee:09:56:
1c:1a:5f:fe:79:4c:ab:a4:3e:53:4b:fe:08:18:bf:
18:29:e5:f2:88:c0:d4:d3:8b:79:af:92:92:55:96:
ef:19:06:1b:db:10:10:d8:4c:d4:f2:c3:2d:7f:d1:
76:19:b5:9a:50:39:d6:f5:68:9e:d9:89:ee:bd:3c:
06:6b:74:33:7f:e1:d3:41:38:65:47:57:54:f8:ae:
d9:2a:93:51:f5:06:82:45:dc:63:d8:94:1b:9e:57:
a9:92:05:82:80:e6:6f:82:3e:6f:e5:14:66:6e:2c:
23:74:a7:1d:c3:88:dd:0d:46:72:f7:7f:ac:96:04:
3a:63:52:ef:f5:d6:0a:6e:bc:4d:e0:f5:c4:2e:37:
de:c9:90:6b:cc:db:d4:7c:74:b3:11:6c:bf:40:0f:
14:72:04:da:17:75:0b:5f:86:96:1a:bd:c5:14:b0:
59:bc:fd:97:a5:24:16:dd:60:a2:df:94:23:0c:5d:
6f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8F:79:3D:9F:79:B3:8F:D9:5F:73:11:75:0D:C0:5C:0E:46:6E:6D
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:14:88:9f:fb:38:4b:cc:fc:dc:dc:64:58:e8:e6:13:c9:8a:
ae:df:fe:09:8b:7f:8b:de:d7:42:fa:0a:33:5c:6e:20:27:e8:
49:8d:e5:cd:4d:8d:f4:5e:d2:12:8b:23:a5:69:b3:47:cc:da:
86:ad:9e:c3:0d:f8:77:6a:72:38:9c:e6:37:ee:f5:da:a7:e8:
83:c4:b0:30:1e:fc:f2:af:9f:2f:3f:f5:62:74:23:ef:58:0f:
a2:1d:7c:46:77:6a:36:58:65:e8:99:54:43:aa:2d:3b:a6:0e:
e1:6d:e9:f9:16:1a:70:6b:93:ab:3e:7b:8e:72:8d:d9:0c:f0:
a7:e9:0d:2e:d2:4e:06:da:cf:70:f3:03:f7:a4:a6:9a:40:70:
dd:96:94:e8:4f:3e:37:cf:6d:a2:33:2e:bf:f8:da:37:dd:49:
e1:bf:ba:6b:6e:9e:25:4c:ba:75:da:9d:15:c5:bc:53:ac:93:
3b:64:7d:5b:75:56:dd:00:f9:6d:35:34:62:52:a3:1c:3d:5a:
53:8d:2f:89:e7:9e:ba:20:70:b0:33:62:62:7c:4f:c5:c9:d9:
f1:13:4b:cb:8f:c0:91:4a:fa:10:7e:94:e5:a3:5b:4e:9a:2b:
20:b6:fa:b0:c1:4f:e2:a5:d1:7b:f8:98:b7:20:2a:69:58:b4:
51:8b:92:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:27 2026 by rpki-client