Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json)
Hash identifier: /WNBREVsEXg8YilJRONuUZM4Pk6Z5tjLfzbe8Y4DfvQ=
Subject key identifier: 79:56:4C:CE:E7:A2:22:1F:79:B1:E5:91:6E:85:E5:DA:C3:0D:EA:30
Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
Certificate issuer: /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Certificate serial: 019D9C2C49E4599754F787B9045C0E28825E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
Manifest number: 087B
Signing time: Fri 17 Apr 2026 16:00:41 +0000
Manifest this update: Fri 17 Apr 2026 16:00:41 +0000
Manifest next update: Sat 18 Apr 2026 16:00:41 +0000
Files and hashes: 1: BrA8u2faJKSWsAITat9kgoQt3WE.roa (hash: gxZOLWmQMlnhj/neNAY1nmBM8bF2InZz8Umo3wa3Z6A=)
2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: c7Sxa5RnZT7e+LHgYJZY/YxiEb+U3ztCM+G5BGYTkBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:49:e4:59:97:54:f7:87:b9:04:5c:0e:28:82:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Validity
Not Before: Apr 17 16:00:41 2026 GMT
Not After : Apr 18 16:00:41 2026 GMT
Subject: CN=79564ccee7a2221f79b1e5916e85e5dac30dea30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:f4:05:a4:49:94:3a:d1:5f:70:8b:1f:65:
a3:1c:02:97:6b:1a:5b:3a:24:b7:27:68:41:5b:d1:
f9:08:9a:ea:95:dc:c7:c7:73:84:a6:a4:8e:27:8f:
d3:3f:ce:65:84:cb:8b:cb:ca:53:91:eb:2d:a7:70:
c8:c3:58:61:ed:ba:e1:35:32:07:76:24:ea:33:4b:
e5:a8:33:a8:f5:05:89:a9:86:d0:2a:fa:8f:30:ef:
bc:9a:86:10:84:6a:a3:3f:1c:7e:cd:36:0e:c0:67:
59:23:ce:e5:10:3e:2e:02:e2:a8:af:35:e2:54:17:
09:6a:55:0a:4a:29:e3:26:4a:09:b8:ed:4d:b8:e0:
a2:7a:5b:a4:80:21:e8:dc:ac:4d:e7:d2:8e:1a:51:
82:8d:34:ee:64:05:e3:27:db:66:08:98:a7:1b:d9:
09:28:e1:1c:a6:70:4c:d0:87:47:c4:f0:f0:68:8d:
20:00:16:8a:5c:d1:3a:ad:8a:c5:cd:a7:21:18:dd:
be:9b:63:d1:84:19:1a:b7:46:00:16:6e:7d:09:1b:
93:53:55:ca:8a:5b:21:02:53:1d:95:0a:2a:73:de:
93:75:86:05:d1:b4:98:57:8c:e9:4e:e7:89:5e:72:
3a:54:fc:9c:71:95:d6:18:c9:44:c4:ca:41:0a:5f:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:56:4C:CE:E7:A2:22:1F:79:B1:E5:91:6E:85:E5:DA:C3:0D:EA:30
X509v3 Authority Key Identifier:
keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:31:fc:bd:f8:54:49:7b:ae:83:16:c3:b6:91:02:a7:63:13:
a6:95:08:3e:26:9b:0d:f8:8c:b3:79:b8:60:22:ec:6b:64:4f:
40:e5:c7:78:fd:d7:52:9f:bb:43:c0:32:f5:5c:87:18:4e:b3:
35:21:80:60:8c:93:7d:f1:1d:9a:bc:96:e2:4f:ac:c3:f1:c5:
59:17:2b:cb:a3:cb:5b:df:95:3d:b3:c5:b6:ab:cb:c4:49:73:
4f:d0:d0:18:33:6d:f9:db:de:92:b6:79:c7:1d:f5:66:c5:a3:
fe:a1:42:a0:9b:60:cc:7b:5f:87:c1:ea:ee:05:98:8f:63:bd:
42:37:00:bd:c9:98:1c:97:f4:4e:e4:1a:bf:97:2d:d8:c6:63:
48:55:e8:c9:78:be:13:0a:c8:f3:cd:6f:7c:03:6d:9e:99:31:
8a:b1:da:6c:5e:14:e6:b1:d1:e3:ca:e4:e4:e7:38:a5:ed:8c:
15:9c:d3:64:77:6c:c0:0b:c2:95:e8:07:e6:b0:67:c4:4e:c9:
3c:94:63:77:86:6b:32:2a:1c:31:49:6f:f9:4d:19:24:56:93:
5f:fe:6d:64:f7:76:2d:d7:8b:96:d4:9e:48:d3:7d:7b:dc:af:
e9:03:ac:23:de:06:d5:d5:1b:c9:54:7d:3f:2b:61:eb:93:7d:
5c:37:c1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:25 2026 by rpki-client