Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json)
Hash identifier: 1dUveSDYeXbhB/RhDWD6X5zJIcVvLys+zHBNRj10aWo=
Subject key identifier: E0:79:6A:00:70:77:30:C8:CB:7B:2E:43:4E:A5:61:C1:68:15:0E:49
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial: 019D98F5387B4ED962E5E890F8B1A037A086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
Manifest number: 1896
Signing time: Fri 17 Apr 2026 01:01:40 +0000
Manifest this update: Fri 17 Apr 2026 01:01:40 +0000
Manifest next update: Sat 18 Apr 2026 01:01:40 +0000
Files and hashes: 1: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: oGd9OcYYvQFLMkcHpcZW09lRfm5bWVsOmEfLr1jRAlU=)
2: Qmu3wW12Nt0wC-4fyX9XhN0sy00.roa (hash: 3puXzcVdaiUqy4sNyffXvbU1Eh7Kt4nob6sCXMDl8Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:38:7b:4e:d9:62:e5:e8:90:f8:b1:a0:37:a0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Validity
Not Before: Apr 17 01:01:40 2026 GMT
Not After : Apr 18 01:01:40 2026 GMT
Subject: CN=e0796a00707730c8cb7b2e434ea561c168150e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:92:14:b4:e6:b3:d5:c2:cf:5a:e1:62:58:
78:0e:36:b3:9f:41:c2:e2:f9:ae:5f:e2:01:15:c0:
1c:e9:2e:24:4b:84:8d:b3:65:f0:35:96:7b:c9:1d:
0f:26:57:06:db:0d:74:0c:3d:23:7b:b2:37:1e:17:
87:a6:34:45:6f:fd:5c:4d:0a:1c:dc:5f:e0:ef:0e:
dc:6e:b2:d4:ce:4f:23:59:a5:a1:70:6f:b9:b4:48:
1d:87:df:bb:5b:bf:0b:32:d9:43:ae:64:9e:b0:1d:
24:44:bf:b8:f8:ff:26:64:c1:1b:84:c8:d7:50:5f:
ac:25:a6:fa:30:51:92:12:8a:6f:fe:7e:ab:dc:49:
39:19:be:70:6b:53:55:df:d2:70:c7:c1:2b:88:f6:
8b:b0:51:0e:f3:de:26:6d:27:72:6d:9d:9c:0b:ce:
69:7c:88:fb:a0:4f:13:ad:0a:17:53:63:6f:b1:d0:
b5:32:f4:50:2d:c3:ea:64:64:f8:a1:ac:c3:66:9e:
99:07:43:bc:36:f8:76:e6:5a:c4:01:b5:a0:6d:d4:
45:80:db:bb:00:58:5c:6d:1b:46:63:ae:44:bf:f0:
36:9f:bb:42:de:cd:eb:b0:c2:0c:39:37:0d:bf:0b:
f7:d6:ff:ff:d2:6c:ef:37:6f:35:0c:2a:ec:4e:29:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:79:6A:00:70:77:30:C8:CB:7B:2E:43:4E:A5:61:C1:68:15:0E:49
X509v3 Authority Key Identifier:
keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:59:4e:40:9f:6f:e9:73:8d:43:53:57:c2:24:9c:04:b5:96:
21:e9:92:aa:fd:99:0a:20:fc:78:96:04:2a:63:e5:69:67:69:
c7:ac:94:f5:61:9f:1f:82:9f:40:b9:a8:89:c2:93:65:f6:5c:
20:37:16:3a:e1:94:b7:fa:b7:c8:ed:58:80:72:13:b3:f6:31:
e8:cf:b2:87:40:cd:5d:1b:17:5d:52:5a:c8:b1:cd:23:65:e1:
03:5a:6b:13:84:40:19:a3:46:2f:c8:e4:80:cd:e5:15:62:ec:
da:95:44:6b:b5:3b:f0:8f:5c:ed:38:f0:04:5e:d0:1c:3e:72:
e8:48:ab:b1:7d:21:f7:5c:53:cd:00:8a:86:7b:c1:53:3a:43:
cd:70:3f:44:5e:fa:36:5b:fd:5b:56:1f:e5:e9:7f:34:cc:b6:
68:d4:66:ec:16:91:3e:0a:93:8c:7a:b5:1f:e6:d3:2c:85:b8:
ab:0f:0a:df:e6:a7:bd:e6:5f:27:dd:2a:dc:b6:d0:4b:dc:38:
74:d9:e7:9b:70:44:b8:e8:50:24:df:8c:3a:45:2f:31:8f:5e:
7c:f5:67:71:76:bf:99:2b:a7:a9:03:ae:ac:42:c6:20:1a:cc:
92:4c:2b:ce:b8:f5:e0:82:88:21:15:17:78:b6:1e:45:8c:98:
9c:96:f4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:04 2026 by rpki-client