Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
File: GNo6QLEX-yVyzPekwnLS7GklKRw.mft (raw, json)
Hash identifier: J8CUySofMg+tnDnozOvdhkGHGFH25fH35C+qMOsCXS8=
Subject key identifier: BF:55:48:FE:C5:99:96:19:06:D5:3A:34:12:B1:08:50:5C:2A:69:1D
Authority key identifier: 18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C
Certificate issuer: /CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
Certificate serial: 019D9A74DA355BC6A02EB5E611331B02E1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 08:00:42 +0000
Manifest this update: Fri 17 Apr 2026 08:00:42 +0000
Manifest next update: Sat 18 Apr 2026 08:00:42 +0000
Files and hashes: 1: GNo6QLEX-yVyzPekwnLS7GklKRw.crl (hash: ovPxKKWl40p4nb9ny6lyvXWQnqd4geHCGCpW7fIcVcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:da:35:5b:c6:a0:2e:b5:e6:11:33:1b:02:e1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
Validity
Not Before: Apr 17 08:00:42 2026 GMT
Not After : Apr 18 08:00:42 2026 GMT
Subject: CN=bf5548fec599961906d53a3412b108505c2a691d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:eb:44:db:a8:24:6d:ff:8b:a0:33:7a:f8:36:
a7:d3:42:ed:4f:1c:fd:52:a8:65:21:3b:a4:1a:4e:
78:fb:69:cf:09:0c:0c:d4:b5:0d:52:4c:9a:06:2b:
72:6c:68:57:19:b3:53:7f:d4:15:73:06:87:e8:61:
20:e1:20:46:44:53:aa:87:0d:f3:e0:c8:b3:e3:5a:
77:79:0f:f5:3b:1b:a2:fa:3e:7d:d0:4d:cf:54:b6:
6a:9e:3a:0c:6b:b5:0f:10:c2:eb:4b:35:e3:a9:da:
cd:25:ac:d7:01:59:3f:f8:9f:fd:7a:19:d9:a9:10:
79:7c:00:58:ac:67:d1:52:86:ad:da:d9:02:b3:50:
45:35:03:e1:97:1d:ed:00:b4:91:ab:41:10:47:06:
90:17:fe:d5:30:17:b6:e8:54:b0:c8:d4:fc:61:06:
e5:bc:0c:f5:45:d4:79:a3:1c:b9:d4:9f:6b:41:dc:
0a:76:8a:a8:8c:1f:d3:7b:49:63:67:fa:db:63:47:
f8:5b:4e:16:cc:c7:1d:23:04:1a:33:22:87:ca:5a:
05:8f:c5:9c:9a:ec:9b:98:e5:00:da:10:a3:a0:68:
52:d3:0d:5a:e6:f3:0c:50:ad:61:4a:58:32:9c:d3:
16:f0:0d:98:4a:26:3e:be:c7:b3:89:2d:51:53:f3:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:55:48:FE:C5:99:96:19:06:D5:3A:34:12:B1:08:50:5C:2A:69:1D
X509v3 Authority Key Identifier:
keyid:18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d8:36:46:1c:2d:ba:e1:d4:a0:e7:bc:ed:4e:6e:6a:c7:c3:
38:65:ea:14:3d:77:e6:64:2a:ab:f3:78:ae:b0:52:cb:2f:39:
35:07:bb:11:7b:ef:9f:0a:b3:93:ec:30:6d:92:8e:21:74:49:
cd:0b:8f:51:4f:00:b3:c1:41:ae:f2:59:d2:83:e4:61:5d:0a:
79:8b:ff:91:d8:b5:5a:de:9f:c0:71:bc:d2:7c:b9:2b:5e:15:
4c:b5:ce:4f:96:7b:95:82:85:63:50:2e:53:67:5f:43:b0:56:
16:40:17:a6:d9:71:14:4b:b5:f0:00:08:75:77:7b:5b:1f:be:
bd:1d:97:16:42:de:b9:c8:87:72:54:e1:33:32:e2:92:a4:fa:
c4:10:8e:44:2b:d6:60:bc:be:25:61:4b:69:30:d4:e4:97:64:
0a:14:75:0f:92:08:51:72:77:44:12:a3:da:c7:91:1e:b5:27:
da:10:33:f3:48:5e:48:67:61:3c:bf:57:ed:d2:b4:a5:6a:a8:
ae:86:64:e6:b6:c1:24:8f:2c:a6:d3:47:2d:a7:59:51:82:1d:
60:8b:a6:7a:17:50:ff:ae:61:64:bc:7a:fc:85:9d:26:c5:a5:
b8:5b:47:b8:ae:ae:e5:9b:4f:3c:1b:d5:47:50:d8:e1:78:1c:
8b:55:f8:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adNo1W8agLrXmETMbAuHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZGEzYTQwYjExN2ZiMjU3MmNjZjdhNGMyNzJkMmVjNjky
NTI5MWMwHhcNMjYwNDE3MDgwMDQyWhcNMjYwNDE4MDgwMDQyWjAzMTEwLwYDVQQD
EyhiZjU1NDhmZWM1OTk5NjE5MDZkNTNhMzQxMmIxMDg1MDVjMmE2OTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OtE26gkbf+LoDN6+Dan00LtTxz9
UqhlITukGk54+2nPCQwM1LUNUkyaBitybGhXGbNTf9QVcwaH6GEg4SBGRFOqhw3z
4Miz41p3eQ/1Oxui+j590E3PVLZqnjoMa7UPEMLrSzXjqdrNJazXAVk/+J/9ehnZ
qRB5fABYrGfRUoat2tkCs1BFNQPhlx3tALSRq0EQRwaQF/7VMBe26FSwyNT8YQbl
vAz1RdR5oxy51J9rQdwKdoqojB/Te0ljZ/rbY0f4W04WzMcdIwQaMyKHyloFj8Wc
muybmOUA2hCjoGhS0w1a5vMMUK1hSlgynNMW8A2YSiY+vseziS1RU/N8VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9VSP7FmZYZBtU6NBKxCFBcKmkdMB8GA1UdIwQY
MBaAFBjaOkCxF/slcsz3pMJy0uxpJSkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR05vNlFMRVgteVZ5elBla3duTFM3R2tsS1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yODk3OWItMGEzNC00YTVjLWEyZmUt
Njk4ZDkxMmI3MzQ2LzEvR05vNlFMRVgteVZ5elBla3duTFM3R2tsS1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yODk3OWItMGEzNC00YTVjLWEyZmUtNjk4ZDkxMmI3MzQ2
LzEvR05vNlFMRVgteVZ5elBla3duTFM3R2tsS1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtg2Rhwt
uuHUoOe87U5uasfDOGXqFD135mQqq/N4rrBSyy85NQe7EXvvnwqzk+wwbZKOIXRJ
zQuPUU8As8FBrvJZ0oPkYV0KeYv/kdi1Wt6fwHG80ny5K14VTLXOT5Z7lYKFY1Au
U2dfQ7BWFkAXptlxFEu18AAIdXd7Wx++vR2XFkLeuciHclThMzLikqT6xBCORCvW
YLy+JWFLaTDU5JdkChR1D5IIUXJ3RBKj2seRHrUn2hAz80heSGdhPL9X7dK0pWqo
roZk5rbBJI8sptNHLadZUYIdYIumehdQ/65hZLx6/IWdJsWluFtHuK6u5ZtPPBvV
R1DY4Xgci1X4sw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:41:27 2026 by rpki-client