Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
File: gRsX62FjiTMhtH5K9_pWsBxfN7U.mft (raw, json)
Hash identifier: 3u1xfW9NOCm7XdxWrlWLPtKkK6s2wPZOSnM/AlmwS04=
Subject key identifier: 22:EC:2C:15:0F:BE:C3:FE:D8:69:4F:E8:F8:B8:EC:0B:B8:2F:75:25
Authority key identifier: 81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5
Certificate issuer: /CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
Certificate serial: 019D99D060A30CB9308EC60C4103FC71C0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 05:01:03 +0000
Manifest this update: Fri 17 Apr 2026 05:01:03 +0000
Manifest next update: Sat 18 Apr 2026 05:01:03 +0000
Files and hashes: 1: gRsX62FjiTMhtH5K9_pWsBxfN7U.crl (hash: hI2YEH6n1XtVRKHGIfPnlbLMGai6IiLPgK3EYpuf+P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:60:a3:0c:b9:30:8e:c6:0c:41:03:fc:71:c0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
Validity
Not Before: Apr 17 05:01:03 2026 GMT
Not After : Apr 18 05:01:03 2026 GMT
Subject: CN=22ec2c150fbec3fed8694fe8f8b8ec0bb82f7525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:76:9b:f3:d1:0d:de:68:21:a4:a2:14:72:
b4:44:ca:1a:60:be:e9:42:86:52:f1:bf:62:43:a6:
31:69:87:4e:fb:0c:92:19:9c:6e:84:87:48:ef:e9:
df:7a:b2:36:c6:5e:8d:ed:7b:a3:88:f8:24:e6:8d:
37:9e:5c:db:99:eb:8d:65:28:ab:24:74:01:76:4f:
94:f5:23:7d:7d:43:68:36:fc:b2:7c:1c:23:9e:00:
8b:56:91:c6:5e:63:38:6a:bc:0a:c8:b1:a8:b8:ae:
19:ff:0f:6a:a6:56:bc:7e:ee:31:1e:d8:df:5e:63:
58:5d:88:41:10:e4:3d:10:96:95:9d:5a:28:60:76:
34:80:0a:f5:d1:7f:9a:81:2a:c0:27:92:ac:18:a4:
96:dd:2f:ab:71:bf:95:6f:ff:6a:58:ae:2e:e8:78:
13:8a:aa:e4:72:70:0e:08:7e:26:f0:b3:e3:fd:12:
13:4b:3e:fb:b5:f3:66:41:70:fc:d7:dc:e5:fe:49:
4e:b2:91:2c:ed:79:33:fa:6c:76:c9:3c:bd:7a:c5:
af:0f:29:9e:22:18:90:b3:ad:85:f4:bf:ce:89:cb:
2e:fd:23:ad:3b:8b:17:25:73:c6:cd:3e:ea:7c:32:
c4:ed:d0:2e:54:e3:7e:9e:db:a2:6d:55:15:12:a1:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EC:2C:15:0F:BE:C3:FE:D8:69:4F:E8:F8:B8:EC:0B:B8:2F:75:25
X509v3 Authority Key Identifier:
keyid:81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cf:c1:73:0c:e5:cc:9a:ae:b0:3a:13:5c:5c:71:8d:32:59:
51:6b:99:35:ec:ff:db:f1:04:81:b7:25:4b:89:f8:6c:29:8b:
eb:47:7d:bd:9e:a2:72:c0:64:9a:30:b7:6f:1a:de:2c:cb:da:
e2:e2:f6:b8:f9:3c:7d:e6:df:50:0a:25:43:ee:c6:a6:61:b1:
64:1f:c5:08:aa:5e:63:d2:03:af:69:d6:8f:ae:a8:5b:74:1b:
26:f8:d2:0b:97:17:f5:41:00:eb:71:f2:6c:3e:74:98:3c:f2:
42:de:f6:22:01:09:02:96:3f:bf:5b:92:dd:92:5b:35:e3:fc:
f2:d1:97:8d:3c:3e:a7:62:a3:b5:47:b1:a8:18:41:3b:37:49:
e6:2d:ab:fa:4b:73:ba:ff:53:91:75:34:69:ff:5e:f0:8b:4d:
6b:9e:ab:57:cf:56:7e:c6:c7:db:d5:61:3b:b7:fb:6f:2e:22:
aa:9f:4f:2d:b5:6b:3a:c9:2c:83:aa:22:c7:5e:f5:66:6d:5c:
93:47:04:92:e3:25:ce:0a:14:9c:ae:27:f3:0e:02:c0:af:69:
f8:71:92:21:44:f5:be:66:9f:b6:63:77:25:6b:be:8b:85:37:
65:17:42:12:49:d4:47:b2:12:bf:94:b7:25:2e:32:a9:dd:6d:
c6:7c:16:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0GCjDLkwjsYMQQP8ccDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMWIxN2ViNjE2Mzg5MzMyMWI0N2U0YWY3ZmE1NmIwMWM1
ZjM3YjUwHhcNMjYwNDE3MDUwMTAzWhcNMjYwNDE4MDUwMTAzWjAzMTEwLwYDVQQD
EygyMmVjMmMxNTBmYmVjM2ZlZDg2OTRmZThmOGI4ZWMwYmI4MmY3NTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVR2m/PRDd5oIaSiFHK0RMoaYL7p
QoZS8b9iQ6YxaYdO+wySGZxuhIdI7+nferI2xl6N7XujiPgk5o03nlzbmeuNZSir
JHQBdk+U9SN9fUNoNvyyfBwjngCLVpHGXmM4arwKyLGouK4Z/w9qpla8fu4xHtjf
XmNYXYhBEOQ9EJaVnVooYHY0gAr10X+agSrAJ5KsGKSW3S+rcb+Vb/9qWK4u6HgT
iqrkcnAOCH4m8LPj/RITSz77tfNmQXD819zl/klOspEs7Xkz+mx2yTy9esWvDyme
IhiQs62F9L/Oicsu/SOtO4sXJXPGzT7qfDLE7dAuVON+ntuibVUVEqEWGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLsLBUPvsP+2GlP6Pi47Au4L3UlMB8GA1UdIwQY
MBaAFIEbF+thY4kzIbR+Svf6VrAcXze1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTFjNTctZjQwMC00NjEzLWFhNTkt
ZDRhN2JhNjYwY2VlLzEvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTFjNTctZjQwMC00NjEzLWFhNTktZDRhN2JhNjYwY2Vl
LzEvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVc/Bcwzl
zJqusDoTXFxxjTJZUWuZNez/2/EEgbclS4n4bCmL60d9vZ6icsBkmjC3bxreLMva
4uL2uPk8febfUAolQ+7GpmGxZB/FCKpeY9IDr2nWj66oW3QbJvjSC5cX9UEA63Hy
bD50mDzyQt72IgEJApY/v1uS3ZJbNeP88tGXjTw+p2KjtUexqBhBOzdJ5i2r+ktz
uv9TkXU0af9e8ItNa56rV89WfsbH29VhO7f7by4iqp9PLbVrOsksg6oix171Zm1c
k0cEkuMlzgoUnK4n8w4CwK9p+HGSIUT1vmaftmN3JWu+i4U3ZRdCEknUR7ISv5S3
JS4yqd1txnwWVg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:15 2026 by rpki-client