Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: VzWc+Cig1e4YmNmKd00c5A9wsUdblSewZuWCgdsS6gA=
Subject key identifier: 42:84:B7:0D:5B:F4:99:7D:69:39:5E:1D:B2:AA:2B:FD:96:88:4C:AE
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 019D9A3E9F55F2013990B5C61CE5BDBFB6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 0A40
Signing time: Fri 17 Apr 2026 07:01:28 +0000
Manifest this update: Fri 17 Apr 2026 07:01:28 +0000
Manifest next update: Sat 18 Apr 2026 07:01:28 +0000
Files and hashes: 1: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: D71PczenpHuZ6xR5EfzVKH9dq5MZSunoc5Uggq6YjWU=)
2: ImbkEEuw8ciW4XZvQnskEOeml3A.roa (hash: s2ZZTRU19ZLlzKll7MUSBOLRlZD19z6bClWZADEJ0vA=)
3: xTy14ClaR4Rvu9WN2hIEK42ff6w.roa (hash: MWs9WTWsQLed5Ou31CqMyRYBYZdgWbH79vbLFld2S5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:9f:55:f2:01:39:90:b5:c6:1c:e5:bd:bf:b6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: Apr 17 07:01:28 2026 GMT
Not After : Apr 18 07:01:28 2026 GMT
Subject: CN=4284b70d5bf4997d69395e1db2aa2bfd96884cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:13:5c:12:71:46:3d:0d:36:cb:f0:87:a6:
19:60:d6:f7:ef:5e:58:2b:9f:3c:ac:d0:ef:1d:57:
c1:75:20:87:88:39:aa:ab:fb:84:8d:1b:09:3e:56:
79:01:d5:08:13:f2:46:9b:7e:3c:59:68:b5:e4:c2:
84:15:7d:d7:5b:a3:36:27:a4:ef:e7:56:53:d3:13:
e1:58:fa:ae:06:a0:cd:f3:88:97:84:06:83:ef:08:
3d:ac:96:1c:90:dc:f8:24:3a:7c:db:fd:46:14:31:
45:a5:bf:06:0a:43:e1:15:df:b2:2f:15:4e:11:81:
02:20:52:d2:b3:59:c7:17:02:7e:d3:4d:b8:f8:7d:
92:e0:8f:dd:0b:1b:68:6f:5c:f1:20:31:1f:6b:a5:
23:c5:9e:a4:a0:32:97:37:49:41:f0:b0:9d:5d:f6:
7c:60:71:eb:b8:10:37:fe:f5:25:45:21:92:fb:9b:
54:df:aa:10:8a:6f:8c:a4:f4:7c:35:fd:fe:15:c0:
2b:7b:cc:b1:7f:ad:a0:87:43:e0:8b:6b:bd:9f:3e:
98:8a:9d:ce:d3:a7:4f:1a:bf:47:53:6b:b0:93:4f:
c7:9b:c5:0a:48:46:15:db:6e:e7:91:85:6f:58:f1:
a0:0f:2b:93:18:2c:47:a5:90:6b:3e:96:7c:6c:04:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:B7:0D:5B:F4:99:7D:69:39:5E:1D:B2:AA:2B:FD:96:88:4C:AE
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:36:86:1a:f8:89:71:db:7f:20:8c:df:e8:9e:c4:02:ff:f0:
16:5b:d7:dd:c4:ec:6b:18:db:cc:87:6e:2d:c4:c4:6e:71:26:
9e:d0:e8:41:3d:e0:da:58:15:2c:5f:15:2c:7e:c2:dd:90:93:
c7:07:41:d6:b4:e7:b7:18:56:e8:46:ff:38:62:9d:08:9e:38:
95:06:97:fc:a7:a1:5f:04:eb:4d:6e:32:2a:e1:45:2d:62:8c:
be:81:28:b0:ce:fb:73:e6:40:14:99:b3:19:34:7e:70:39:b8:
ad:42:8d:46:6d:59:54:8b:5d:95:f9:20:0e:d0:90:cf:8d:ca:
1e:c5:f7:f2:b2:b9:2f:b5:76:0f:f2:16:e0:c6:5e:83:84:ef:
3a:11:6d:ba:2b:cd:e9:81:ae:0a:bd:b0:26:d1:1c:eb:a5:8b:
0d:c4:34:d9:bd:c8:84:bf:90:a4:55:ef:bd:60:a5:64:af:3b:
f4:f3:9e:e5:c4:4b:1e:8a:a5:68:5f:19:42:e1:05:14:63:25:
fb:7a:46:20:7f:b5:67:4a:93:6f:e5:c7:c8:db:65:c4:d4:8c:
8f:9b:23:84:27:ed:e9:e7:95:ec:ac:f7:98:ce:1d:41:0c:06:
db:7a:ad:15:28:9c:90:d7:e8:ef:ee:e6:39:5b:1d:69:34:dc:
d5:5b:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:10:10 2026 by rpki-client