Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier: LgR5/iF09xl1q46IL1EMKtC9eqaPEyavPd+Gx/HQ1KE=
Subject key identifier: B1:8F:E7:FA:76:EF:D6:B0:7A:EF:D6:93:CB:05:87:10:CF:33:51:4B
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 019D999934BF17DD9845D312A67AEAE8FCC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number: 12B9
Signing time: Fri 17 Apr 2026 04:00:47 +0000
Manifest this update: Fri 17 Apr 2026 04:00:47 +0000
Manifest next update: Sat 18 Apr 2026 04:00:47 +0000
Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: BE775DLIzgL+bu+liFJK7DWnOBc/6A2AXLQAkplDIxk=)
2: UQ_3tdEvusxpKm6g-bRZq8tkD4E.roa (hash: s1CWyQo9MuJT6cKRpUhun2W2gEgTiwk/dhUNwuJXn1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:34:bf:17:dd:98:45:d3:12:a6:7a:ea:e8:fc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Apr 17 04:00:47 2026 GMT
Not After : Apr 18 04:00:47 2026 GMT
Subject: CN=b18fe7fa76efd6b07aefd693cb058710cf33514b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:58:c8:51:87:b4:5e:19:d2:81:54:8b:e3:
a2:93:21:12:c8:a3:23:21:cd:30:2b:73:da:18:96:
cc:5c:1d:1f:87:00:a0:c0:51:06:54:57:25:07:6b:
97:81:38:e7:84:a6:31:10:b9:64:ab:cd:c3:39:d1:
8a:19:56:c0:9d:d5:40:2f:56:a0:e7:15:f5:96:16:
83:4d:da:4f:6f:df:28:fd:64:a8:00:76:94:98:0b:
60:ad:38:b9:7b:1b:30:c8:00:aa:f6:45:bb:7b:af:
24:14:d0:29:74:17:2b:fc:9e:4f:13:df:74:cc:ed:
af:79:61:0e:a3:3c:f3:cb:dd:62:d0:a8:53:f8:1b:
f3:20:d6:a2:be:51:ef:da:d3:94:11:bf:78:10:e8:
51:45:bf:4d:02:08:81:b5:ac:5d:7f:97:a8:4a:bd:
8f:61:fe:57:73:35:72:9d:52:eb:a2:fc:1b:50:e9:
55:0a:23:cb:40:22:45:9d:05:ec:c7:46:ce:84:3b:
98:4d:ed:11:12:c2:cd:99:b7:39:d8:1d:be:66:b7:
4a:4a:8d:11:64:e8:2d:ae:0f:8a:44:fc:ae:1d:1b:
96:42:60:68:ab:27:0c:0c:62:86:6d:19:58:a3:85:
42:43:24:49:bf:4c:1a:87:65:fb:2f:72:22:50:75:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8F:E7:FA:76:EF:D6:B0:7A:EF:D6:93:CB:05:87:10:CF:33:51:4B
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:13:e8:34:b1:d5:16:e5:dd:11:83:0b:3e:05:9d:34:77:00:
41:b9:d9:ed:8f:dd:0d:dd:b5:30:d2:6c:3e:ec:5c:45:7c:04:
a2:7c:4e:33:bc:e2:55:46:93:8b:f5:23:8b:a1:4a:72:e9:8a:
0b:fb:3c:34:7f:0a:de:f3:97:47:b3:69:3a:3a:d7:2e:cd:a8:
d3:7c:e2:02:c9:ee:07:9e:c6:c9:20:87:b1:5d:d6:0a:b3:79:
e3:b7:6b:1e:39:a4:15:a5:ab:e6:80:f8:0c:a9:1c:d2:54:57:
c0:0c:03:8c:d4:7d:01:0e:b7:26:fc:d6:0b:a1:ff:8a:8b:91:
bd:4c:54:02:57:66:22:4d:31:42:b8:8e:df:ce:0d:97:00:e1:
f7:85:c6:36:98:a7:ca:19:58:04:90:b1:b2:c1:0c:e3:52:22:
5d:50:20:19:fe:0a:a4:ee:ce:dc:dc:b8:2d:26:be:75:e4:c0:
79:c4:a2:a4:8a:e9:db:9d:6f:1e:06:0d:75:1c:03:bc:61:f6:
c3:c3:3c:a2:60:5b:ed:44:85:9a:fc:c3:c9:a3:2e:ec:0a:7a:
3b:ce:af:96:b5:3d:2e:62:96:92:6a:29:e1:1d:f1:82:e6:72:
e9:1c:fe:e8:6d:fa:d8:a3:74:f1:0a:98:f4:7c:c4:ee:53:16:
6b:5d:0d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:54 2026 by rpki-client