Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
File: GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json)
Hash identifier: oMys7TZzSYoZt+M7O1qwSl4w7Y6kzDUMnHkiEGb2yvE=
Subject key identifier: FD:A7:D6:E8:FA:21:CD:E0:CC:5C:A7:4A:41:19:CE:9F:8D:04:7A:B4
Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
Certificate issuer: /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Certificate serial: 019D9B5157DBC69F5430170FB9037DB3B4F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
Manifest number: 17B1
Signing time: Fri 17 Apr 2026 12:01:32 +0000
Manifest this update: Fri 17 Apr 2026 12:01:32 +0000
Manifest next update: Sat 18 Apr 2026 12:01:32 +0000
Files and hashes: 1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: iaVdGEef2hcAPzW8Vu+iatZtHhCtYs+7qNKibHGQsN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:57:db:c6:9f:54:30:17:0f:b9:03:7d:b3:b4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Validity
Not Before: Apr 17 12:01:32 2026 GMT
Not After : Apr 18 12:01:32 2026 GMT
Subject: CN=fda7d6e8fa21cde0cc5ca74a4119ce9f8d047ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:bb:d5:36:0d:e7:d7:ca:13:38:35:af:17:
01:77:b6:5f:d8:53:41:3d:8a:a2:ad:ae:56:fc:b2:
6b:4e:17:23:9e:f9:be:93:cc:ce:3d:6a:e0:50:7a:
73:d6:b1:9a:39:39:65:95:91:bb:01:67:c5:1b:40:
22:86:92:51:4b:9e:7e:5a:20:ed:99:30:e4:88:ee:
cc:b1:38:b9:f1:d2:ff:9e:3d:80:14:cb:2e:d9:51:
b3:38:7a:83:eb:db:61:8e:0b:82:39:3a:e8:32:8d:
2f:cd:ab:5b:7f:bd:c9:b9:00:36:d4:f8:35:a7:3c:
17:8e:93:95:18:4b:95:35:a5:44:3e:b9:3c:de:8b:
00:57:85:c2:cd:b0:81:5c:8e:99:88:61:bd:00:c4:
4a:7e:f1:7b:80:90:9d:02:fc:11:6e:da:14:22:a6:
bb:9c:d9:46:6b:9b:8b:10:44:5a:75:ed:d3:81:a8:
8f:8a:36:5d:0f:a1:e7:84:05:2e:11:b9:19:7b:f6:
52:4b:4a:91:02:00:d1:98:1e:fe:4e:dc:03:ed:18:
fd:af:1d:38:20:cb:08:5e:b8:93:4d:6a:8b:ce:b8:
d7:52:00:0e:37:2d:05:08:85:21:70:ba:fa:5c:1f:
1d:35:f1:00:49:3f:f7:de:27:c4:e1:7f:e5:78:57:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A7:D6:E8:FA:21:CD:E0:CC:5C:A7:4A:41:19:CE:9F:8D:04:7A:B4
X509v3 Authority Key Identifier:
keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f7:80:6f:e5:51:c5:f6:92:eb:7e:35:74:bc:18:2f:74:9b:
89:fa:39:33:d9:cd:c0:5d:3a:51:b0:b5:59:2b:00:a9:95:30:
8c:94:17:21:ea:5d:40:0b:72:63:e0:d4:a3:13:9b:2e:f7:b0:
c9:e4:87:82:1a:2d:62:2b:36:c4:a1:d7:f3:70:26:20:07:b2:
a9:1d:3e:59:ce:c0:09:d5:f9:d3:4a:d1:ff:4d:90:8d:bc:a6:
dd:bc:41:8b:0c:08:dd:1b:64:cf:ce:59:1d:11:5c:33:e8:05:
ac:07:a1:8a:95:52:2c:ad:b6:5b:9c:30:eb:13:45:cd:fb:36:
bf:da:05:de:4e:c5:21:4a:42:88:a0:a1:eb:33:59:cc:aa:d4:
97:95:cf:c1:96:77:df:46:a9:b0:79:0e:a0:8e:63:a0:a3:72:
df:f9:bd:b9:15:70:8e:14:ef:a8:9c:42:81:4a:36:9f:c4:79:
20:12:a4:f2:9f:df:e5:2c:be:c6:49:15:bf:ad:23:c9:78:6c:
7a:69:46:56:d2:d4:f6:df:a7:1c:45:53:f0:8c:19:cc:95:b0:
7b:06:da:f4:fa:50:30:8f:fa:c8:89:65:a9:04:80:3e:42:55:
9f:cd:af:8c:c2:1d:8a:fd:35:f0:85:f7:80:5b:b9:ec:58:31:
bc:6b:a7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:52 2026 by rpki-client