Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File: GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier: I/JFwbui7rEkkl91S+rbj6LFsMh+3rgPrXGoe9CUOb4=
Subject key identifier: 22:1D:95:BF:A3:7F:28:05:39:03:41:57:93:E7:B9:D9:72:EF:87:43
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial: 019D98BD8C8AAAE3B28C73FCA6048C49EB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 00:00:52 +0000
Manifest this update: Fri 17 Apr 2026 00:00:52 +0000
Manifest next update: Sat 18 Apr 2026 00:00:52 +0000
Files and hashes: 1: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: SJoSaF4NY7+FOrRDt+iP0kFcAslF7JlEhJRaH5JjdLA=)
2: J0rH9JX0KbdTKOcoRoiVFom0Vhs.roa (hash: A8dP+OxNgGQqU96bazfRlPshwZe7IJ50JSO2KL6IocU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:8c:8a:aa:e3:b2:8c:73:fc:a6:04:8c:49:eb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Validity
Not Before: Apr 17 00:00:52 2026 GMT
Not After : Apr 18 00:00:52 2026 GMT
Subject: CN=221d95bfa37f28053903415793e7b9d972ef8743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:6d:81:49:85:09:29:c0:dd:a1:1e:88:16:
55:b1:60:5c:8e:16:3a:eb:eb:01:f0:d4:be:72:b6:
a2:a4:08:b0:c8:74:39:80:5a:8b:1d:57:e6:09:d6:
bc:a0:10:a3:95:b8:81:c4:88:94:cf:0a:cb:c8:00:
3e:92:31:08:80:95:11:2b:cd:78:dd:d7:3a:5b:d2:
d5:cd:11:ff:26:ef:a5:39:e9:5d:1b:ec:cc:5c:39:
cb:9a:21:fd:e1:4b:e3:ab:77:9e:d6:73:79:e1:e9:
1c:38:58:6e:99:37:a7:b5:d0:98:93:94:25:6e:21:
7d:c8:5c:c3:5d:94:a4:a8:ff:7d:db:7a:c7:5b:d8:
52:d6:eb:60:f5:ab:f0:e7:22:01:15:89:99:67:d0:
69:04:55:69:ae:c0:14:8b:b9:75:fd:7a:65:d3:7c:
ff:ef:46:25:16:bf:c2:12:3f:b1:32:69:0a:ae:25:
51:b3:7f:75:72:63:56:6a:4f:75:4b:83:ab:f3:c8:
ed:f9:7c:41:f0:a5:d6:ea:a6:4c:c6:fd:56:10:17:
2b:ac:1d:38:2a:56:59:d4:30:d2:42:dc:c8:90:2f:
b5:29:39:2d:81:16:63:2a:f6:0b:d7:97:e7:72:cd:
76:cb:dd:05:99:6a:23:1e:a8:61:b5:38:cd:4b:e5:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1D:95:BF:A3:7F:28:05:39:03:41:57:93:E7:B9:D9:72:EF:87:43
X509v3 Authority Key Identifier:
keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e5:73:71:cf:e7:7f:c6:65:dc:20:a2:b9:3d:88:c9:e2:09:
ae:17:76:97:0d:09:d3:78:4f:a9:ce:3a:e0:c2:e8:cf:67:a8:
82:93:46:4b:3b:d0:94:ba:48:36:19:ea:51:3f:96:6a:76:99:
c7:ae:d0:a7:61:e6:6e:6e:45:f6:5d:ea:c8:51:9f:a8:f8:96:
48:69:69:63:5c:95:81:c3:b1:de:4b:c9:4b:0d:76:cc:53:e1:
3f:ab:d0:d9:8f:b0:da:07:17:e1:d6:e6:63:5f:44:33:da:03:
42:48:78:fc:0d:50:da:0d:ec:be:a9:17:8f:45:80:92:64:90:
cc:b7:b3:79:40:a8:ab:be:5b:38:0f:0d:18:86:6e:d9:d9:37:
12:49:1d:66:cb:e8:e3:05:ae:72:db:86:b8:47:9c:91:85:f8:
ae:2d:f6:36:9e:ce:15:7d:a4:38:c1:97:b7:bf:49:1d:ec:12:
91:6f:d5:59:40:e9:de:af:97:ad:cb:b2:27:3d:53:89:b9:b3:
3f:2d:b1:4f:25:e1:ae:15:dc:4c:b5:33:04:40:b6:91:89:cd:
21:bd:3a:63:5b:b3:11:0c:4d:64:c7:ce:e2:9d:43:ee:ca:a0:
6d:4f:3a:8b:59:57:26:df:9b:26:12:96:3e:cb:91:46:d8:cc:
d8:0e:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:26 2026 by rpki-client