Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
File: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft (raw, json)
Hash identifier: iWSAVtjG7f4gUinE76PepjrNt04mFHFT/wMS4/+rXZE=
Subject key identifier: E3:39:48:73:23:88:14:90:B7:68:AC:54:48:62:74:1C:78:43:1D:3D
Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Certificate serial: 019D9C99F4D3F450C433B958DEF0F6BA40C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
Manifest number: 0325
Signing time: Fri 17 Apr 2026 18:00:28 +0000
Manifest this update: Fri 17 Apr 2026 18:00:28 +0000
Manifest next update: Sat 18 Apr 2026 18:00:28 +0000
Files and hashes: 1: GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl (hash: Zd47636pQxd9gncbWEm6WbJOw9F21OT98AVL5/kd1UA=)
2: t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa (hash: Gojw7FbJO6oLOCFdJ+IonU5RAeRQTmH3d/fqvSSbRko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:99:f4:d3:f4:50:c4:33:b9:58:de:f0:f6:ba:40:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4
Validity
Not Before: Apr 17 18:00:28 2026 GMT
Not After : Apr 18 18:00:28 2026 GMT
Subject: CN=e339487323881490b768ac544862741c78431d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:8c:41:b0:c7:b5:c8:1b:6e:79:4c:63:23:
4c:8f:89:1b:27:a7:e4:85:75:93:4e:09:11:f2:89:
75:d2:a1:24:b8:e9:2b:f0:47:48:83:d6:93:bc:89:
c2:76:68:b3:0d:28:09:22:c3:0b:d5:68:0f:69:53:
4e:a4:c2:f6:d3:76:73:4c:0b:9c:95:53:43:88:44:
9e:a2:77:26:92:8b:a8:ef:11:c8:55:96:36:1f:83:
ad:79:b4:ae:37:a8:47:f5:fe:88:d4:38:b8:64:8b:
92:3d:7c:6b:24:da:8e:d8:e1:5a:91:35:1b:fb:ed:
16:6f:9b:7d:4b:19:f0:81:f8:be:f0:dd:cf:70:e0:
27:ba:7d:37:1e:f1:42:2f:58:60:fe:3f:0b:72:46:
5c:ce:d1:12:54:79:83:17:bd:38:18:51:4a:7a:54:
7c:da:df:47:78:40:e2:22:e4:fb:5c:f0:da:58:dc:
fa:fa:f1:c9:52:87:06:27:45:f2:06:f0:eb:d7:b8:
36:b9:1c:41:01:97:fd:bb:ee:0b:cf:1c:f6:85:63:
b4:0e:9d:a2:67:07:86:1b:6b:94:1c:83:d8:0d:3a:
27:88:4d:1c:ee:ef:58:b6:e0:92:a3:8b:fb:ac:61:
ae:2a:d8:d7:a2:fc:6e:b5:a3:cc:f6:62:76:b1:de:
6b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:39:48:73:23:88:14:90:B7:68:AC:54:48:62:74:1C:78:43:1D:3D
X509v3 Authority Key Identifier:
keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9e:b0:5f:a5:58:49:08:46:69:66:22:b1:d6:e2:a7:df:f9:
e3:e7:56:98:19:d6:63:61:30:f8:cc:b4:d0:17:66:db:d7:da:
f3:59:d5:08:d8:52:a1:9d:55:16:c3:7a:23:75:4b:62:9a:8f:
3e:2c:25:99:45:7f:75:c6:95:1c:19:25:f8:fd:60:58:48:75:
be:a1:a4:7d:06:99:26:ca:9b:13:fc:52:f0:52:b3:ba:33:05:
ae:d6:c1:74:05:20:61:06:db:d7:00:c9:fb:2a:76:96:52:f4:
63:70:48:5e:86:d2:9d:61:eb:67:e1:32:d1:6a:73:78:12:85:
cd:94:3f:79:0e:eb:ad:f9:d7:ea:f8:f8:96:40:01:d2:81:8a:
75:ae:09:46:5e:ae:ae:e5:ea:04:59:73:ef:fe:d0:44:be:34:
c4:37:7d:d2:04:2b:3d:a3:13:90:57:f3:34:73:ad:eb:62:d5:
73:dc:71:bc:1c:8d:23:74:7a:63:9f:83:85:ad:0a:1e:8f:0a:
3f:0a:95:f8:36:49:83:ff:85:b0:78:f2:cd:eb:1b:dc:5e:91:
5c:a1:6a:61:15:a1:e9:b8:4f:76:66:60:e4:b8:84:23:de:46:
b6:c5:0c:96:27:00:3d:ae:88:27:15:75:db:28:4e:82:45:ec:
ef:54:21:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:26 2026 by rpki-client