Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: v06VE+ofpNLccbS0DImpqIIBFhcTFeQ+JrQJKO+/T1U=
Subject key identifier: C6:05:63:7F:34:91:CC:D1:EF:2A:8A:46:0B:AC:43:66:85:AA:BC:0F
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 019D9C9A2BA3D3B7B9DDD2A768DEE7E34018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 18:00:42 +0000
Manifest this update: Fri 17 Apr 2026 18:00:42 +0000
Manifest next update: Sat 18 Apr 2026 18:00:42 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: ybMsxGFYRFzmN5hdmHO3MJUtX0YvRR4ao/dACltGoAw=)
2: zXFwqAAnYrIjiWd8TXgaxxMmw0s.roa (hash: Ovzx2APxYoxGQIUTR5wFv0olnXJaY9uRnLcnYqntG64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:2b:a3:d3:b7:b9:dd:d2:a7:68:de:e7:e3:40:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Apr 17 18:00:42 2026 GMT
Not After : Apr 18 18:00:42 2026 GMT
Subject: CN=c605637f3491ccd1ef2a8a460bac436685aabc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:59:d5:9f:15:b2:97:9b:a9:82:00:90:4b:
88:2a:a6:a1:dc:d5:fa:ed:c0:17:f8:aa:3b:7a:83:
c6:d5:ca:66:73:2f:a9:23:d5:de:c3:0b:fc:22:53:
2f:0f:60:72:c2:7f:c6:cd:e5:ce:81:f1:73:ac:1a:
5f:48:ea:85:83:da:de:c8:af:20:02:ff:41:b8:46:
b1:c9:6e:37:22:95:74:3d:e0:06:8c:75:60:6a:e5:
ea:09:fa:96:48:2f:5f:61:e9:07:c5:42:17:a7:9b:
40:c5:61:32:a6:a6:a8:e5:5b:18:6f:b6:ae:42:67:
13:66:c7:95:7f:2c:f0:b8:ca:44:b9:d1:ad:c9:73:
c2:9d:fe:0d:b5:0e:9c:39:d7:60:34:ce:93:0f:71:
8c:be:fe:ec:7e:d4:c9:dc:38:8c:ba:51:cf:d5:21:
34:82:a9:5d:92:79:8c:11:40:bb:1f:ea:fe:1e:ef:
b8:70:8f:fb:ed:42:bc:61:f6:a8:57:54:e7:a9:2f:
8f:c5:77:c3:1f:19:99:4b:74:aa:2f:0a:0f:a7:dc:
e7:a8:e5:50:d7:a9:1e:93:15:41:67:61:ae:e5:23:
c4:cd:4d:53:a8:f0:c4:f2:8c:b2:f8:a1:9f:2a:3b:
38:27:3b:d5:27:e8:58:89:ff:b7:87:30:d5:ea:42:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:05:63:7F:34:91:CC:D1:EF:2A:8A:46:0B:AC:43:66:85:AA:BC:0F
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b4:e6:92:5d:94:a9:2b:50:1e:67:d8:18:ff:47:8e:36:b0:
e4:70:a9:31:2f:42:2b:75:06:fb:29:2e:ad:72:f7:d2:d6:69:
35:cc:e9:78:a0:91:c9:f8:25:92:a0:3d:98:8e:a2:2d:a6:96:
57:07:20:30:e2:b5:f0:4d:59:a7:fa:80:f1:6d:24:4d:2d:09:
4d:dc:05:08:4f:a1:8c:7c:7c:21:c3:cb:b1:f7:9b:88:55:17:
be:7c:73:99:7a:dc:fd:a1:ca:dd:9d:7f:30:c9:17:0b:9b:f7:
ee:03:d5:09:11:6b:4e:67:0f:20:ea:6a:6d:66:67:ab:e9:b9:
ab:cb:30:28:2e:c6:c2:27:6a:c7:18:5b:d9:8f:a0:a1:4f:36:
d2:e0:e9:70:ff:b5:81:65:41:7f:55:3d:be:3f:46:50:d5:ae:
14:39:b4:e3:22:1a:50:57:b1:18:56:b8:08:89:56:84:9f:ed:
34:6d:8e:85:16:34:fb:89:5d:0c:d4:cd:db:e0:1e:0e:3f:60:
86:5b:41:d8:44:a8:f3:2d:3a:af:a4:86:80:7a:54:8a:cf:d6:
22:ee:06:6f:93:6f:4f:31:75:29:18:90:39:36:23:62:68:1c:
7b:cc:3a:3d:f8:d2:cf:c1:01:b4:4a:4b:bc:dc:71:c6:6b:07:
da:8b:78:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:26:29 2026 by rpki-client