Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
File: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json)
Hash identifier: D3Ol2nkCOt1FvywnFUDw0+K9L0B60IaGvQF6NoeXtKM=
Subject key identifier: EC:F1:D4:99:81:BA:4B:20:53:1B:65:EC:33:1B:D5:2D:96:69:A0:05
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial: 019D992B520C9D2F14FE8BD69B6848A5A62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 02:00:46 +0000
Manifest this update: Fri 17 Apr 2026 02:00:46 +0000
Manifest next update: Sat 18 Apr 2026 02:00:46 +0000
Files and hashes: 1: 7eQNjnQdwqflqSKNBUSkeuNmw7g.roa (hash: KDiDs9BVR3uSy9uhf7YQ+EiuhvYGlWjEWXwSqzhl/zA=)
2: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: 3h7SAYsiYxyZCTzfdiPNFEaTlBTG8FCeUnqWuZ8Nzd4=)
3: HqFdFQd3mJjjEoQudvkZxqIuHF4.roa (hash: Q9RLxw/T80VOo7/+EDUnGtAF2QXxYd4cppakgqAvZwY=)
4: Kp3eYJ7kSiZsDu5GffXxRznucgA.roa (hash: +v7HVtK9kA/9s9DQL3HEcP41QigGiyaFVGj2AlPGBaQ=)
5: _YjoM5RgGEqDATh0dggO_ptSVwA.roa (hash: EvlNg6FSVXOlKLDCdTk6bjISKtxW5D9yTRIIrx19hkM=)
6: h4VPt_ezR6pBjF1ytqFfJk_RH_g.roa (hash: B+fnICpLokTB+5ePuFtzYa/q5V0EfzABtX3v8OW1PdQ=)
7: jJUpXp-wy4eDj-VTQpn033oPZ88.roa (hash: aKtKSKKKZ+/EZ2HpVdvSi+ll3PhhXXP06+cpHPYqgcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:52:0c:9d:2f:14:fe:8b:d6:9b:68:48:a5:a6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Validity
Not Before: Apr 17 02:00:46 2026 GMT
Not After : Apr 18 02:00:46 2026 GMT
Subject: CN=ecf1d49981ba4b20531b65ec331bd52d9669a005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:07:ee:fe:4e:47:a1:c3:11:66:8c:5b:7e:b0:
f8:2a:3b:95:17:ca:4c:4d:78:d2:3e:fc:83:ba:74:
c0:aa:f2:93:18:82:ec:48:ce:95:e8:8f:fd:57:1d:
06:62:d2:f2:6f:c3:ed:1a:6b:ad:a8:cb:ca:89:9a:
aa:bb:0e:e5:8e:19:e8:bc:63:e7:a8:ab:04:5d:66:
70:45:da:47:1b:b4:77:d3:ce:4e:6b:2c:9a:8f:ac:
5b:a3:34:42:2c:0a:dc:c4:26:3e:6b:8b:11:13:2c:
96:db:67:9e:08:3d:f2:9d:3e:62:6d:e9:40:48:28:
4f:e5:1c:0f:7c:96:df:be:4d:e8:5c:56:df:3e:71:
8e:95:0e:40:d9:6f:3e:6a:04:2a:e4:7c:e1:c5:c1:
ef:16:7f:7d:5b:fe:4c:67:3f:d9:78:56:5b:2f:4f:
73:22:bd:8f:9b:6f:e3:d0:cc:f0:03:8c:a9:e1:a7:
60:1e:5b:8d:6f:fa:ba:9d:8b:6d:ec:f7:4e:0e:17:
33:09:53:66:59:14:cc:05:0e:f2:6e:9a:15:4e:d6:
67:9d:ee:30:7f:cf:ca:b9:2f:c8:12:ed:e5:c4:3f:
2b:c8:54:b4:80:fb:9b:9e:4e:39:df:44:a1:48:5c:
f5:62:d7:08:c0:cd:9f:79:76:26:17:68:64:fc:6e:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F1:D4:99:81:BA:4B:20:53:1B:65:EC:33:1B:D5:2D:96:69:A0:05
X509v3 Authority Key Identifier:
keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0b:21:d4:aa:e2:fa:72:86:c7:9e:f7:43:8c:2c:71:64:30:
a1:a5:f0:a3:46:6b:b3:71:04:b2:bc:fc:5b:08:a3:79:3b:8b:
b4:e1:0d:db:77:2f:10:92:10:e2:f1:dd:5d:0c:1e:d3:a2:32:
3b:57:08:67:ba:7c:c4:d6:7c:0e:e8:5f:18:40:6e:23:73:9b:
85:a1:ae:89:04:90:97:04:fe:1b:a5:a2:2f:aa:9a:1a:6a:ed:
47:60:15:05:ce:4d:c2:28:eb:59:ee:80:45:a5:8d:fa:a0:5c:
7e:fc:ee:92:34:c2:25:0e:7a:04:4c:bf:9b:42:f6:b6:26:fc:
73:9f:47:56:af:f4:8e:b8:d9:e2:e9:78:24:2d:08:83:c3:a8:
fc:1a:37:12:4b:ec:27:16:7f:7c:ce:f2:87:66:9a:d9:20:3b:
c7:fb:bc:ea:79:50:ca:e5:3a:f1:73:76:0d:ab:64:fa:4b:0f:
a0:0e:cc:43:ed:25:75:f9:37:5c:17:44:48:b5:32:2f:d6:d2:
00:91:56:ce:af:25:c3:87:fd:95:b1:21:29:33:10:2f:2a:5f:
b1:f9:3f:2b:5f:82:52:a3:d4:9f:b7:25:29:5a:90:a4:dd:44:
c0:18:85:b4:5d:50:e2:44:8b:43:53:48:e0:64:ea:d9:e1:9d:
73:0b:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:22 2026 by rpki-client