Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier: GHrKeZiNTtqCxxfBS3vUHXzrHImDf464GsWnqQmFOoQ=
Subject key identifier: 25:BE:50:E1:AB:7A:4E:FF:85:55:57:AC:41:B2:B2:4C:F1:C6:AA:FA
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 019D9A0730B02D061B787888E075998DC632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number: 0FB5
Signing time: Fri 17 Apr 2026 06:00:55 +0000
Manifest this update: Fri 17 Apr 2026 06:00:55 +0000
Manifest next update: Sat 18 Apr 2026 06:00:55 +0000
Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: gjAkgSpPH9VjXsUbVbSdjksjK+xyTykAIEivyV4vk9U=)
2: kUYY1Q4-v9Q6exQgCpt_jTplt24.roa (hash: L8NHXT8Vz2l7Z8N60RDMTVs4PiVsANYIsY9CEDH7bQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:30:b0:2d:06:1b:78:78:88:e0:75:99:8d:c6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Apr 17 06:00:55 2026 GMT
Not After : Apr 18 06:00:55 2026 GMT
Subject: CN=25be50e1ab7a4eff855557ac41b2b24cf1c6aafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:f6:9b:52:8c:0f:67:a7:5f:e6:41:43:6d:
fb:ff:86:14:70:5d:dc:e0:47:ed:34:1a:a4:02:84:
18:52:4e:46:28:e2:31:fe:d5:3f:61:86:50:8e:b1:
cb:2f:ac:87:34:ec:61:a3:9f:41:3c:9b:5b:c4:77:
cf:c4:c1:b5:1e:f9:26:e1:ee:88:83:8f:b6:61:e7:
26:9b:40:17:d5:b7:ae:1c:0b:76:2f:38:68:59:83:
23:d4:a7:bb:b2:bc:75:38:09:06:be:24:6d:36:c1:
f8:45:1c:19:06:74:30:6e:98:4f:45:8b:5d:55:85:
4a:05:75:6a:01:22:22:d2:6a:99:8f:4e:11:91:45:
70:91:a0:43:b2:3b:b2:d1:ea:d6:13:a3:5b:ef:b6:
6d:4f:d9:1c:09:9d:fc:e0:a4:7d:a4:59:86:5d:a8:
86:de:7a:08:21:9c:39:2d:a0:e9:d0:aa:a7:4b:bd:
0a:4e:30:65:90:cc:c9:d3:24:91:38:cb:40:83:71:
a3:9f:8c:87:4f:2d:d6:d2:17:70:63:0c:62:a0:30:
fc:c9:d6:f7:b7:8c:2a:ef:2a:5b:1f:3c:88:74:5c:
fa:35:54:61:f7:52:7a:c4:69:ee:3e:21:d6:25:e5:
4a:6e:0d:85:fb:b0:95:34:b6:d9:06:54:7c:dd:47:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BE:50:E1:AB:7A:4E:FF:85:55:57:AC:41:B2:B2:4C:F1:C6:AA:FA
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:64:2b:3d:8b:b8:d2:5e:5d:dd:83:a8:c9:86:04:c2:e1:1a:
2d:3c:e0:e9:40:74:e3:a9:d1:0b:57:fd:14:d9:28:7e:c2:5b:
e5:b8:53:d1:62:db:1e:fe:32:ae:dc:ad:5c:e9:08:2d:1a:e1:
3d:76:b3:81:3b:fd:a3:af:3a:72:60:69:fd:e3:e3:90:86:6f:
ca:a0:84:79:d8:a8:35:43:65:eb:e3:29:27:85:b8:2f:ae:ed:
1b:e2:9b:c2:f1:a6:2e:8c:b4:d4:d4:ed:99:46:a1:2d:e1:4c:
6a:5d:6b:1b:3b:13:c6:2f:20:02:64:e4:77:27:91:45:72:b5:
7e:50:e9:6d:6f:ff:1d:99:b9:20:54:c6:27:d4:a6:e1:90:db:
66:08:72:b1:08:32:0b:22:11:da:a6:bc:c6:8f:ab:6e:60:0b:
7e:54:17:34:89:e9:09:b0:5a:a9:91:c1:11:d4:c5:28:70:c3:
f3:c9:01:d2:b9:ef:ea:d3:bf:8b:78:e1:c5:42:c5:50:01:04:
45:78:6d:70:4c:b8:87:3c:26:16:16:94:1d:58:9e:cb:bc:f7:
18:84:9c:fd:ae:50:20:ef:4e:44:1e:46:b0:dd:d8:85:7a:6a:
e4:04:1d:06:4e:ab:f6:f2:33:16:69:60:fd:fb:8a:89:8a:99:
45:d9:4b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:08:55 2026 by rpki-client