Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
File: gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json)
Hash identifier: YyJ0dZYcvxrpjVYl6tjLdXpGIr0ohLXnruOZ2nHU1YY=
Subject key identifier: 19:C5:F0:F6:92:5A:25:13:0F:99:4F:A0:AE:36:CE:71:6B:7D:76:5A
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial: 019DA3E653F76D7D197D1F6C40FA774F618C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
Manifest number: 0FAD
Signing time: Sun 19 Apr 2026 04:01:14 +0000
Manifest this update: Sun 19 Apr 2026 04:01:14 +0000
Manifest next update: Mon 20 Apr 2026 04:01:14 +0000
Files and hashes: 1: 5GkzwsX2SAkCt9B6c4atkjd4rkM.roa (hash: 8XwwTszWSwQ0ODWiARrL0mvIBAeBsaR0WFrNoJhXWyY=)
2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: YnTi5AeuGnEgPk4C7//m9HaDwcpOHg9p6XmcUkGlMNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:53:f7:6d:7d:19:7d:1f:6c:40:fa:77:4f:61:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
Validity
Not Before: Apr 19 04:01:14 2026 GMT
Not After : Apr 20 04:01:14 2026 GMT
Subject: CN=19c5f0f6925a25130f994fa0ae36ce716b7d765a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:95:0f:fa:28:03:01:85:36:27:5c:a5:47:
af:1f:17:76:cb:82:44:c1:bf:12:70:43:7e:ea:a3:
32:fb:e9:19:bc:e8:b0:7d:35:43:15:69:9f:16:7d:
08:2c:f7:33:33:37:6e:f8:5a:03:17:ae:ed:fd:e8:
c5:55:03:54:0d:22:2e:21:13:9d:a6:a9:ed:fe:45:
8d:b6:06:67:6b:8b:6e:e7:0b:d9:7c:4a:2a:f5:11:
74:5f:1e:47:4c:29:cb:75:12:b1:c3:32:d2:05:29:
e0:73:4f:95:28:e0:0a:f4:51:35:ec:75:bd:6c:c2:
12:5b:63:0c:de:08:ad:fb:d7:d8:3e:da:a3:a3:f1:
df:48:f6:51:f1:10:86:5c:9a:0a:eb:44:f0:84:37:
9e:d5:f7:95:64:39:40:4a:d3:fc:3b:5d:ac:81:63:
10:df:d6:c2:13:8b:27:9b:a0:6b:c0:08:b2:8d:43:
83:4e:18:f8:49:07:a4:2e:45:04:8c:47:1c:ed:27:
f8:5b:95:e2:b7:2b:58:dd:22:61:d2:3b:ca:36:fb:
88:0e:39:10:29:ba:c9:ae:45:cd:ce:9d:25:e3:38:
b2:6b:57:68:4d:6b:eb:fc:76:1f:f8:5e:e4:cd:a3:
ea:05:a6:99:a7:62:f0:6e:a4:39:da:de:e8:68:0b:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C5:F0:F6:92:5A:25:13:0F:99:4F:A0:AE:36:CE:71:6B:7D:76:5A
X509v3 Authority Key Identifier:
keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e1:33:61:14:cd:cb:eb:b4:46:0a:08:ce:c6:3f:40:e1:9e:
41:c8:c0:a4:ef:16:96:d4:c2:e4:e9:d3:d9:1d:38:c0:f0:51:
88:56:58:a3:07:14:27:45:2b:53:cb:63:d1:2c:0e:09:c1:a2:
bc:6c:83:6e:ff:5d:29:3b:a5:76:45:95:81:63:d9:d7:3e:66:
07:4e:25:56:bc:7c:58:a6:f3:0a:5e:d3:0d:d3:cf:b6:83:a3:
98:55:6c:20:6c:2c:35:90:73:8d:eb:50:e4:bf:a1:16:44:83:
7e:c9:2b:71:15:65:30:d3:c0:7c:7a:a5:77:e5:0c:97:bd:89:
d3:db:f7:a0:02:28:80:b5:eb:c4:53:51:79:a3:0c:59:d4:33:
ba:e3:6f:a6:eb:9e:09:dd:e2:8d:91:8a:1c:a3:3f:91:03:16:
82:77:8b:28:d1:2b:04:a7:0a:e9:d3:1c:ef:d0:78:39:80:3f:
cd:21:c0:65:b3:dd:d3:6a:a1:f7:e0:31:67:04:3a:9c:0f:9a:
40:21:aa:d4:7c:ca:e0:0c:81:ee:e8:48:7d:d9:d6:05:24:dc:
0f:7b:f3:83:d5:c2:8f:4f:3a:02:36:bf:21:d4:25:1e:b8:91:
00:87:5b:08:8c:93:b8:8c:d4:7b:12:4a:cb:0f:2c:a9:db:85:
59:cc:fb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:58 2026 by rpki-client