Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier: p5D3JQjE7ZFj/1MuxyZMhI9trEflswRg5BPGIWHTplU=
Subject key identifier: FA:4E:EF:92:E6:B2:38:86:1E:40:1E:9F:F1:7F:09:83:62:75:A9:40
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 019D98BD9FDEA72696B195B4CD9443B9E38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:00:57 +0000
Manifest this update: Fri 17 Apr 2026 00:00:57 +0000
Manifest next update: Sat 18 Apr 2026 00:00:57 +0000
Files and hashes: 1: G-ycgm7YOR-sZa0cDT0Ey0HKpRQ.roa (hash: Rd+BM6THTi6+A/aDOIt4oFEHGR29dEm5uWS1GE/mueU=)
2: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: 0v3Z8hcsFUuRPcb8Wz7Zxc9PfgdeDoCJcV2t10vZzoM=)
3: QfmRg80ICP0Wk2irMKs9YP6N-6U.roa (hash: wg6LRoWXAbVsyyU2ZxflvOEDF09pfNJqXiMahee/sYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:9f:de:a7:26:96:b1:95:b4:cd:94:43:b9:e3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Apr 17 00:00:57 2026 GMT
Not After : Apr 18 00:00:57 2026 GMT
Subject: CN=fa4eef92e6b238861e401e9ff17f09836275a940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:40:4a:ee:a9:62:b0:43:e9:56:c9:72:77:
a3:4a:45:5d:8c:20:d9:3e:3a:db:05:f4:e9:f3:f4:
2c:15:93:98:d4:bd:9d:fe:76:48:1e:5e:bb:a1:9d:
e6:79:fb:62:50:43:dc:e0:18:37:8d:04:24:e8:0b:
0b:d5:88:a5:47:f1:9b:93:ce:0c:45:d0:0b:9b:bd:
56:0a:c0:b2:75:02:7d:db:a8:36:61:e7:19:e0:2b:
1b:6d:d3:2d:4f:0b:96:9f:9b:31:8f:8c:75:24:bf:
6e:6d:24:60:de:b3:8a:6b:fa:84:fe:8b:4f:30:0d:
cf:bf:35:cb:ff:85:fe:a3:54:ee:eb:87:aa:53:23:
d6:a7:08:5e:ab:20:2e:e2:d2:31:96:89:e6:48:1b:
ef:b8:cf:11:89:19:29:4f:5b:5a:33:96:a7:d7:23:
54:0e:e4:f0:89:ec:c9:4a:94:14:de:73:61:89:59:
1a:d5:06:9a:b8:6e:f9:e4:f8:e5:88:13:ed:29:c3:
2b:a8:24:d1:d0:76:1f:b5:47:91:da:72:c9:f3:01:
b0:5b:cf:63:ed:78:d1:d4:d5:a8:12:6e:09:47:c7:
b9:d9:72:9b:51:28:68:cc:4a:62:d6:f6:f1:1f:ba:
d9:44:d9:03:df:a9:50:a3:76:1f:be:86:af:cf:53:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4E:EF:92:E6:B2:38:86:1E:40:1E:9F:F1:7F:09:83:62:75:A9:40
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e7:e1:dc:cb:21:4f:75:7f:8e:91:7d:ff:da:89:d6:a8:ce:
f0:cd:06:42:a7:12:36:75:ea:61:76:f7:92:c8:2b:58:14:6c:
ef:28:b0:56:e2:07:bd:a5:f2:20:c0:79:0d:51:d3:8b:86:37:
5d:53:0a:a2:57:17:89:31:80:b1:fd:2c:77:87:af:8c:8c:64:
25:a4:ae:1c:2d:cf:0a:ff:a8:cd:b8:e5:ca:06:8a:3f:24:9d:
f9:ff:64:f6:40:60:12:20:de:9c:09:d4:4a:54:75:96:9c:c1:
d3:5d:4b:d8:00:af:2a:fd:56:93:ac:82:e2:7f:41:bf:20:47:
4f:f5:63:31:d1:85:d0:d3:c2:7e:f3:24:c6:ef:4e:47:7e:ef:
99:71:69:ab:c0:84:99:f6:0f:ac:80:7d:3e:40:f3:83:69:d1:
47:78:90:88:0f:dc:1d:29:95:e3:a3:36:45:a9:53:14:87:f4:
da:4f:ad:c7:34:c5:ab:b5:f6:5c:32:bb:46:2c:83:0f:41:96:
11:ec:b6:9b:9a:dc:ee:c9:88:5b:05:28:19:7b:c2:40:ff:b1:
7f:1e:c3:e2:0d:85:90:40:8a:ca:22:a1:25:22:b9:b0:45:51:
9c:1c:ab:18:38:34:9c:2f:a4:93:3d:07:4e:6f:b9:67:55:ec:
9b:0f:5f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:42:42 2026 by rpki-client