Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: l2EMISWaEwm4OL6/y40thw079UE/K1+SbEChOSvmJ4M=
Subject key identifier: 1F:82:2F:C3:DB:98:2A:39:C1:7B:6F:D4:AD:14:15:59:B6:32:DF:CE
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 019D99CFD7F38C9F138D33D5E0BE6DF96B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 06F8
Signing time: Fri 17 Apr 2026 05:00:28 +0000
Manifest this update: Fri 17 Apr 2026 05:00:28 +0000
Manifest next update: Sat 18 Apr 2026 05:00:28 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: iGyhZVFhPi3n2kvK5iM1Q1o8U0A2w7SggnObyQWfNbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d7:f3:8c:9f:13:8d:33:d5:e0:be:6d:f9:6b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Apr 17 05:00:28 2026 GMT
Not After : Apr 18 05:00:28 2026 GMT
Subject: CN=1f822fc3db982a39c17b6fd4ad141559b632dfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:8b:07:b9:1e:bf:ee:6d:e2:a6:3b:b0:6c:
b0:5c:f7:30:fd:cf:77:bc:49:bf:1e:60:15:5a:41:
a3:b9:8e:d0:01:18:40:21:42:c4:4d:4d:0e:0c:a6:
f6:32:d6:fc:94:c3:7b:c1:11:d0:a6:3c:cc:5d:08:
5e:ea:a6:ff:e3:11:17:b1:3a:a4:08:f4:80:84:06:
b7:17:14:c0:93:98:24:54:49:03:e0:56:15:f8:66:
a1:53:33:f5:df:68:d2:a9:e8:a0:53:1e:fa:b9:eb:
cd:5a:f1:8c:ac:7b:aa:9d:be:76:5f:6a:18:d0:52:
2e:4e:8b:59:dd:5f:5c:88:9b:2e:02:8d:87:63:ca:
67:b8:09:e1:ce:35:86:c6:cf:67:b2:e2:11:18:fb:
32:3a:39:24:a7:d0:39:7c:e4:10:56:a7:e0:03:f8:
76:81:93:dc:c9:98:98:58:5f:82:6b:48:c1:31:44:
15:d7:13:fb:1c:05:d6:76:43:8e:4e:36:fe:d1:fc:
cb:01:2f:26:ab:37:d7:fa:a7:e8:08:1f:9b:b9:aa:
dc:02:91:ec:a7:9c:63:02:6b:75:e9:dc:55:23:5d:
5a:28:b6:90:10:02:38:a9:7b:d9:24:e1:33:86:dc:
c6:2d:72:49:d2:c5:4c:ac:b4:35:44:bc:00:67:79:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:82:2F:C3:DB:98:2A:39:C1:7B:6F:D4:AD:14:15:59:B6:32:DF:CE
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:42:f0:56:05:40:e0:3e:1b:fe:a0:86:e5:14:4a:46:d2:e5:
6e:ee:fc:c8:ad:77:ce:b6:ca:d9:f4:55:7f:ac:26:44:20:a8:
27:2d:43:ff:0e:47:f0:0e:74:1b:24:19:e3:48:c8:a7:bc:e4:
ac:f5:f2:0f:d6:7f:ab:88:95:8d:35:14:0e:f9:bc:6c:63:1d:
d6:5c:84:37:35:ea:8d:01:32:10:13:f1:b4:45:13:74:aa:92:
e7:75:ef:e2:e2:09:a0:df:83:27:7e:00:6c:c4:75:3d:32:d3:
d4:6c:9e:ec:c4:64:46:8f:38:2d:c2:66:5d:8d:87:b7:c5:72:
8e:9c:2a:bd:b5:d4:6e:ba:42:2d:8b:e5:6e:d5:ae:30:77:08:
2f:93:0b:0f:b1:f5:42:5e:75:4c:fa:0a:75:d5:74:bf:6a:b6:
84:fd:06:db:39:50:f3:9d:17:41:8a:16:f0:59:8b:60:b2:f1:
15:b2:6c:29:c0:06:99:e0:94:b0:fb:13:80:e6:80:4b:e9:65:
2a:c2:13:87:a8:89:05:a2:8e:82:1f:cb:6b:51:e5:88:af:69:
b4:a2:5c:98:48:3b:07:34:76:1d:fc:8b:2d:a9:eb:8b:a6:11:
1c:37:8c:a3:05:ff:28:68:b4:8e:f4:ca:9f:9b:fc:84:6e:c8:
ec:2b:c6:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz9fzjJ8TjTPV4L5t+WuGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZDRlYTQ0ZGU5ZTU5YTE3YzkyMmY2ZTA0MTcxM2JiYzRh
ZjBhMzMwHhcNMjYwNDE3MDUwMDI4WhcNMjYwNDE4MDUwMDI4WjAzMTEwLwYDVQQD
EygxZjgyMmZjM2RiOTgyYTM5YzE3YjZmZDRhZDE0MTU1OWI2MzJkZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OGLB7kev+5t4qY7sGywXPcw/c93
vEm/HmAVWkGjuY7QARhAIULETU0ODKb2Mtb8lMN7wRHQpjzMXQhe6qb/4xEXsTqk
CPSAhAa3FxTAk5gkVEkD4FYV+GahUzP132jSqeigUx76uevNWvGMrHuqnb52X2oY
0FIuTotZ3V9ciJsuAo2HY8pnuAnhzjWGxs9nsuIRGPsyOjkkp9A5fOQQVqfgA/h2
gZPcyZiYWF+Ca0jBMUQV1xP7HAXWdkOOTjb+0fzLAS8mqzfX+qfoCB+buarcApHs
p5xjAmt16dxVI11aKLaQEAI4qXvZJOEzhtzGLXJJ0sVMrLQ1RLwAZ3lDjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+CL8PbmCo5wXtv1K0UFVm2Mt/OMB8GA1UdIwQY
MBaAFIHU6kTenlmhfJIvbgQXE7vErwozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8xYjdkMDgtOTJmOS00ZWQxLWI3OGUt
MDMzMDQyZTg4ZDE4LzEvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8xYjdkMDgtOTJmOS00ZWQxLWI3OGUtMDMzMDQyZTg4ZDE4
LzEvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0LwVgVA
4D4b/qCG5RRKRtLlbu78yK13zrbK2fRVf6wmRCCoJy1D/w5H8A50GyQZ40jIp7zk
rPXyD9Z/q4iVjTUUDvm8bGMd1lyENzXqjQEyEBPxtEUTdKqS53Xv4uIJoN+DJ34A
bMR1PTLT1Gye7MRkRo84LcJmXY2Ht8VyjpwqvbXUbrpCLYvlbtWuMHcIL5MLD7H1
Ql51TPoKddV0v2q2hP0G2zlQ850XQYoW8FmLYLLxFbJsKcAGmeCUsPsTgOaAS+ll
KsITh6iJBaKOgh/La1HliK9ptKJcmEg7BzR2HfyLLanri6YRHDeMowX/KGi0jvTK
n5v8hG7I7CvG4g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:19 2026 by rpki-client