Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: BZN7xPDckVZq5TJWjOtDaYQLForfYYhjjLubouXruC4=
Subject key identifier: 32:D8:88:EA:A8:F0:46:1D:A6:89:CA:DB:65:B9:26:A1:44:EC:99:C9
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 019D9961E98D32F0B9D617090792071C8DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:23 +0000
Manifest this update: Fri 17 Apr 2026 03:00:23 +0000
Manifest next update: Sat 18 Apr 2026 03:00:23 +0000
Files and hashes: 1: 84Vy4QZqvQZUIRmhoX03xS6PmHg.asa (hash: mu6fp0Fipel740MCIXuJN9FB1rFnZw35tGJ95/rLm3o=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: UFZJl8/y7GwuvA+FElDYyxCIE2q2pBCuoAarCTzpcKw=)
3: zfQjLRUyouMoxd3eQ6QBiqQWAMo.roa (hash: fytzxgaA8VilTty70xA4ueAmIkMerr/peaUGm58YXCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:e9:8d:32:f0:b9:d6:17:09:07:92:07:1c:8d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Apr 17 03:00:23 2026 GMT
Not After : Apr 18 03:00:23 2026 GMT
Subject: CN=32d888eaa8f0461da689cadb65b926a144ec99c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:23:9b:90:6d:4d:c8:15:4a:34:f0:f3:79:
4c:24:13:78:61:f5:58:82:c5:19:a5:01:92:35:9c:
f0:18:cc:ae:e2:e4:e4:68:26:fc:d6:d9:01:e4:bf:
9e:92:56:35:b3:7a:bc:53:f6:52:b6:85:ea:4b:5a:
b5:8a:41:3f:da:e4:b3:dc:16:9d:59:e4:13:f0:cd:
8e:c8:a6:1c:76:05:0c:3b:51:dd:98:d9:fb:f5:4c:
7f:a5:f2:71:a2:c7:80:c5:b3:5a:09:9a:8f:50:37:
97:fa:34:e8:4d:00:55:c1:e5:f2:ec:48:ea:f1:0c:
40:fe:30:a9:5d:32:00:ec:57:90:66:8d:c0:4d:d4:
16:92:3f:e8:fc:66:16:fd:ef:d6:da:f1:94:4a:e4:
ed:c2:a3:7a:5e:99:e5:f7:9d:30:5a:cb:1e:a9:52:
cd:6c:ef:aa:34:a6:45:a1:64:26:b3:68:9f:0e:1f:
ae:c3:74:c7:d3:5b:5f:45:53:c7:27:32:09:87:cc:
7e:ed:58:e1:d4:4a:bd:00:36:a0:11:a6:20:ab:0e:
70:94:8d:35:30:38:f2:af:e7:e4:2c:ec:0b:8a:ba:
31:34:36:39:14:11:55:c8:b7:3f:0d:8f:9f:17:bd:
b1:de:e3:fa:6f:98:25:cd:93:68:0d:73:d4:03:5c:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D8:88:EA:A8:F0:46:1D:A6:89:CA:DB:65:B9:26:A1:44:EC:99:C9
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8a:de:24:9b:48:e9:5f:6b:3d:6d:d7:2c:c8:bb:92:c8:59:
98:a5:b1:8e:d2:20:f0:34:9f:60:73:af:df:4f:85:90:df:fd:
10:65:2c:38:c4:8a:77:5d:1e:6b:53:7c:59:46:64:5e:51:2d:
67:14:a1:6f:e5:72:c9:54:cb:47:cd:8c:8a:f0:9e:0e:7e:80:
f5:46:b1:00:10:c3:e9:b1:19:37:c2:3e:ab:dd:4b:f1:cc:0f:
41:2a:0a:8e:86:23:48:8f:65:ee:ef:2b:a0:05:b2:f1:fe:d4:
03:c0:1a:b6:de:c7:da:49:fa:df:91:28:bd:5d:9d:f7:30:1f:
33:a0:a6:07:be:b2:a4:c2:f8:7b:04:f1:2d:a4:cd:f7:35:db:
7c:41:88:e9:10:a9:a3:ec:d2:45:8a:28:85:d3:25:8c:19:a3:
75:cb:23:e0:2e:06:ae:05:6f:ba:81:63:a3:e3:d8:da:12:e3:
a4:06:ea:c8:65:8e:07:3a:93:0e:f7:b4:9d:c7:5a:ea:25:ce:
df:a5:3a:9d:1c:e5:7d:c2:21:8e:fa:bc:46:5e:b4:d9:45:da:
d2:eb:23:c7:ae:0d:88:90:07:73:ab:b0:4a:da:40:38:99:0d:
23:41:91:43:32:6d:9f:34:59:1e:a6:ef:d1:cd:e7:dd:6e:37:
b3:fc:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:46 2026 by rpki-client