Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File: GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier: BeaTe+9DlwgXZjPGCR35uvNmIxiaDVm32+ttYrRSvoQ=
Subject key identifier: 83:82:15:B8:6C:DB:61:DA:F9:3F:53:E8:55:34:9F:41:F9:5A:5A:A8
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial: 019D9AAC1E19A4BDFF6DEDBD7C1F968E29E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 09:01:04 +0000
Manifest this update: Fri 17 Apr 2026 09:01:04 +0000
Manifest next update: Sat 18 Apr 2026 09:01:04 +0000
Files and hashes: 1: 7owqXESGy_RXh39I2zXYrOmIRmY.roa (hash: uD/kXqY4+DVU4PEvK0O92LooxshLndRFHktHnH9fzjs=)
2: FhTqn0nI2AOefAde-zGtbwEbRRY.roa (hash: pvmj7N2aWwyL4DhPFHc9oWpCfcCMtoks7zjIuX/XA3M=)
3: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: ZvacO16KOsFp3fF8H8YfLtByRUI4A8E36CifEu4tvzg=)
4: IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa (hash: 9Z9gCW1kabV4H10WypJ+CcaUnOFek5gLKpjj5o/RjC0=)
5: nnLZ_anjPSOLRayVOL-RzewgHwI.roa (hash: 2WaAIYb59kGhe6tvXHb5ioUayH6vLhFoDq8NRlocKJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:1e:19:a4:bd:ff:6d:ed:bd:7c:1f:96:8e:29:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Validity
Not Before: Apr 17 09:01:04 2026 GMT
Not After : Apr 18 09:01:04 2026 GMT
Subject: CN=838215b86cdb61daf93f53e855349f41f95a5aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:ce:28:fe:97:9e:c6:99:f2:52:4b:11:21:
24:3b:dc:18:42:74:a9:b9:ba:8b:10:41:52:48:3a:
7c:10:dd:bd:97:d4:ca:49:67:75:d5:d5:0f:ec:dd:
a9:5b:9a:6c:f6:b8:75:1c:d2:d6:9d:33:ea:e0:82:
fd:d5:39:60:02:35:49:a2:02:13:37:03:71:35:5e:
e7:bc:42:aa:d9:33:8b:2e:7a:65:78:ce:e8:eb:86:
21:1a:50:57:17:7b:7a:80:69:44:2c:00:f7:6f:a3:
8c:ce:e4:43:3a:32:3f:5a:54:b3:62:5d:3e:98:ac:
e5:f2:d0:57:20:40:aa:25:e1:e6:66:e4:32:d6:1f:
37:90:f8:0c:9f:8f:11:20:cf:3d:47:58:33:ca:da:
7d:e8:52:e8:d5:a1:33:4b:73:d9:e5:0b:69:fe:ae:
de:8b:db:13:b7:f5:9c:0d:b1:7c:e3:46:8a:aa:cc:
f6:a4:74:5a:9c:29:a0:87:b0:a5:a5:4a:3f:92:65:
e2:75:37:95:63:5c:fd:55:a5:1a:32:63:ab:88:80:
8b:4a:13:fc:98:e6:12:0b:8e:a4:d1:34:e4:1d:00:
1a:79:0f:8c:0d:47:79:c5:56:3f:b3:dc:2e:99:11:
2f:d0:a4:fb:a5:1c:d0:3a:d6:e8:71:08:d7:0f:03:
10:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:82:15:B8:6C:DB:61:DA:F9:3F:53:E8:55:34:9F:41:F9:5A:5A:A8
X509v3 Authority Key Identifier:
keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fe:a4:d4:7c:40:09:c1:96:1a:5b:ec:7c:79:5c:fb:ac:b7:
fa:eb:c9:c8:c6:c1:e5:6b:ae:85:cc:d6:3c:57:55:85:33:0c:
7b:b0:93:26:cd:44:43:8b:54:dc:e4:0f:93:70:fa:2b:e9:f5:
88:40:83:68:63:ab:f9:cb:6f:9a:ca:54:93:ee:51:a0:8c:eb:
79:d9:b6:10:ba:c9:53:9c:fd:9f:67:a5:f8:f5:19:7f:45:8e:
15:71:45:28:ea:90:d7:62:42:e5:68:3a:1d:e8:eb:4c:ee:3c:
06:c8:52:56:fb:55:18:9e:62:b9:01:3a:27:d3:f9:64:82:1c:
3e:bb:1b:9e:d6:a8:56:57:c3:75:6a:f9:84:86:9c:54:0a:5a:
45:b9:12:79:67:f2:3b:f5:1c:92:49:36:0c:32:22:ac:d5:21:
b1:fc:da:84:b1:4b:ed:28:92:68:c0:ee:b9:b2:d1:4a:84:94:
da:5c:21:fa:56:b7:12:ed:36:0a:e3:c0:c6:a5:30:2f:f8:f2:
a3:be:67:e2:29:6b:e6:a3:de:02:e6:35:41:d8:82:a4:ec:3d:
e4:60:0b:b9:a0:c7:0b:93:62:be:63:2a:e1:a6:4c:c8:a8:25:
5c:0b:b7:ee:60:27:5c:ad:0f:c8:cd:01:01:eb:56:7c:22:0a:
20:2a:32:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arB4ZpL3/be29fB+WjiniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjFhOWRkMTI2ZjM3MjM3Y2UyMDBmYjg2MTZmZjkzN2Jj
YTk2NmMwHhcNMjYwNDE3MDkwMTA0WhcNMjYwNDE4MDkwMTA0WjAzMTEwLwYDVQQD
Eyg4MzgyMTViODZjZGI2MWRhZjkzZjUzZTg1NTM0OWY0MWY5NWE1YWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHrOKP6XnsaZ8lJLESEkO9wYQnSp
ubqLEEFSSDp8EN29l9TKSWd11dUP7N2pW5ps9rh1HNLWnTPq4IL91TlgAjVJogIT
NwNxNV7nvEKq2TOLLnpleM7o64YhGlBXF3t6gGlELAD3b6OMzuRDOjI/WlSzYl0+
mKzl8tBXIECqJeHmZuQy1h83kPgMn48RIM89R1gzytp96FLo1aEzS3PZ5Qtp/q7e
i9sTt/WcDbF840aKqsz2pHRanCmgh7ClpUo/kmXidTeVY1z9VaUaMmOriICLShP8
mOYSC46k0TTkHQAaeQ+MDUd5xVY/s9wumREv0KT7pRzQOtbocQjXDwMQBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOCFbhs22Ha+T9T6FU0n0H5WlqoMB8GA1UdIwQY
MBaAFBnxqd0SbzcjfOIA+4YW/5N7ypZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgt
M2ZkMzA5ODhmNjc3LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgtM2ZkMzA5ODhmNjc3
LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPf6k1HxA
CcGWGlvsfHlc+6y3+uvJyMbB5WuuhczWPFdVhTMMe7CTJs1EQ4tU3OQPk3D6K+n1
iECDaGOr+ctvmspUk+5RoIzredm2ELrJU5z9n2el+PUZf0WOFXFFKOqQ12JC5Wg6
HejrTO48BshSVvtVGJ5iuQE6J9P5ZIIcPrsbntaoVlfDdWr5hIacVApaRbkSeWfy
O/Uckkk2DDIirNUhsfzahLFL7SiSaMDuubLRSoSU2lwh+la3Eu02CuPAxqUwL/jy
o75n4ilr5qPeAuY1QdiCpOw95GALuaDHC5NivmMq4aZMyKglXAu37mAnXK0PyM0B
AetWfCIKICoyRw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:23 2026 by rpki-client