Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: LwS2/tP/s/cA/VjY9Od7LsfzA5JSiq2F9ZZ6Zv2BOqI=
Subject key identifier: 5A:62:C9:FC:4A:AF:A5:EC:F6:0E:49:50:24:F7:6E:35:FD:A2:EA:94
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 019D99621B9B6400A65F335ECB756B3770E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:36 +0000
Manifest this update: Fri 17 Apr 2026 03:00:36 +0000
Manifest next update: Sat 18 Apr 2026 03:00:36 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: dgDXVqQf26dRIj9HEKKDY+1c6Si6fcEVaDHAT7aORnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:1b:9b:64:00:a6:5f:33:5e:cb:75:6b:37:70:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Apr 17 03:00:36 2026 GMT
Not After : Apr 18 03:00:36 2026 GMT
Subject: CN=5a62c9fc4aafa5ecf60e495024f76e35fda2ea94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:c0:92:21:50:ab:dd:66:70:27:7e:45:ec:
35:87:14:f8:d6:c1:20:fd:fe:db:6d:85:a9:bf:05:
02:63:ab:f1:9d:84:46:b1:2c:53:45:34:b2:a3:19:
34:66:07:70:86:99:0a:7a:f2:a8:f3:10:9a:72:c0:
14:d2:e8:2c:42:c0:9b:f6:13:e4:7d:a3:92:8c:dc:
b8:4f:2b:1a:de:84:7f:a9:a6:ab:fa:f6:4b:01:11:
95:a6:6c:7a:98:e2:13:be:51:a4:9e:8d:52:ce:4e:
6a:58:62:d6:ce:44:9c:d2:90:a2:46:3a:78:03:ea:
0a:b4:c0:85:6f:cc:4d:0b:f5:a8:c6:b2:e2:5d:95:
3b:07:fb:40:30:77:b1:91:f5:e9:10:e5:6c:3f:59:
22:a4:04:62:e0:15:02:11:11:ad:22:73:de:88:12:
13:37:65:79:fb:47:7b:83:32:48:6d:18:98:3b:6e:
2d:00:9e:02:5a:04:e7:7b:5d:69:7a:57:90:d5:75:
34:7e:d1:b5:7b:16:91:48:5a:a2:52:cb:ef:2c:ac:
8a:06:4e:b9:b3:e9:98:d5:4b:80:3a:5a:27:e9:72:
f0:b1:69:34:10:a4:df:f3:4d:dd:ca:8e:8b:e0:79:
cf:24:ae:e9:f2:4d:d3:c4:98:27:99:08:4e:b1:db:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:62:C9:FC:4A:AF:A5:EC:F6:0E:49:50:24:F7:6E:35:FD:A2:EA:94
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:53:df:39:85:da:e8:a1:b4:5b:dc:3e:7e:4f:42:d9:3d:
c7:da:a9:19:74:7f:98:23:ea:17:bc:05:3d:6a:6d:70:cf:9c:
38:9b:2d:a6:5b:a3:40:73:26:66:19:51:04:8a:76:85:df:39:
0c:9f:5b:0b:06:37:49:81:ff:79:5a:be:ba:01:d4:d4:94:52:
82:b5:fd:a0:89:3c:5a:10:72:4d:c3:aa:a5:d2:ca:03:72:18:
88:1d:f0:a1:75:e5:e7:77:8a:94:93:0c:af:f5:2d:83:63:38:
fb:a3:d2:1f:52:1d:93:97:5e:a5:51:2e:32:c1:22:e0:9c:7d:
b9:69:bc:9d:b2:5b:ec:33:c7:0b:1d:3c:9d:f5:ac:9f:94:46:
c6:e1:c9:48:8f:97:3f:8d:b3:4d:39:79:51:be:d3:17:79:38:
95:37:7e:41:80:99:91:1e:ae:b9:ab:4b:e1:4b:c7:3c:30:2f:
71:6c:69:e1:35:ab:6e:18:fb:fa:d2:fa:a7:7a:e5:34:e7:59:
b7:36:22:70:90:68:30:9a:1d:f7:da:2a:59:c4:f5:4b:48:bd:
71:dd:82:9b:17:73:d0:18:88:91:9e:ec:5c:8c:48:ad:52:d9:
a4:d9:e7:07:f8:01:ce:aa:19:24:7b:cd:76:3d:f7:0c:f7:5c:
c6:aa:ae:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:44:48 2026 by rpki-client