
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File: GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier: MF5nmABzCMdyKNQMs5kiO0C+ti7wzm0sqqfI2BZmQvM=
Subject key identifier: FE:94:81:5B:53:7E:07:DC:88:25:59:F0:AA:30:17:45:C9:00:C4:56
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer: /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial: 019D992B4E6A1AEB8D998D3FE03F0DA9DF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:45 +0000
Manifest this update: Fri 17 Apr 2026 02:00:45 +0000
Manifest next update: Sat 18 Apr 2026 02:00:45 +0000
Files and hashes: 1: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: pW8HFuIi6LT3+lrxCDQhomy0FFHKwGmKUvdWagWDhJA=)
2: i2X0mHk6bAtPNecvn2NA6zmZj9U.roa (hash: mQLU4VLoVcMKqVZZfsB2FdV3V92h7zVuv01+LCyktYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4e:6a:1a:eb:8d:99:8d:3f:e0:3f:0d:a9:df:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Validity
Not Before: Apr 17 02:00:45 2026 GMT
Not After : Apr 18 02:00:45 2026 GMT
Subject: CN=fe94815b537e07dc882559f0aa301745c900c456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:bc:6c:01:4c:e8:0c:fc:3c:10:5e:08:08:
0f:88:69:5b:4a:87:3a:93:d3:7d:6b:ca:e1:90:4e:
3f:78:f9:59:42:94:9a:6d:a6:60:60:9b:48:04:18:
82:8f:88:1d:e4:8d:2a:54:7c:3d:22:4b:df:32:34:
4e:d2:7a:e7:e8:ab:aa:4b:60:67:72:ff:12:91:2a:
16:7a:93:c8:fa:a0:bc:71:da:3f:c2:93:60:45:fc:
54:aa:62:4e:1a:37:23:f4:2e:d0:3f:2a:c8:ee:e4:
2e:01:b7:05:89:39:dc:eb:a0:2c:31:a4:85:05:c0:
52:41:4b:ac:6b:d8:93:38:bd:51:fb:b4:f5:69:10:
47:63:c6:04:70:2d:fc:25:60:f8:32:02:8f:f0:08:
4d:b2:4f:0c:33:ee:3b:73:24:76:c4:62:5c:bc:e7:
83:b2:ee:a9:47:71:ee:6e:98:b5:e7:46:8a:1f:00:
83:3b:8a:a4:0c:14:32:62:a6:d6:92:ed:67:0d:d6:
04:e6:de:ad:cd:35:89:7b:8d:fb:e4:12:11:ab:f7:
12:00:20:21:87:55:96:28:20:29:b1:97:c6:65:6e:
ee:ef:3e:c7:7f:6f:fd:ae:87:3c:cc:59:75:5f:34:
af:09:c3:27:e1:17:10:71:e2:a3:b1:68:ec:16:c0:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:94:81:5B:53:7E:07:DC:88:25:59:F0:AA:30:17:45:C9:00:C4:56
X509v3 Authority Key Identifier:
keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d0:95:fa:ab:38:89:36:73:88:e2:eb:eb:c2:80:bd:20:31:
93:83:9d:a9:06:45:ee:05:6c:e2:66:25:d6:28:94:80:80:30:
c3:c6:cc:35:29:4b:12:bd:05:83:94:f4:2d:9e:b8:5f:3f:8f:
25:46:46:2d:37:2d:02:56:c2:b5:d4:a5:91:ba:98:8b:b4:e1:
31:6b:b8:31:30:f0:9d:36:f8:33:9d:25:35:5b:aa:ce:21:9e:
2c:16:c2:c0:d2:ec:8a:e8:74:8a:12:05:b5:79:dc:63:04:86:
d8:d2:20:04:a4:82:95:f3:a7:4e:1b:14:b3:20:94:e1:b0:cf:
36:8e:b6:28:c9:43:e9:f9:ad:1f:19:fc:cc:76:88:91:ea:2f:
51:f1:3e:5d:62:b1:68:35:b4:43:61:df:d8:e0:cc:85:70:59:
08:cd:b8:74:b2:8b:e0:ea:82:45:e7:ee:7d:c7:2b:f0:8e:d1:
93:33:a4:60:2c:1f:1b:60:fb:b0:c7:32:37:29:28:a6:df:85:
1a:40:d7:c3:06:29:eb:28:c3:ee:e6:8b:e8:b7:c0:4a:29:cc:
c4:cb:e3:cf:7e:c8:b9:21:86:97:3f:12:a3:70:d7:cd:e2:13:
6e:a9:2b:e7:31:78:c6:e6:8f:ff:b8:b4:59:3f:1d:af:20:31:
28:b5:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:07 2026 by rpki-client