Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier: ctSTtVXIS19HWbno1BfeAN2mEAWNc6yZhNz7M6cFVuU=
Subject key identifier: A0:47:A9:C4:6E:DA:B2:FA:EE:2F:30:A5:53:BD:93:2D:58:E5:81:42
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial: 019D98F497651041D4A0E075FCEA5C9DD26C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number: 16DA
Signing time: Fri 17 Apr 2026 01:00:59 +0000
Manifest this update: Fri 17 Apr 2026 01:00:59 +0000
Manifest next update: Sat 18 Apr 2026 01:00:59 +0000
Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: VvB3qWLJy/fyiGP2quS9YZhTxJNPmEUzEe2R7Ln0gX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:97:65:10:41:d4:a0:e0:75:fc:ea:5c:9d:d2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Validity
Not Before: Apr 17 01:00:59 2026 GMT
Not After : Apr 18 01:00:59 2026 GMT
Subject: CN=a047a9c46edab2faee2f30a553bd932d58e58142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:2c:87:bf:23:a4:70:b9:2c:db:16:f4:49:
1e:9a:69:03:32:85:11:90:6a:5c:d0:4f:2d:26:71:
3d:2b:cf:53:3e:d3:b7:0b:1a:0f:f2:5f:5a:43:fc:
ac:69:9a:50:7f:56:40:ff:11:68:e2:8d:06:61:11:
81:7c:d8:d3:8c:34:e9:6d:9f:1c:be:71:81:c2:a3:
5a:22:a9:93:07:b2:c3:ca:e0:e1:75:cd:a3:74:79:
dd:81:57:14:a9:92:33:e1:2e:2f:73:9b:64:e9:ce:
52:9d:37:c6:00:dd:96:83:95:81:3c:29:3d:51:41:
bb:bc:b6:c3:a5:7e:ef:6f:b8:65:8b:bb:6e:44:6b:
cc:00:e0:21:6e:1a:4a:d2:94:c0:bf:fd:9e:8b:b9:
41:c4:e4:86:04:1d:28:29:b4:15:11:ce:1e:cc:0c:
be:f3:93:97:51:03:5b:62:eb:d9:21:68:f3:82:3e:
4f:5c:8a:e1:78:02:7e:e9:28:1c:b5:10:93:87:05:
dd:75:a2:bf:2b:3a:aa:95:b0:f1:69:f0:9f:ee:b2:
3b:34:3e:77:39:16:79:c5:d7:cd:e9:b9:13:7b:6a:
7d:60:b6:f0:d9:7e:74:af:a7:0d:9b:24:f1:4d:ac:
b5:0b:48:c6:51:39:0b:92:8e:12:ab:d3:b9:f7:d8:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:47:A9:C4:6E:DA:B2:FA:EE:2F:30:A5:53:BD:93:2D:58:E5:81:42
X509v3 Authority Key Identifier:
keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4b:9c:c0:71:f2:01:ce:ee:ca:36:f4:8b:1c:d4:73:bf:35:
f9:1e:6f:71:74:d0:d3:19:14:65:ba:0c:2b:f2:7b:d7:bd:b5:
61:5b:bd:ea:e1:c1:71:49:7c:ad:02:15:68:4d:ee:cc:9f:00:
32:37:25:8d:07:55:9a:78:c1:24:17:61:83:9e:73:41:1a:5e:
bf:18:fe:5a:34:ab:fa:fe:76:12:80:56:4d:9d:74:0a:c2:66:
74:ce:a4:6a:34:f8:f3:d8:e2:f8:70:a8:fe:9a:67:0f:55:5c:
13:0b:44:20:3d:00:49:1f:cc:79:73:4c:b7:4b:93:1f:f7:23:
31:c0:79:35:05:a9:1e:49:e0:ad:ed:01:8d:20:d5:05:c1:59:
65:11:b1:24:fa:01:52:25:26:29:86:f4:67:2a:a2:2c:67:64:
2f:bd:5c:52:5c:02:ed:85:c1:9d:a8:5b:a8:42:37:9e:dd:01:
83:5e:34:90:45:39:73:0d:f7:b7:9a:a2:c4:c9:41:45:f9:f4:
60:fc:f5:fc:e7:fa:41:b0:7d:5d:1e:a3:8e:46:d9:1a:53:bb:
35:e7:c5:5c:7c:03:b5:e9:e0:5f:e2:15:03:f5:82:2f:c0:47:
f6:8e:ca:de:86:50:d1:5d:f9:57:8a:34:41:16:a6:8b:be:b3:
18:3c:9f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:53 2026 by rpki-client