Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: y0nqwCGBN+FSPv5A36CfwFZvq/eE0UTaboWhKE+jCS4=
Subject key identifier: A6:4A:A4:9E:71:58:A2:8C:49:60:64:6F:FD:14:C7:41:DA:88:6D:16
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 019D9B50E82ED39F2C497E948E6E066FF070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 12:01:03 +0000
Manifest this update: Fri 17 Apr 2026 12:01:03 +0000
Manifest next update: Sat 18 Apr 2026 12:01:03 +0000
Files and hashes: 1: L4uFGOHvLEPXps89rmc7cieKnGo.roa (hash: WAylc2U6EehO6X6NFUAmv8+wiqpowHD6dwxbr/1OINk=)
2: Wcbt97rneJ6uhU8_PT27jnNgfLI.roa (hash: qSxCnXv18dyEf04PSc7gPJRKdfJ+AzYFyylZthUkbiA=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: sDuQ3Du6VUPwRy6ldRZX6sOmecImkM08773ifTrAxgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e8:2e:d3:9f:2c:49:7e:94:8e:6e:06:6f:f0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Apr 17 12:01:03 2026 GMT
Not After : Apr 18 12:01:03 2026 GMT
Subject: CN=a64aa49e7158a28c4960646ffd14c741da886d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:91:0f:59:c3:fc:83:89:6d:29:bd:37:6c:
32:ca:1e:f1:0c:5c:09:da:d3:91:6a:dc:b7:0d:99:
a4:bb:60:71:f9:ea:1e:a7:44:64:cb:85:41:36:d8:
69:20:a3:9f:55:d0:26:22:c9:d9:61:cc:4c:46:5f:
76:e1:5b:07:93:76:19:2b:20:01:d5:4f:b3:f6:3f:
e2:95:74:fc:d8:00:61:15:7f:ea:07:f8:10:49:54:
70:88:0f:13:c7:62:1b:2f:22:26:52:f7:15:ce:b9:
b2:f7:c2:ea:f4:5f:17:ae:35:e8:bf:1c:85:5b:c8:
72:d0:da:7e:c3:45:9d:55:39:26:63:72:d0:fe:dd:
d2:94:67:d7:c4:36:c5:24:9c:61:f8:ef:39:34:22:
c4:6b:1f:b8:db:f8:f5:28:58:40:3f:f7:80:64:21:
3a:93:41:1d:d4:f3:16:01:1b:b6:00:5c:ab:ae:e6:
b2:92:b7:1c:62:98:1b:53:65:3e:0b:39:db:2a:41:
54:fe:4d:22:89:1e:32:17:8c:c4:db:95:7a:e1:65:
f0:e3:f1:99:0f:83:ce:d1:cb:dc:1d:f8:84:a4:ef:
ae:51:4f:e2:79:2e:c3:19:6f:70:37:f9:97:ef:dc:
a8:35:07:5f:fc:ea:3d:ba:6b:6c:8a:02:2d:e3:b0:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4A:A4:9E:71:58:A2:8C:49:60:64:6F:FD:14:C7:41:DA:88:6D:16
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ff:1e:79:78:2f:8a:1d:87:94:38:b6:41:1d:12:ce:4f:ef:
94:5a:d2:75:cf:f5:4a:2b:6a:33:f4:ea:c6:38:ea:4a:20:0c:
dc:06:00:24:c1:aa:f9:f3:4d:3d:ad:56:1c:51:6e:12:37:45:
ac:d4:96:19:b4:8c:9c:50:46:56:81:ab:00:08:5b:06:62:85:
15:89:22:04:b1:18:0d:bd:09:2c:8a:b9:77:6e:ca:fd:30:26:
90:b5:71:52:39:f2:b6:e6:6a:54:6e:86:af:97:33:42:6f:b7:
70:a5:83:a8:47:13:e0:34:84:79:1c:0a:12:af:44:45:a0:ba:
e0:0b:02:19:a6:5e:1e:ce:ee:ee:fd:66:72:b6:d4:5f:bd:46:
7f:a9:3d:eb:58:37:0e:46:04:ff:52:bf:72:9f:ee:a6:37:2a:
d5:a7:6b:89:43:46:9b:1d:d5:c7:3b:79:90:71:7b:09:d5:70:
df:25:56:9e:e9:b8:1f:72:11:e4:6b:b3:4e:31:24:d4:bf:88:
85:10:aa:1c:67:10:8d:51:6d:6d:bd:88:7b:b0:c3:58:6e:3d:
c5:5b:a0:f5:7b:5b:6d:59:6c:7e:f1:d5:69:34:8a:c2:9e:73:
cc:04:90:b9:d5:9b:9d:7e:e4:58:24:01:40:31:a5:33:e6:90:
40:00:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:11 2026 by rpki-client