Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
File: _GpMWV8LLdBaH-Zyh8E84OvICts.mft (raw, json)
Hash identifier: lzB+jLrcMG8dYwsZTET8+5ali+ZUGdIzqzkFzS7Gbak=
Subject key identifier: 31:82:2C:20:07:D0:4D:D4:12:B8:9D:4A:6E:37:5D:1F:8D:8F:B4:97
Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Certificate issuer: /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Certificate serial: 019D996217FDC75110376441F446278F47EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:35 +0000
Manifest this update: Fri 17 Apr 2026 03:00:35 +0000
Manifest next update: Sat 18 Apr 2026 03:00:35 +0000
Files and hashes: 1: NLoNNi5CjHst33m7ywBlAPo2j9g.roa (hash: fKsxjWS8XzZz8fe3QPRIR0J9BUvOdRhlN77VHIREw+U=)
2: _GpMWV8LLdBaH-Zyh8E84OvICts.crl (hash: R23g+MkUyiCBWDKQuzcbAHbopDBFb2MjXbECgd/cVwQ=)
3: ieUGguqrKvcNhkrMXAP72jx_K8Q.roa (hash: FH+hfr4zdjk2044475wgvLS1qj40hiexUTsIxUjhke0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:17:fd:c7:51:10:37:64:41:f4:46:27:8f:47:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Validity
Not Before: Apr 17 03:00:35 2026 GMT
Not After : Apr 18 03:00:35 2026 GMT
Subject: CN=31822c2007d04dd412b89d4a6e375d1f8d8fb497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:28:f7:96:da:ec:b6:c7:d8:2f:c2:dc:90:
47:24:48:ca:fe:ef:3c:6e:c3:e4:58:7f:3d:8c:8c:
d0:27:06:72:5a:20:2b:90:7e:b5:b7:f1:25:95:2b:
01:9f:60:2d:a2:4c:74:10:ec:55:21:38:93:57:c6:
3c:43:72:74:66:fb:52:40:c0:4a:be:c7:b0:20:61:
bb:f1:ae:c6:0b:6d:2f:87:fc:49:90:cc:15:d7:cf:
cd:01:2b:f6:b0:68:85:11:d7:95:89:ee:9b:8b:fa:
b2:40:c5:1f:25:31:ef:47:d8:48:f2:56:e2:6f:bf:
ee:74:9c:06:b2:18:7d:85:78:f3:a7:58:02:0c:28:
4d:98:c9:20:42:d5:2f:10:8f:8b:88:be:ba:73:3c:
8c:8a:a6:91:c7:82:f1:c8:c4:54:05:7d:50:92:75:
61:56:ac:04:c1:cd:68:1e:a8:7b:44:de:5f:45:a5:
3f:15:cb:4e:23:31:e4:75:d8:01:c5:ed:b7:2e:33:
65:3b:b9:9f:01:e7:b6:44:fe:ce:e5:87:ed:87:4c:
b4:75:a9:f5:99:dd:e7:df:3f:55:8c:e6:52:0d:02:
14:66:7e:87:ec:b2:77:34:98:bf:eb:82:b9:7b:9d:
94:eb:7b:18:04:f5:46:c1:dc:fc:50:13:54:32:66:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:82:2C:20:07:D0:4D:D4:12:B8:9D:4A:6E:37:5D:1F:8D:8F:B4:97
X509v3 Authority Key Identifier:
keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:92:ea:5a:d0:14:2b:76:3f:b1:5a:13:57:3a:29:8e:c6:8c:
84:1f:23:32:32:2b:ab:fe:9f:e0:06:d3:21:b4:59:19:f7:3b:
9e:1a:65:b6:8f:f8:8f:5a:f0:d7:ef:64:13:c0:86:c9:19:7e:
48:f8:0d:b9:61:10:3a:94:29:61:63:43:79:dc:8f:13:e2:22:
63:42:4c:bd:8d:48:90:ea:c2:36:26:0e:3f:92:31:2d:ad:2b:
34:bb:35:5f:b0:28:21:b8:63:0c:be:e4:38:a1:92:6d:57:1d:
3d:0f:84:ed:c9:2d:b7:b4:5c:be:87:9e:55:a1:d3:06:6a:a2:
75:77:20:a4:7a:91:01:c0:e8:9a:07:44:b7:7e:9a:3e:ec:31:
c7:6f:73:df:a0:9a:cf:9e:15:d5:0b:82:32:a9:4e:6f:1c:d8:
84:fe:a7:8f:2b:5c:d6:87:dd:63:45:6c:a5:b6:aa:03:99:d5:
50:95:51:d9:81:d6:38:52:0b:2a:35:45:ab:7b:19:49:17:ef:
e8:14:84:16:4e:e1:94:41:7a:42:0e:b0:1d:37:69:1f:34:53:
1f:46:18:7c:ba:ff:a2:a8:07:96:de:ae:a9:8b:44:fe:c1:f4:
3c:a3:ac:66:ff:73:91:be:e2:8b:66:63:f2:d2:14:7e:b7:00:
55:81:18:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:30:16 2026 by rpki-client