Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
File: gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json)
Hash identifier: XgTBxPNf+JZha/s0MXeiDB9itU0EVwoqy1DHlZqvJjw=
Subject key identifier: 41:86:9B:13:F6:48:23:B8:C3:4C:8E:C2:DF:03:1C:62:3D:92:FE:CB
Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
Certificate issuer: /CN=8159495b72ff015878c1314d24759b6e9147a8e0
Certificate serial: 019D9998CAD62025FCEF55176145E7357F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 04:00:20 +0000
Manifest this update: Fri 17 Apr 2026 04:00:20 +0000
Manifest next update: Sat 18 Apr 2026 04:00:20 +0000
Files and hashes: 1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: ZjwhfIdI0F3PE83Z8jgxlJUXSq1Bn5rCk+2fbe4G3ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ca:d6:20:25:fc:ef:55:17:61:45:e7:35:7f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0
Validity
Not Before: Apr 17 04:00:20 2026 GMT
Not After : Apr 18 04:00:20 2026 GMT
Subject: CN=41869b13f64823b8c34c8ec2df031c623d92fecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:f0:5a:32:3b:64:14:8c:5a:4d:60:89:d9:
b4:19:17:0e:c5:c1:c4:19:b2:b5:e2:b7:30:13:bb:
bf:b1:f3:de:53:17:64:81:1d:6c:64:44:f2:47:07:
5a:1c:10:11:bf:18:ef:f8:ac:2b:0e:c7:f1:92:7b:
f4:97:fc:b6:db:b9:81:ac:75:24:8e:14:c1:b7:c7:
92:66:2f:42:2c:d7:48:57:89:17:ca:c3:08:c0:d1:
6d:49:7b:a6:5d:22:10:fc:10:3f:e2:7d:61:fc:a9:
ea:38:a9:d1:14:3b:a8:7d:38:b2:0d:be:52:9b:fa:
d4:18:91:2a:71:6c:8a:9a:6d:9c:01:8f:ae:04:f0:
55:f9:ee:d4:5f:75:5f:ba:c2:f7:e3:95:e6:30:7f:
2a:5a:7b:b0:ed:f5:b3:51:cb:29:00:22:a8:0f:de:
e1:63:f6:63:9f:82:a5:2b:e1:6f:fb:65:2b:0d:c0:
0d:c2:41:a3:5a:99:2f:e2:c7:04:03:61:3f:f7:ac:
eb:9c:bf:9a:a3:39:ac:90:7c:3a:c1:c9:63:bd:eb:
e6:79:99:3f:0e:06:1e:bd:97:5b:2a:67:8c:4b:b3:
66:c5:69:76:0a:2a:12:18:d5:0d:c9:10:81:8f:02:
29:05:ff:5a:63:4d:f2:40:73:b9:9b:97:12:18:c8:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:86:9B:13:F6:48:23:B8:C3:4C:8E:C2:DF:03:1C:62:3D:92:FE:CB
X509v3 Authority Key Identifier:
keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:73:5a:72:bb:8d:9e:d6:30:e6:0f:bf:0b:a4:3b:fe:e7:5e:
b1:a2:04:e7:71:b7:c7:28:87:5c:23:64:5f:35:b7:f9:22:b2:
35:95:2b:9a:31:07:3a:5d:9e:b4:55:c3:b0:81:d4:5d:c8:db:
c1:bf:51:80:ca:7c:70:e5:ac:29:d6:4e:70:3b:c0:b2:18:f5:
3d:24:71:86:10:6f:f0:26:33:3c:e5:53:40:02:d2:03:77:50:
e4:11:46:a1:8b:0d:f0:2b:ea:85:15:f8:91:c7:69:ac:01:1e:
ab:09:83:93:b1:e6:9c:32:81:7c:09:3d:4d:65:6d:87:be:2c:
a8:e2:2d:43:64:2a:a0:a4:41:2f:52:56:2f:14:3a:7c:f3:46:
0a:cb:88:ed:27:c8:e6:dc:1c:29:c9:63:c8:f4:03:f6:15:cd:
b6:bd:da:f0:39:c4:fb:d5:4d:af:e0:f6:ef:af:4d:40:ff:4e:
83:89:ac:05:f1:bd:38:80:d4:b3:eb:76:8d:d7:3d:23:c4:0d:
97:f9:90:e9:9d:a8:af:d2:21:12:9a:4f:75:95:61:72:dd:2b:
6d:f9:de:c2:2f:62:f3:8f:7e:41:27:45:df:c5:e7:ff:ff:b5:
0d:b4:f6:88:e2:48:47:9a:c0:23:d1:48:2f:f8:98:c2:53:bc:
f3:cc:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:45 2026 by rpki-client