Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier: Zp4zX97mVIWqGTU3ohn0yxlVMBlI5gn3DSVEbczHr+E=
Subject key identifier: B1:B4:94:FC:E0:38:3F:F6:91:CE:46:24:1B:B0:48:8D:F2:A2:6E:FF
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 019D98BD3DEEAEB0C542B946F423E9EBEC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 00:00:32 +0000
Manifest this update: Fri 17 Apr 2026 00:00:32 +0000
Manifest next update: Sat 18 Apr 2026 00:00:32 +0000
Files and hashes: 1: 8jxEfSsMBe-K4VvTnO-OwvOLMBM.roa (hash: 3hU9n5i+lk1nxy24FsPYr0quzMoUlf0Ht4DETZ7ST+s=)
2: TLlV6jW863bNfhyrt15RgS7DF4k.roa (hash: kGMIhvDQxFzFfEL8ihPcdM+a2HFqV1ObKxrxWA65PvA=)
3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: UAYWUDG5YISLCGA8YM0hNCSGGSNmXUj7WuAQU7+QMwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:3d:ee:ae:b0:c5:42:b9:46:f4:23:e9:eb:ec:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Apr 17 00:00:32 2026 GMT
Not After : Apr 18 00:00:32 2026 GMT
Subject: CN=b1b494fce0383ff691ce46241bb0488df2a26eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:6c:ec:dd:77:18:f2:94:7d:ac:8e:ef:9a:
a5:ff:6e:17:1d:7b:9a:bf:d4:0c:33:fd:e5:7d:b6:
72:54:ae:29:3e:21:e9:40:13:c5:a7:fc:89:12:37:
9b:ca:98:47:77:cc:a5:bb:24:f5:a0:9c:75:56:2d:
e9:93:d9:b3:d2:77:87:75:fe:8e:25:fe:b0:55:3a:
73:a1:85:d6:6e:77:8c:99:23:94:ec:92:9c:3f:bf:
09:bb:1f:5a:f8:55:5e:7e:2b:03:02:c9:f9:0c:ad:
56:69:e0:05:ae:44:02:a5:1b:d1:8e:67:c1:4f:23:
56:75:42:3c:26:47:2c:a5:69:d6:63:d0:57:ef:15:
bc:ca:03:65:a7:89:b9:de:24:b5:a9:60:10:55:fa:
66:eb:25:da:41:6d:8f:7c:11:0c:4b:b2:ce:2b:b0:
40:12:66:d5:b5:70:c8:d0:8c:b2:91:2e:bf:ba:d6:
98:7d:58:39:da:8f:ca:99:40:cd:64:b1:66:16:dc:
9d:82:41:63:96:de:05:98:9e:6e:8b:7e:54:31:58:
99:8d:fa:23:a8:3f:a7:2e:1a:fc:1f:2d:4d:49:18:
d6:da:a3:49:76:bd:56:ba:1f:99:b4:36:7e:2d:d0:
13:1d:a6:05:ed:07:e1:08:e6:5d:51:01:30:32:c3:
07:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B4:94:FC:E0:38:3F:F6:91:CE:46:24:1B:B0:48:8D:F2:A2:6E:FF
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:74:cb:33:ac:61:38:af:12:45:cc:ee:51:ed:cc:2a:95:2e:
03:3b:c2:0f:d1:cb:74:12:01:a2:d1:c3:08:00:b7:51:45:0a:
57:b8:cd:76:cd:bb:3d:91:1e:dd:5e:a3:d5:7f:f2:f0:5f:01:
7f:e8:8a:ea:98:0c:1e:80:56:ce:2a:d9:ad:83:5a:c1:ec:7e:
f3:ad:ba:ba:d1:2d:bb:a4:ad:58:17:6c:12:58:2f:d6:9b:e7:
4d:63:17:d6:05:8d:0b:95:75:4c:f8:53:db:f3:04:39:61:5e:
a5:86:55:b6:26:e7:1f:a3:59:12:91:7d:7f:b0:1f:1a:8d:05:
51:8d:f4:34:83:28:06:e1:8b:4a:f2:84:21:0d:58:90:5d:8a:
95:e1:22:45:16:d9:0e:6d:4b:22:6a:ff:1a:5a:59:20:96:cd:
56:2f:e1:38:98:e3:04:a9:b4:cc:0c:08:2a:77:c9:a9:ff:f4:
e8:c3:0f:fb:55:3f:fb:16:a1:41:b5:1e:ab:d0:b6:87:70:cd:
20:8b:33:7b:b5:fc:0f:00:96:1d:38:9b:13:57:a3:99:07:d4:
4c:73:72:cb:81:2c:8f:a6:f1:13:18:c8:35:4b:2d:59:91:81:
f9:50:22:54:14:9f:78:51:62:e1:b7:4b:91:1a:e9:8c:a3:82:
bb:49:55:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:12 2026 by rpki-client