Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: OklzALb1oax5ka6PaX3xlD4ppS5DQl1lA5KXyW8DnQI=
Subject key identifier: 12:56:79:9D:8A:DB:4D:5F:3C:A5:83:87:C3:BD:44:F3:EF:BA:69:37
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 019D9BBF28BBB2FEE5C623DF6C3C0825A387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 187C
Signing time: Fri 17 Apr 2026 14:01:29 +0000
Manifest this update: Fri 17 Apr 2026 14:01:29 +0000
Manifest next update: Sat 18 Apr 2026 14:01:29 +0000
Files and hashes: 1: 6K4rT6VCuHtrpHkb6XBvfHzGcts.roa (hash: rcgp9RRt2ZMAtK8hgAgj71whrGluIkO7wLBZN77JUi8=)
2: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (hash: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8=)
3: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (hash: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00=)
4: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (hash: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo=)
5: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (hash: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso=)
6: aLeBPPf7ugWBDmXZtGstFAYR5d8.roa (hash: WCjwJf715go5YX++trIsBUfbf3PUAGqQfhdqAZp7NwQ=)
7: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (hash: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI=)
8: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: wZzwXeaohA06vUOCrBfhfiNrh+UIbuVSb8dndDcfs4Y=)
9: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (hash: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:28:bb:b2:fe:e5:c6:23:df:6c:3c:08:25:a3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Apr 17 14:01:29 2026 GMT
Not After : Apr 18 14:01:29 2026 GMT
Subject: CN=1256799d8adb4d5f3ca58387c3bd44f3efba6937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:c6:ac:a9:b4:a2:ce:2f:04:c9:d9:0e:03:
34:5c:6d:b3:a6:06:1a:66:70:82:58:11:39:be:24:
9e:92:cb:01:5e:11:3b:1d:b2:7f:2a:24:9b:14:68:
36:3b:23:ad:b0:05:a0:70:22:17:ee:06:da:5c:1d:
93:5d:b8:c9:6e:ab:eb:b2:24:0d:3f:1d:95:7c:75:
df:57:80:24:2f:ba:69:a4:b7:34:59:1e:72:f8:ff:
d7:fe:53:18:ae:34:8c:79:19:51:5d:38:01:68:71:
10:81:02:de:17:cd:a1:26:45:13:b8:b7:7a:eb:44:
36:be:7c:37:1d:23:6d:48:48:ae:95:63:75:4e:2c:
d3:8e:8e:26:ed:f5:f9:b6:64:c1:04:66:25:73:f1:
41:0c:fd:09:4a:f3:3b:c9:28:bf:50:7b:96:88:76:
a4:c8:b2:34:4a:34:74:8d:43:03:20:e2:a6:6a:90:
51:79:ed:0f:ed:9f:3c:66:41:28:3c:16:89:4c:f9:
3e:a1:f2:57:7d:fc:d5:44:be:89:af:7b:d0:7f:ef:
61:e7:85:be:1d:25:4f:28:bd:0e:fd:bc:2f:5e:69:
93:47:e4:64:62:80:64:6a:9e:cc:84:3c:e7:d7:82:
20:bb:f7:43:ab:1b:e8:14:ce:a9:be:aa:27:09:64:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:56:79:9D:8A:DB:4D:5F:3C:A5:83:87:C3:BD:44:F3:EF:BA:69:37
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:90:b1:6a:fe:0c:d2:36:a7:51:c2:96:cf:60:a9:71:85:a0:
71:be:2c:5c:ef:49:ad:aa:24:59:cb:82:a5:69:8d:aa:73:65:
67:68:44:01:13:0c:bb:ab:8e:70:5e:57:b7:69:85:1c:03:ec:
b0:12:05:95:89:15:24:95:fe:df:c3:a2:a1:46:1a:ff:00:f4:
ee:fb:55:15:76:38:9d:93:f1:87:65:ab:14:22:d5:75:50:92:
09:a0:f3:2a:99:89:bf:d8:69:94:3e:a9:7a:a4:c1:71:13:11:
e1:da:bf:6d:46:a6:e3:51:e6:6f:18:8f:3b:8d:7d:f5:fa:f8:
ec:c5:3e:3c:0b:e5:72:54:9c:b6:a6:80:e6:9d:19:c7:3b:49:
f6:c2:0f:40:9a:e4:41:1d:2f:9d:66:05:c0:b7:6f:e9:ee:22:
f2:88:8e:24:87:0c:12:bb:49:d2:c9:eb:87:d3:cd:bf:9f:d4:
d3:49:e3:2b:c6:19:75:c5:96:63:d5:b7:9e:76:33:27:45:d4:
f4:0c:f6:5b:25:50:ea:2c:de:70:04:1d:ff:27:70:25:7f:a9:
e2:5f:cb:1d:09:a1:72:0d:33:97:ff:ad:23:09:52:20:75:af:
89:da:c5:36:74:8d:d0:4a:c7:ce:c5:46:80:c6:f1:48:7a:3e:
b2:a4:48:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:09 2026 by rpki-client