Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: OGclZncH0TF5LaG0KDGZ/Lr++4KVzjwF02pf31BuCMA=
Subject key identifier: 5E:AE:3C:87:26:EE:44:D0:8C:CF:88:16:21:68:EC:6E:82:8D:93:B1
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 019D9A3DE5C403A44686E6E61B20FD4D57C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 07:00:40 +0000
Manifest this update: Fri 17 Apr 2026 07:00:40 +0000
Manifest next update: Sat 18 Apr 2026 07:00:40 +0000
Files and hashes: 1: F2IHJrnPyRwbzKo1HP_xqBvLdvQ.roa (hash: FgszxDdrz1FfhJ+T4y5DQNjiDZnx4cEgXP5k1Bjw7eg=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: o3xV/d+2qjm24alupMyTbRg+PAftVo8ybGn5NmqgfMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e5:c4:03:a4:46:86:e6:e6:1b:20:fd:4d:57:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Apr 17 07:00:40 2026 GMT
Not After : Apr 18 07:00:40 2026 GMT
Subject: CN=5eae3c8726ee44d08ccf88162168ec6e828d93b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:02:8f:ff:a4:c9:12:c9:49:26:de:f0:b1:
70:a8:9e:70:ed:3e:45:24:90:e4:ae:d6:5f:ec:98:
98:b9:8e:59:96:31:fb:eb:5d:c2:12:09:51:74:ad:
ea:05:65:44:d9:fc:8a:ec:c3:85:8c:a2:ec:91:a2:
dc:71:c3:41:4f:2b:ed:b2:36:af:28:aa:5d:fb:f9:
44:85:d0:01:4e:89:44:6f:97:33:54:54:c4:fb:76:
7a:4b:67:de:a6:58:8d:70:b2:f2:d6:7d:99:f5:b1:
ce:bf:21:46:8c:9b:67:1c:9d:39:79:4f:c9:ae:df:
5e:cb:60:b7:93:d9:aa:ba:4f:64:72:87:af:89:f0:
92:07:4c:49:05:9f:f2:13:99:82:21:34:ab:b2:40:
d3:84:69:c6:f0:66:db:f9:9d:6a:5b:6e:cf:92:dd:
07:f6:04:c3:69:af:1d:82:8b:22:c6:18:3e:41:88:
36:47:ed:ed:7e:86:d2:d3:5a:96:ce:0c:b1:6b:41:
3b:ef:23:13:76:af:81:61:61:2b:c7:7c:dd:1c:90:
b6:af:1b:7b:cc:e6:8a:0f:79:59:47:55:6f:7e:e4:
fd:ce:4f:e1:4d:c3:ef:51:ae:32:69:72:28:f3:09:
cd:36:3f:3d:58:1e:b8:0c:48:62:7c:f8:4d:88:55:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AE:3C:87:26:EE:44:D0:8C:CF:88:16:21:68:EC:6E:82:8D:93:B1
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f3:f4:93:32:f3:97:d1:b0:df:a8:50:14:59:1d:40:fb:56:
a6:c8:df:3b:3f:8d:f6:08:56:cd:82:84:e3:45:09:14:46:50:
df:b3:bf:1a:2b:41:b1:ed:16:c5:09:8d:10:34:6a:9b:67:ab:
38:64:61:77:a9:5a:d0:f3:87:6c:e3:93:bc:a9:a2:7c:1f:a8:
f7:03:31:7c:fb:8b:d1:8c:45:cf:a9:47:a0:51:9d:ad:4c:c1:
33:23:c2:41:ca:90:ea:21:da:1a:88:2e:e7:2d:95:00:ab:cb:
d9:54:a8:c8:95:4b:f9:90:9a:e3:a8:0e:4d:f7:f1:de:91:0d:
e3:f9:c6:b1:3f:12:04:78:50:e0:2a:a6:b8:9f:12:de:e3:22:
0c:36:08:c6:e0:34:04:3d:eb:23:fa:e7:5b:84:69:73:4b:62:
7b:c5:5a:20:66:89:72:e6:6f:b6:eb:87:94:d2:43:d3:59:d1:
67:09:c1:12:1e:2f:24:67:23:fa:7b:1e:7e:d6:6f:37:7d:94:
03:b1:b3:c1:40:94:85:73:8b:77:c9:fa:e5:af:c1:b6:2f:63:
9a:b1:c6:24:50:b8:38:d2:24:39:de:91:a4:7c:72:81:98:47:
29:63:d0:48:30:55:e3:94:d5:21:1c:1f:0d:1a:78:2d:56:c0:
d3:ea:ce:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:55:41 2026 by rpki-client