Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
File: GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft (raw, json)
Hash identifier: bTulUEA8rv4cB/sTGDZG9ebFHXEV4NLMycdcisGRde8=
Subject key identifier: 5F:E8:DF:64:68:35:5F:0D:D3:4E:3A:66:96:82:98:DD:62:3F:DE:92
Authority key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
Certificate issuer: /CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Certificate serial: 019D9AAC4B15133712312E85CCFF1B2A6E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
Manifest number: 0C22
Signing time: Fri 17 Apr 2026 09:01:15 +0000
Manifest this update: Fri 17 Apr 2026 09:01:15 +0000
Manifest next update: Sat 18 Apr 2026 09:01:15 +0000
Files and hashes: 1: GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl (hash: VJBVIgXJffDYXX2E9SrqIiMYq6I1BkyICyl0zvrmxEU=)
2: xyNMPOjdSXVrOkDnqACX6hpPikY.roa (hash: GWpndT2t/1Gpwi+SLRm0phgKLCkd6P4JAMgA+uJmCIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:4b:15:13:37:12:31:2e:85:cc:ff:1b:2a:6e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Validity
Not Before: Apr 17 09:01:15 2026 GMT
Not After : Apr 18 09:01:15 2026 GMT
Subject: CN=5fe8df6468355f0dd34e3a66968298dd623fde92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:42:67:29:31:61:7d:db:b1:ca:a6:84:c9:
4a:35:ca:96:ef:33:71:83:d5:5d:96:61:c6:f8:a9:
32:e6:63:f5:a4:a8:c6:5e:ec:84:0f:5e:3c:c6:c9:
ec:ff:f3:7f:f4:4c:03:76:b3:c5:5d:41:8f:3c:60:
03:70:70:84:db:ca:1f:f6:17:46:18:61:6e:4c:e8:
14:a8:55:13:2e:35:39:4f:a3:79:6a:d1:d7:37:b9:
e7:c0:ad:f2:64:cc:f1:55:3b:03:9c:61:91:a8:b3:
da:03:a6:89:c6:7e:2d:9e:2d:ef:bd:9f:4b:96:60:
9a:e6:c8:b9:0b:e3:22:4b:5d:0c:aa:bb:af:3e:dc:
ad:af:9e:81:88:2c:36:4f:30:9e:17:6e:26:10:08:
46:a0:39:7c:03:c7:6d:94:eb:91:8e:09:c7:1d:3c:
d3:7d:33:5b:fa:77:79:24:4f:8c:4c:da:63:81:51:
aa:bc:4f:af:ad:aa:e7:f7:fd:de:62:c5:30:f6:98:
3a:75:f2:00:14:fc:e7:da:1d:52:a3:ce:58:97:88:
58:76:8f:4f:be:bb:1f:ac:35:9c:1d:1e:1d:1e:51:
ce:07:6e:26:70:df:df:68:bc:b6:7d:4d:07:bf:e9:
75:d2:0b:f4:53:7b:2d:92:ec:f2:09:9a:84:f2:8d:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E8:DF:64:68:35:5F:0D:D3:4E:3A:66:96:82:98:DD:62:3F:DE:92
X509v3 Authority Key Identifier:
keyid:1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e8:9e:f2:40:6d:ed:66:a1:12:85:00:3d:9f:ca:13:01:fa:
d7:f9:4b:83:1b:ee:44:24:71:6c:b9:cc:a7:0b:0f:8a:9d:b2:
82:67:c8:d0:e7:2f:f1:67:7d:d1:56:50:f9:13:29:fd:6d:9f:
ec:cd:bd:70:7e:19:28:5d:d4:e8:6a:68:6f:7e:36:0d:32:7d:
31:90:bb:88:6c:cb:48:81:b3:e1:2d:1b:d8:c3:24:40:9c:ed:
e2:43:80:b0:fb:3d:41:5a:10:63:36:ed:ee:20:17:e7:ff:ec:
b3:37:d0:be:e9:07:39:e6:0a:92:21:ae:17:ed:4f:41:2e:05:
f7:a3:d6:90:98:2e:ab:f2:ed:cb:bd:c8:58:1a:28:68:ab:91:
9d:6a:54:aa:67:89:74:74:78:92:8a:0c:51:c2:69:fe:27:50:
7a:29:73:4d:84:d4:4c:45:7d:83:73:18:67:e9:45:79:b9:2e:
a3:36:f5:06:18:02:5f:30:f5:00:0c:61:8d:71:91:3b:5c:7d:
c3:42:6e:de:d8:3b:9b:6a:5c:45:a1:37:77:a2:da:25:96:bc:
da:a9:b2:3d:23:40:6a:3f:55:24:35:61:e9:88:72:d0:a0:1c:
d2:9b:45:80:50:73:1b:b5:f3:89:70:16:8c:d0:5f:bd:c2:17:
0c:46:7f:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arEsVEzcSMS6FzP8bKm5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYzI0NTZjNzBmOGFhYTUzYmQ4OTQwZmUyM2YxM2NmYTI3
MGU3NDgwHhcNMjYwNDE3MDkwMTE1WhcNMjYwNDE4MDkwMTE1WjAzMTEwLwYDVQQD
Eyg1ZmU4ZGY2NDY4MzU1ZjBkZDM0ZTNhNjY5NjgyOThkZDYyM2ZkZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBFCZykxYX3bscqmhMlKNcqW7zNx
g9VdlmHG+Kky5mP1pKjGXuyED148xsns//N/9EwDdrPFXUGPPGADcHCE28of9hdG
GGFuTOgUqFUTLjU5T6N5atHXN7nnwK3yZMzxVTsDnGGRqLPaA6aJxn4tni3vvZ9L
lmCa5si5C+MiS10MqruvPtytr56BiCw2TzCeF24mEAhGoDl8A8dtlOuRjgnHHTzT
fTNb+nd5JE+MTNpjgVGqvE+vrarn9/3eYsUw9pg6dfIAFPzn2h1So85Yl4hYdo9P
vrsfrDWcHR4dHlHOB24mcN/faLy2fU0Hv+l10gv0U3stkuzyCZqE8o3nrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/o32RoNV8N0046ZpaCmN1iP96SMB8GA1UdIwQY
MBaAFBrCRWxw+KqlO9iUD+I/E8+icOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3Yzct
NWExZDU1ODQzNzhkLzEvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3YzctNWExZDU1ODQzNzhk
LzEvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeie8kBt
7WahEoUAPZ/KEwH61/lLgxvuRCRxbLnMpwsPip2ygmfI0Ocv8Wd90VZQ+RMp/W2f
7M29cH4ZKF3U6Gpob342DTJ9MZC7iGzLSIGz4S0b2MMkQJzt4kOAsPs9QVoQYzbt
7iAX5//sszfQvukHOeYKkiGuF+1PQS4F96PWkJguq/Lty73IWBooaKuRnWpUqmeJ
dHR4kooMUcJp/idQeilzTYTUTEV9g3MYZ+lFebkuozb1BhgCXzD1AAxhjXGRO1x9
w0Ju3tg7m2pcRaE3d6LaJZa82qmyPSNAaj9VJDVh6Yhy0KAc0ptFgFBzG7XziXAW
jNBfvcIXDEZ/Qg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:11 2026 by rpki-client