Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
File: gmf7Sgtne4N3kHuC-x-4gQov7wg.mft (raw, json)
Hash identifier: gq1UlezyF0Qo+un3kuNhVuqwVC/l2xzbEvgz6tkmTJQ=
Subject key identifier: 91:7C:CE:30:82:FC:9C:28:02:79:56:55:72:B9:AB:96:74:0D:50:27
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial: 019D984FF8E29D576307303ED88B3D455A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
Manifest number: 18CF
Signing time: Thu 16 Apr 2026 22:01:10 +0000
Manifest this update: Thu 16 Apr 2026 22:01:10 +0000
Manifest next update: Fri 17 Apr 2026 22:01:10 +0000
Files and hashes: 1: BfT142IZrG6w9x_sdv9NlYOwnjk.roa (hash: nMyUMScF9ierHQNaWf4H2FAJS6EPcrZmAIOFL2K/38E=)
2: WbmA7_GX8lhYD5gwDfMty_B0UMU.roa (hash: pbu61dkoeJNOEFlPCcPVO/fOlKpt2IKFm6HwfwnwwJQ=)
3: gmf7Sgtne4N3kHuC-x-4gQov7wg.crl (hash: XyKeuoUTIcWWWWxxmxlDs8zSSCOUmvxP0YLLHL3NojU=)
4: hIyRTGN4bqnLKJCwc1F2Eg7MBmc.roa (hash: VGcdVOE9BIoWHNOMBje5zrVkxvWhg/+tqscfV1XcAU8=)
5: ltFa2izzbGOqtwBVA_TWfrJgXcI.roa (hash: OPV1MRSkrBUfBNL/wEtgSLV80hiGFh9joek6UVN6nV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:f8:e2:9d:57:63:07:30:3e:d8:8b:3d:45:5a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Validity
Not Before: Apr 16 22:01:10 2026 GMT
Not After : Apr 17 22:01:10 2026 GMT
Subject: CN=917cce3082fc9c280279565572b9ab96740d5027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d3:89:c8:32:d1:8a:f1:55:45:0c:92:32:49:
2a:04:25:74:18:cd:85:75:f3:1c:c0:24:48:83:58:
ac:89:46:4c:52:be:d8:78:c0:71:15:a9:e7:25:1b:
3b:de:55:65:c9:94:e2:52:44:7a:93:78:fa:b4:f3:
b4:ab:d6:42:2e:39:6c:34:92:e4:cf:3a:aa:64:c0:
c4:cd:2e:87:42:a0:e4:61:7d:18:d6:6a:09:0f:97:
21:d9:86:34:d8:83:1c:ba:e2:12:82:02:43:eb:3b:
04:99:48:d6:82:d6:a9:47:70:17:3f:a7:97:49:fd:
c4:4b:33:3a:f1:ef:79:e6:11:9b:c1:9f:6f:8d:76:
6e:0a:3f:f8:9a:11:72:4e:76:36:21:48:4b:dc:05:
b8:60:40:e2:26:05:60:8a:d0:f4:99:2b:28:93:3e:
05:43:70:0f:04:a7:26:f1:37:03:f7:0a:29:92:01:
37:9c:09:a5:b1:2c:70:3e:7a:09:17:2f:f8:59:ee:
cb:27:44:f6:b9:8b:da:47:27:77:dd:99:e7:21:6d:
e7:c8:2c:e0:15:00:fd:53:aa:99:8a:ca:cf:c9:b8:
bf:8a:bf:91:a2:67:ac:69:f5:48:b0:0d:71:2a:03:
1f:54:8a:17:f9:50:9c:33:32:28:26:90:e1:7d:e5:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7C:CE:30:82:FC:9C:28:02:79:56:55:72:B9:AB:96:74:0D:50:27
X509v3 Authority Key Identifier:
keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:32:45:4e:0e:2a:81:10:c7:a0:94:c3:1d:fd:18:80:cd:a1:
bd:69:96:f6:fc:0b:67:f0:b4:2d:8a:cd:2c:c1:8d:7c:17:03:
62:bd:e9:81:1c:72:d5:7f:b7:64:e3:a2:0e:54:5c:66:74:9a:
f7:0e:90:3c:03:c7:3d:68:09:5d:75:03:bf:d2:f0:70:0e:33:
38:8a:b8:0b:48:1f:0c:cf:c9:ba:2f:f0:0a:d7:98:2c:ff:a3:
9a:8e:9e:3c:84:cd:1f:c1:79:37:e7:f3:08:d4:0f:6c:1a:72:
e9:b6:1d:06:4d:e0:5a:49:3b:fc:eb:ad:bd:46:64:98:e0:e5:
7d:90:5a:f8:a8:3f:95:25:ba:22:ae:ab:6d:b5:c8:5d:8e:45:
62:79:d1:71:c6:69:36:be:8f:53:1d:8e:2e:6a:ce:b8:8a:56:
8f:f0:39:f6:35:ca:d8:e4:ce:9b:42:cf:1c:7f:e5:a9:63:cb:
be:27:a2:ae:21:fb:78:a0:1e:f6:68:93:9d:c7:9a:20:da:d3:
fd:ec:40:95:65:5c:6e:e2:07:26:00:84:03:a4:74:fa:7b:3c:
07:c3:f5:eb:d8:5d:98:c7:01:1b:b9:ba:6a:1d:1c:b6:9b:40:
0f:04:8d:76:98:1a:b4:fc:4f:a0:8e:ef:ef:79:c3:86:ba:43:
d3:6e:df:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:39 2026 by rpki-client