Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: YXbUHsaeSnshiypb3Xzwo+zu264t+NAxW9PmOTBru8s=
Subject key identifier: CF:E6:FC:DC:C6:E3:94:87:F6:6D:E1:2F:CE:BD:AA:3B:92:A8:6F:4C
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 019DA37811BD26F9156F54CD74CC95D1D219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 02:00:47 +0000
Manifest this update: Sun 19 Apr 2026 02:00:47 +0000
Manifest next update: Mon 20 Apr 2026 02:00:47 +0000
Files and hashes: 1: 4ShXPhWP4Qk_JTUR7nsENpLjDoc.asa (hash: HXRCdfUgdsuwOo68NwP3+PURL7JrnmOHum1V4B+oxJQ=)
2: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: 1DRVUQpo6REvayB3vfXxVNnsrhegW3OP03qDf8e/Au8=)
3: z9el3Pn-CpyrzO9Vpc8qFS83Pew.roa (hash: TxiEHGj0MKgQ69SIev2O5ouEAGP38IAOU0+l3e8LjrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:11:bd:26:f9:15:6f:54:cd:74:cc:95:d1:d2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Apr 19 02:00:47 2026 GMT
Not After : Apr 20 02:00:47 2026 GMT
Subject: CN=cfe6fcdcc6e39487f66de12fcebdaa3b92a86f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cd:9e:45:91:5b:fd:37:d4:fa:51:1b:f1:fc:
72:0a:b3:f1:46:d2:e7:dd:f2:5e:d5:ef:e5:9e:47:
36:d3:6d:a6:e6:65:97:b8:32:41:89:04:8f:ff:99:
a9:26:82:b8:3c:71:a4:04:ad:16:13:e6:08:58:72:
d2:72:4a:16:11:fe:72:5b:a3:67:78:d6:80:ad:8f:
43:da:50:bc:a9:3c:2c:35:81:73:d9:b9:f3:11:f6:
c7:be:72:e7:30:e0:bb:71:b8:17:ea:62:b1:85:f3:
c4:8e:f8:2e:5b:b3:48:32:cd:1a:04:81:27:4b:09:
aa:27:04:33:03:41:8d:d2:56:18:87:24:81:14:a5:
63:94:5d:05:40:a1:e7:6c:76:5f:4e:04:ce:9c:60:
b8:f7:1e:b2:46:e1:eb:e1:17:61:6a:42:3b:0b:e6:
c9:4c:f8:04:24:f9:b2:3f:d6:0c:16:87:0f:36:3c:
d9:e9:df:5b:b9:a2:66:69:8a:99:51:c9:0a:f9:3c:
ab:73:50:c9:8d:53:1a:7d:66:8e:14:ed:26:4a:bd:
95:4c:46:49:db:fa:b7:4a:6d:a9:2a:a6:2b:d6:44:
b4:91:06:44:0a:7a:88:23:78:dd:01:5c:75:7e:b0:
63:8f:95:2b:d8:b4:e8:d2:9e:d6:6d:ba:b2:4f:c6:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E6:FC:DC:C6:E3:94:87:F6:6D:E1:2F:CE:BD:AA:3B:92:A8:6F:4C
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:46:ee:ee:b0:aa:e2:5f:62:9c:ff:cc:41:f2:80:13:05:94:
e5:01:14:b5:2b:b9:4b:b2:6a:33:4d:7e:67:12:ff:57:be:16:
ac:0a:78:15:5b:a4:a0:84:26:e5:1d:fa:00:d9:f5:cf:3c:2e:
a5:21:d2:5a:d1:92:d2:b1:2d:81:54:3f:e9:d5:60:76:70:d8:
77:1e:c3:39:1c:92:82:7e:b4:02:ed:b2:5b:10:bf:11:bb:95:
19:6d:20:bb:0c:eb:fb:fa:a9:72:c5:50:6f:25:51:41:3c:f6:
a9:2a:25:2e:b2:6a:e2:cd:2d:f4:e7:60:4f:d1:ed:f3:0e:6e:
44:99:e9:dd:ea:f6:0a:14:0d:60:9b:dc:50:38:b3:14:62:ca:
0e:55:ec:5a:7f:4e:47:83:d0:cb:71:03:3b:15:44:82:25:48:
07:33:a5:8a:3f:60:9a:0f:88:6a:6a:d2:b1:a0:f9:4c:3b:47:
eb:e5:9a:6b:35:94:41:e2:eb:5f:f0:8c:db:bb:b3:4d:14:95:
55:c0:84:3c:42:03:0d:38:aa:1d:bc:59:58:f9:4e:e1:73:89:
5a:23:d8:b5:c2:12:64:e7:28:88:4c:fa:95:8b:2f:17:1f:0e:
3d:54:6d:c3:4a:3c:84:5c:46:49:25:46:4b:8f:55:65:34:bb:
e8:d0:fd:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeBG9JvkVb1TNdMyV0dIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMmY1YTZjMGI5NTY0N2YwNzAzNTBlNjUyNGUxMjIwZmJh
NDdmYTMwHhcNMjYwNDE5MDIwMDQ3WhcNMjYwNDIwMDIwMDQ3WjAzMTEwLwYDVQQD
EyhjZmU2ZmNkY2M2ZTM5NDg3ZjY2ZGUxMmZjZWJkYWEzYjkyYTg2ZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8c2eRZFb/TfU+lEb8fxyCrPxRtLn
3fJe1e/lnkc2022m5mWXuDJBiQSP/5mpJoK4PHGkBK0WE+YIWHLSckoWEf5yW6Nn
eNaArY9D2lC8qTwsNYFz2bnzEfbHvnLnMOC7cbgX6mKxhfPEjvguW7NIMs0aBIEn
SwmqJwQzA0GN0lYYhySBFKVjlF0FQKHnbHZfTgTOnGC49x6yRuHr4RdhakI7C+bJ
TPgEJPmyP9YMFocPNjzZ6d9buaJmaYqZUckK+Tyrc1DJjVMafWaOFO0mSr2VTEZJ
2/q3Sm2pKqYr1kS0kQZECnqII3jdAVx1frBjj5Ur2LTo0p7WbbqyT8ZffQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/m/NzG45SH9m3hL869qjuSqG9MMB8GA1UdIwQY
MBaAFIIvWmwLlWR/BwNQ5lJOEiD7pH+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMt
NWQwZTA5YTAyMDRmLzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMtNWQwZTA5YTAyMDRm
LzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkbu7rCq
4l9inP/MQfKAEwWU5QEUtSu5S7JqM01+ZxL/V74WrAp4FVukoIQm5R36ANn1zzwu
pSHSWtGS0rEtgVQ/6dVgdnDYdx7DORySgn60Au2yWxC/EbuVGW0guwzr+/qpcsVQ
byVRQTz2qSolLrJq4s0t9OdgT9Ht8w5uRJnp3er2ChQNYJvcUDizFGLKDlXsWn9O
R4PQy3EDOxVEgiVIBzOlij9gmg+IamrSsaD5TDtH6+WaazWUQeLrX/CM27uzTRSV
VcCEPEIDDTiqHbxZWPlO4XOJWiPYtcISZOcoiEz6lYsvFx8OPVRtw0o8hFxGSSVG
S49VZTS76ND9ww==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:07 2026 by rpki-client