Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: zHoewwHnI0AvIWUo2nxm9XoSSx1fw7JpbBGGnGvd8x4=
Subject key identifier: 29:52:6D:73:90:A7:91:32:9A:14:B0:4C:3A:6D:3F:A1:E8:83:2D:6C
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 019D999937F10A3786EA35F10624A953061D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 04:00:48 +0000
Manifest this update: Fri 17 Apr 2026 04:00:48 +0000
Manifest next update: Sat 18 Apr 2026 04:00:48 +0000
Files and hashes: 1: K4rNlv6gYUKRgIqav4ptqCTSNGg.roa (hash: peGnClYWPqnMOOfi13oSusAgZ5+U+k8ztyI3Zgy/aPo=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: j0VH1r6l7c2KV5X3th/tC1LQt02HesU0fjdrOb1kehE=)
3: zposQW8-Ml33uc3ENu1a83hxjEI.roa (hash: aFqmx16M5gCNIMqJZ5eqfmDRHZVtOgPSXQjK2JfuQ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:37:f1:0a:37:86:ea:35:f1:06:24:a9:53:06:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Apr 17 04:00:48 2026 GMT
Not After : Apr 18 04:00:48 2026 GMT
Subject: CN=29526d7390a791329a14b04c3a6d3fa1e8832d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:0f:31:3b:79:92:f9:6f:7f:ca:86:f4:a0:
66:33:ab:a8:db:7d:23:f8:f0:51:a0:e2:a2:a9:23:
d4:a5:ba:20:45:ad:9a:da:a0:2c:31:27:52:36:71:
c5:7b:bf:82:6d:20:c2:cf:1e:2f:3f:68:50:84:5f:
9d:c5:8c:a1:94:42:9b:d5:68:48:ea:e4:0d:92:e3:
6c:8d:fb:30:a8:6b:6a:78:a5:5a:06:21:a1:6c:f0:
b5:aa:84:4b:fc:40:13:07:d6:6f:1a:1f:bf:cf:a0:
a8:c9:de:d5:8d:93:7f:a3:fd:b3:91:4d:c2:df:29:
f2:3f:47:ff:ae:bf:fd:08:76:c9:c7:de:8e:ea:12:
fd:0a:16:61:4a:c7:e0:bf:81:4c:84:0b:fe:dd:1e:
a2:53:31:cd:ed:e4:7e:a2:6a:5e:83:08:08:8d:5d:
6e:34:c8:0c:dd:be:68:e0:e7:3e:52:77:5a:00:b2:
23:ba:5a:ca:49:a3:ff:82:c5:ea:d4:c5:fa:a2:6f:
cc:1e:70:6c:1e:cc:f3:57:ac:95:56:71:11:3f:4b:
eb:02:4a:d2:2d:24:9b:64:82:8c:fa:4d:9f:37:a7:
f8:b3:cb:a2:57:bc:aa:cd:ea:52:0e:03:89:29:5f:
f2:2d:a1:69:69:63:bd:b3:0c:d0:96:38:3e:78:67:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:52:6D:73:90:A7:91:32:9A:14:B0:4C:3A:6D:3F:A1:E8:83:2D:6C
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fa:f1:9b:87:32:ce:6a:50:5a:01:0c:25:8d:72:84:b9:de:
4d:65:19:52:33:90:ed:44:e2:32:19:b0:68:48:ff:07:fd:60:
7b:c5:45:15:c4:6d:58:fb:41:cc:77:41:82:a7:59:ce:78:bb:
ac:ff:79:b5:05:c8:28:a5:f7:4e:63:05:dd:e3:7a:6f:3e:17:
c2:37:8a:f0:4d:53:ae:fd:ea:2d:f4:72:e4:ab:97:b2:e0:67:
c2:8a:c8:d4:2b:02:c0:c8:f3:15:ba:68:11:3f:35:d5:47:ac:
0e:57:1a:80:87:bd:a8:25:0c:3b:1a:12:19:77:94:c7:7f:34:
e2:f4:e0:a5:c1:70:fa:49:8c:ae:49:c2:e7:4c:a1:a9:aa:e3:
ab:7a:41:0b:ed:2b:4b:b4:ce:ef:4b:61:a4:5e:c9:27:14:17:
9c:3f:13:ac:6f:0e:ba:20:6f:3a:f2:1e:1b:9c:fe:8e:cd:bd:
59:c5:91:29:8d:6d:b1:28:3a:fc:55:fd:22:9c:fd:d2:45:36:
7c:17:b4:80:c0:a3:a6:60:50:57:77:1c:4e:ef:fb:4d:bc:42:
d7:4e:a8:9e:c3:18:c3:92:41:53:b7:80:47:c4:96:4b:a5:d2:
2f:87:4a:41:8e:84:90:86:a2:f8:9e:66:49:c4:38:37:07:60:
37:5e:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:13 2026 by rpki-client