Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
File: g4dr-7WujP4Ra7X18oZKEWITqk8.mft (raw, json)
Hash identifier: L4Tqn0LWwVZ3cn+Lhl5vVBH44z3HK5wEruUpxqt6NCc=
Subject key identifier: 8F:84:7C:0A:54:BA:2D:91:7C:03:A8:89:19:57:01:C0:98:B1:8B:FA
Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
Certificate issuer: /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Certificate serial: 019D9962EBDC2D93321AB3453B6E28013D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:01:30 +0000
Manifest this update: Fri 17 Apr 2026 03:01:30 +0000
Manifest next update: Sat 18 Apr 2026 03:01:30 +0000
Files and hashes: 1: 5z8EHLNlOMTaqhnq-7mzsrklHBA.roa (hash: 2JlTQ4KJ6TRtRR53AGoqYj2XNX1lPxwhYUuY7T8Bgtk=)
2: g4dr-7WujP4Ra7X18oZKEWITqk8.crl (hash: MCmrRqsgbDfSLHu+ZO/3QVCThW8pLk5SfKU1Klq84NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:eb:dc:2d:93:32:1a:b3:45:3b:6e:28:01:3d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Validity
Not Before: Apr 17 03:01:30 2026 GMT
Not After : Apr 18 03:01:30 2026 GMT
Subject: CN=8f847c0a54ba2d917c03a889195701c098b18bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:86:48:8e:4c:bb:86:0d:e9:48:5b:b1:82:
d1:05:1a:bb:4c:40:aa:76:96:c6:d2:d2:68:bc:d6:
97:d6:ac:a1:3e:18:6a:fa:cd:cd:0e:39:b2:3a:4e:
cb:49:32:2a:bb:69:05:fe:f5:62:8a:cc:2f:ba:db:
b9:71:fd:e2:4a:1b:ae:72:1b:99:50:bb:3b:3c:6f:
af:a2:f4:a2:5f:b7:32:ac:0d:9f:46:02:59:8b:d9:
3a:3a:1e:c4:9e:39:7a:bc:52:cb:cb:0d:80:a1:a5:
d7:dc:09:a7:c9:c3:99:2b:46:12:d1:d8:35:4b:40:
dc:4d:e6:84:9a:44:97:25:53:85:cd:c8:ed:27:fb:
a3:01:12:68:54:44:c6:36:1f:2a:d5:4e:c5:3b:33:
de:88:86:fc:a5:f3:5a:66:2e:ee:b4:ae:35:ee:09:
cf:0b:57:a6:1e:3a:95:00:08:3c:74:51:3e:d0:29:
1e:b6:bf:30:7e:1a:76:3b:fe:e8:11:94:99:70:d2:
92:44:f7:25:14:48:d5:0f:cb:f2:1f:33:5f:4c:7e:
82:03:bc:19:05:f2:03:0e:cc:57:ab:06:ab:80:08:
ad:cd:7c:e0:ab:e3:ba:52:7f:a7:4b:75:2d:3e:e3:
ec:73:fa:d8:39:97:76:40:f2:6d:38:50:79:e8:21:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:84:7C:0A:54:BA:2D:91:7C:03:A8:89:19:57:01:C0:98:B1:8B:FA
X509v3 Authority Key Identifier:
keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:46:73:1c:4b:31:54:a7:b0:45:44:24:3e:e9:b8:61:da:57:
b2:8c:0e:88:f8:ba:b3:7d:bc:fd:42:0d:7e:a9:43:1d:07:bc:
a6:cd:98:5b:d3:21:8e:3f:25:95:b5:11:35:95:1e:06:66:75:
55:cb:e6:33:89:64:b2:d0:a1:3f:c3:92:e8:a8:05:2c:55:95:
60:93:49:26:35:a8:26:8e:3a:79:f0:cf:98:4a:d4:24:0f:3a:
fa:09:04:53:51:ea:bb:30:2c:b1:7c:dd:d4:18:07:33:67:16:
6e:4e:39:13:c6:aa:2a:5d:ea:67:9b:58:d3:95:4a:f8:65:bb:
f0:5b:cb:e8:33:61:33:33:de:c9:80:eb:9e:be:77:4e:f6:8b:
7f:cc:6d:5a:30:2b:ef:68:82:fb:fe:d9:d8:e4:db:3b:a4:9d:
67:2d:92:fc:64:cd:ff:75:5a:88:85:5f:11:06:07:85:54:49:
01:ff:5e:2b:ab:31:10:91:e4:f4:a7:76:a3:fd:70:77:7a:81:
8a:6c:23:5a:9b:0e:23:c2:84:ff:12:19:58:09:7c:c9:0d:c3:
fb:e3:65:c8:0a:c8:a1:13:4f:66:4a:3a:09:ea:5a:d5:f6:b3:
9e:35:72:1e:74:f0:7a:d8:ac:9f:52:4b:1a:8f:3a:96:41:8e:
64:8d:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:17 2026 by rpki-client