Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: GoYaqfaoFo8Ft+QYB4DuJSTFxBBQpc2+NzQgNSWTGsg=
Subject key identifier: 19:EA:F2:EC:75:E1:AF:FF:85:C7:D8:31:E1:FF:7B:8C:0D:40:2D:7E
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 019D9C2CD3AA1FBDF6B37402570A11F67D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 1074
Signing time: Fri 17 Apr 2026 16:01:16 +0000
Manifest this update: Fri 17 Apr 2026 16:01:16 +0000
Manifest next update: Sat 18 Apr 2026 16:01:16 +0000
Files and hashes: 1: 9PZjCn76gwRRUpq9MvbclVXkdOU.roa (hash: CaqNlJNQ1Ni2aWKqDPfoQcAYDuSQhepNqZ+uo297E2U=)
2: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: 3ESE3vUsq2o3XQRUK+avRKJkmNyI1Z/LysiUGO7zUUA=)
3: ur76ehndzl2-pGTHmrbh1qcAWBI.roa (hash: Sb+oNrAUwZsJERFHDlGdgS7sblzKLRz12cNiy1csEgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:d3:aa:1f:bd:f6:b3:74:02:57:0a:11:f6:7d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Apr 17 16:01:16 2026 GMT
Not After : Apr 18 16:01:16 2026 GMT
Subject: CN=19eaf2ec75e1afff85c7d831e1ff7b8c0d402d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ab:12:34:2d:b3:3f:e1:2e:93:f4:22:80:2f:
1f:f4:dc:3d:f1:e4:00:1c:e1:4c:e9:9b:cc:01:3b:
a1:1f:08:0a:d3:9e:bb:22:41:08:e9:74:9c:c2:b5:
dc:9b:ae:68:95:61:fd:89:51:39:dd:78:80:3c:20:
ba:da:56:cc:f9:d1:a9:f0:fa:e1:52:82:fe:42:ea:
93:30:f5:39:5d:b3:e1:0a:80:67:fc:51:7d:8b:21:
a9:47:d4:31:2e:58:14:21:92:26:1c:3e:ea:09:c8:
f8:65:21:c1:ea:cc:4e:d0:f8:b8:54:2a:8f:d7:4d:
94:fc:3f:ac:0a:8f:88:1c:8b:eb:fa:f7:c7:cf:d3:
3a:11:66:b5:9d:a6:bd:b8:f5:66:09:34:bb:dd:d6:
c8:1b:35:24:d3:70:3d:bc:73:35:a7:98:7f:cc:2a:
64:8f:12:aa:34:19:7e:83:71:ed:b2:d8:fa:60:90:
9b:4d:5a:af:c9:29:75:1b:9c:f7:73:d4:2c:fa:40:
6f:16:d7:13:11:37:1e:95:f4:a4:d5:89:69:2d:e1:
f8:1f:0a:6c:03:0a:10:ab:0d:6e:6b:2c:2e:02:a6:
aa:e0:fd:8e:ba:49:38:b8:64:40:90:4b:b1:e7:9e:
0b:d6:72:09:d2:11:46:17:2e:2d:3a:15:03:84:7d:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EA:F2:EC:75:E1:AF:FF:85:C7:D8:31:E1:FF:7B:8C:0D:40:2D:7E
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c0:8e:c7:3c:4b:1f:31:1a:05:48:cf:27:b7:cf:da:25:94:
79:87:5c:ec:21:b4:93:2d:83:a1:e1:d7:28:eb:46:32:54:10:
5e:9c:f5:f5:2e:da:ce:36:24:14:02:51:f9:ac:5a:c2:32:86:
a5:22:00:cc:61:22:09:e6:e2:25:bb:da:19:b9:e1:7f:e5:26:
86:53:10:fb:14:e8:f4:1f:e4:47:eb:eb:02:d7:b4:75:91:89:
7f:ec:d2:a2:28:e2:1b:e2:1d:b0:3e:5b:3c:3f:c4:82:55:d0:
d3:15:c9:6d:18:63:03:39:4c:29:f6:34:cd:d7:b8:87:99:44:
84:b6:f8:6a:2a:8f:d4:e4:39:d0:60:12:8c:d4:1b:d4:1d:c5:
dd:b7:6e:77:89:03:09:ba:f4:db:4a:b1:60:c7:a0:df:82:d1:
f6:e1:a6:81:7b:3b:a3:77:42:d5:f4:07:63:8a:6c:69:5a:52:
3a:07:c1:ff:60:2f:35:48:ae:b5:60:31:8d:c1:b5:cb:0b:35:
7b:3c:fc:b1:6a:bd:37:8b:ac:c6:e8:84:6e:d2:f0:c8:37:98:
9c:7e:2c:6a:25:43:30:de:d3:36:5d:1b:7a:23:01:7c:19:21:
26:1d:87:69:ae:30:c6:c7:65:74:67:ee:a5:49:bb:a3:e3:81:
53:ed:8e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:26 2026 by rpki-client