Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier: JdfasdDRpjrv6PQZfQ98QTEHxBU3g/L74PR9r+nLiwI=
Subject key identifier: BC:61:E0:71:EC:95:C2:19:E1:81:34:45:75:5C:D5:B2:D7:E3:36:DB
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial: 019DA3E68A300EA477E57B5A3E55B240E8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 04:01:27 +0000
Manifest this update: Sun 19 Apr 2026 04:01:27 +0000
Manifest next update: Mon 20 Apr 2026 04:01:27 +0000
Files and hashes: 1: E2QGn3eEc4YgUK3AVvYhsuz-J_8.roa (hash: wMdtrfklBtkfMKlhkTQEZGLh+FduG0xroz4RyYIx+Jg=)
2: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: xsy4aHQtKm4ctcHGtAimgLzDVkN9kgYFPt8HjHU1m20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:8a:30:0e:a4:77:e5:7b:5a:3e:55:b2:40:e8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
Validity
Not Before: Apr 19 04:01:27 2026 GMT
Not After : Apr 20 04:01:27 2026 GMT
Subject: CN=bc61e071ec95c219e1813445755cd5b2d7e336db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:e5:f3:52:dc:9b:02:61:77:9e:6c:73:66:
f7:18:24:0f:8d:a2:58:45:cf:ef:07:f9:8b:53:5d:
a8:da:de:e5:7e:77:c6:97:1e:53:9c:39:f9:73:29:
02:4e:35:23:ed:51:f8:67:c7:08:0b:01:60:29:98:
84:1c:5e:ba:88:1c:d9:e4:18:f8:bb:25:f6:ad:a1:
9c:0b:e3:58:36:99:4e:f8:6c:9e:ba:26:52:ce:fa:
d9:ae:f1:3d:0f:75:7e:2d:c8:e9:6d:82:49:30:97:
23:d7:ba:4e:d6:b8:10:a9:65:73:ac:aa:f0:2b:bf:
cf:81:62:44:88:8b:3d:87:e7:a4:b3:07:5e:0b:9c:
24:27:41:68:47:91:70:d9:ce:31:26:9f:22:26:2d:
c0:ae:56:66:2d:f4:5a:1f:08:f4:2b:62:86:70:18:
cd:5b:fb:4b:5d:e9:f2:4b:ce:99:8b:61:e4:21:af:
0e:97:84:62:9f:37:26:35:b0:b7:6d:c4:a3:60:f6:
cd:c1:c9:68:a9:42:d1:34:06:a0:79:df:67:b8:51:
cd:84:cf:35:2e:8d:45:ab:ee:0e:5b:d3:5d:47:66:
76:14:a9:b2:9f:a5:49:79:e5:11:7b:76:96:9e:ab:
3e:fd:d7:40:f7:10:54:b8:b5:c0:2b:e7:41:82:7c:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:61:E0:71:EC:95:C2:19:E1:81:34:45:75:5C:D5:B2:D7:E3:36:DB
X509v3 Authority Key Identifier:
keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:65:12:2b:60:49:f4:58:15:bc:a1:c3:76:f1:7b:04:6c:d1:
d6:1d:6a:a1:b4:88:44:35:7c:f7:5c:ce:02:a2:9d:8d:e2:79:
82:7b:01:75:d3:4f:61:fe:6f:75:01:46:4c:1b:c7:4d:00:bd:
71:65:91:a0:2a:ae:dd:17:0c:39:93:3c:62:dd:f1:18:a3:da:
bf:af:0c:ea:37:15:20:be:c7:3a:b8:e2:5b:92:7a:9b:28:69:
ff:1c:6e:80:06:61:57:dd:a9:cc:35:8e:15:37:0e:58:f5:9f:
ee:e1:74:f4:c0:ea:dd:4a:24:39:e4:44:b3:dd:26:cc:a3:cd:
43:a4:31:32:9c:ed:1e:5d:1e:d0:19:51:20:1a:6c:cb:88:98:
ad:e3:4c:1c:8d:e5:01:a0:ca:a4:95:ba:78:0b:87:3c:76:86:
85:1d:a0:7c:80:76:65:af:ee:1e:39:43:5a:fa:f4:b9:58:a3:
fd:24:91:ae:a2:9a:ad:62:1f:55:b7:77:1e:aa:10:e1:52:53:
76:73:a5:da:46:2c:d3:6d:06:97:c0:de:2e:e5:74:49:fd:52:
7b:0c:ac:80:37:56:d2:e8:fd:93:f3:30:4c:91:5d:e8:db:2f:
99:d1:e5:ec:e9:61:66:fc:8b:01:f7:b8:ba:0f:5a:c9:57:71:
9a:ab:a8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:27:45 2026 by rpki-client