Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier: my0T7mIWgz5u4Ll6ph2PE8yu6vhIEub4snxZwpoCAh8=
Subject key identifier: B5:D6:7B:14:45:8F:B3:DC:9C:DD:2B:A6:FE:34:F4:E9:2F:6A:98:E5
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019D9AE2CB76699BB35D91D9108008AB33B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number: 111C
Signing time: Fri 17 Apr 2026 10:00:47 +0000
Manifest this update: Fri 17 Apr 2026 10:00:47 +0000
Manifest next update: Sat 18 Apr 2026 10:00:47 +0000
Files and hashes: 1: 8Ql9UfBMlhf-9sEO0J-6rh-4uGE.roa (hash: cCjd/UNv//U8Wz2A7iG4uR2Nv+n8ykigX0NiqbbBYBw=)
2: Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa (hash: 1lD5R4cJuPj/nZ60zfBHs9WvrZ5YRD+ZAX1KkvheAUY=)
3: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: FWnRewMOEns2q2w5oiMxgtjcvtKAknkvvT0ZrRaQJ54=)
4: lnQm--gY8ePlCI161SZETEH7iss.roa (hash: vxrBUtHuyLV0LieoKDVoBuqAYfEuInf7kfLphmP99fg=)
5: mb8r9vp3wM6oJLJdPmkNlWrgKtE.roa (hash: Xrfg/Aqkw9N5mVtt/uYm1yP5BsOe0X4pZfMOzaQDicg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:cb:76:69:9b:b3:5d:91:d9:10:80:08:ab:33:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Apr 17 10:00:47 2026 GMT
Not After : Apr 18 10:00:47 2026 GMT
Subject: CN=b5d67b14458fb3dc9cdd2ba6fe34f4e92f6a98e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:b1:c7:c3:38:a0:d0:a0:43:d2:29:bf:ba:
91:60:ba:ae:44:f6:54:0f:a4:27:d3:f4:4c:8a:29:
8d:61:f4:16:00:da:2c:fb:af:45:2b:66:09:28:b7:
f6:d4:88:e3:60:5b:21:22:45:fa:4f:70:81:64:b5:
7a:5b:f9:82:75:a9:f4:ad:a6:30:67:0b:74:69:0c:
a0:7c:a6:16:9b:fa:1b:15:a4:49:cc:a9:14:56:70:
54:42:b5:72:15:77:ab:60:c3:1a:14:c4:8a:b9:bd:
58:1e:6e:78:4a:47:76:92:db:7b:72:57:8f:4f:b2:
b2:82:8e:eb:7a:19:c0:36:48:2f:49:9a:a9:a8:38:
28:5f:27:08:75:d4:a0:cb:6e:7b:65:1a:26:61:f9:
d6:25:3f:cf:09:f4:22:46:9e:d0:ab:ac:c0:f7:80:
c5:c6:ed:a1:80:17:e5:d9:14:f7:ac:53:80:96:3e:
ad:b1:67:0f:0e:3f:8a:73:25:fd:ff:66:81:1b:fd:
51:e9:6b:68:e7:2c:d4:d2:d4:52:2d:e5:16:bb:c9:
2a:95:40:d9:8e:5a:58:ca:38:ab:67:26:cb:fd:a2:
49:47:16:3b:45:6b:a9:24:ba:08:f3:7e:01:9e:dd:
76:f5:89:06:c1:ba:b4:88:f9:f3:ff:cf:91:30:e0:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D6:7B:14:45:8F:B3:DC:9C:DD:2B:A6:FE:34:F4:E9:2F:6A:98:E5
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c7:25:84:09:66:3d:81:6a:c9:f8:c6:43:8d:96:93:c1:f7:
dc:9e:29:20:56:22:1b:af:58:45:cb:f3:93:2c:c8:a7:58:78:
2f:2b:17:fd:13:ea:0c:66:1a:48:8d:b1:14:97:56:6d:0a:f3:
16:38:15:12:57:21:fc:6c:8e:a9:55:ea:85:e3:a3:df:5a:b4:
85:8a:d5:4c:0d:91:39:d6:62:f5:91:aa:20:43:04:5a:1d:31:
7c:05:00:14:d2:cd:d4:12:22:94:89:20:6d:bf:6a:75:dd:3e:
26:51:9e:a1:9a:92:b1:20:3f:26:ee:52:73:e9:af:48:99:b0:
f5:f0:e7:81:80:9f:b2:2c:6b:19:df:7e:5a:f0:2b:af:29:34:
63:7e:84:6c:02:fa:37:02:6d:f6:8c:bf:9e:10:3a:47:6d:37:
fc:1b:54:44:5a:52:c5:aa:91:1d:de:fe:78:62:49:a1:87:65:
a7:7f:b1:e3:62:44:0f:e6:65:50:34:f5:1a:2a:c0:b6:04:68:
37:c7:b9:da:ab:7b:47:90:ce:fa:74:44:e5:47:d2:fd:c8:ab:
1f:29:61:7b:9e:f1:fb:16:aa:fd:4f:e3:41:27:13:59:2d:25:
55:5a:18:b6:b3:0d:ca:0d:92:39:6a:67:05:ae:47:12:b8:09:
7d:43:15:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:38:41 2026 by rpki-client