Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: /jbzC50p09egYgnxUz1tuhLhCFoOmgixbbsnd3HPRfc=
Subject key identifier: DB:5A:3A:FC:2F:BC:D7:E0:50:17:4A:89:FC:7E:E0:22:BF:75:91:04
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 019D9B88372BC7DBEE08312D78B20556276C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0C06
Signing time: Fri 17 Apr 2026 13:01:28 +0000
Manifest this update: Fri 17 Apr 2026 13:01:28 +0000
Manifest next update: Sat 18 Apr 2026 13:01:28 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: 6vTVcE4A+5SK/5XTk9K6/QJ+BRfX6IzIJ8FBgypISno=)
2: nSdbQEZKwp0Romsqj9nsZ4vQQrg.roa (hash: cAfzjYhPiwZe4Q3nVUxCxa/M+bhIuNdGJn+GlgVFeZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:37:2b:c7:db:ee:08:31:2d:78:b2:05:56:27:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Apr 17 13:01:28 2026 GMT
Not After : Apr 18 13:01:28 2026 GMT
Subject: CN=db5a3afc2fbcd7e050174a89fc7ee022bf759104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:d2:4b:43:80:ad:2a:9f:e8:16:01:05:99:
a9:58:9c:78:ab:fd:e3:10:37:27:f0:54:17:17:d1:
06:05:5c:d1:03:a9:78:5f:aa:5b:22:58:40:8f:53:
5f:f2:72:6b:4b:16:8d:25:d6:ab:2f:f9:01:f8:4c:
ea:b9:44:c9:9e:b2:fd:ea:7e:f3:bd:b0:eb:ed:cc:
1e:d3:15:ff:70:62:02:c2:96:f1:e0:3c:e9:3a:ef:
ce:65:68:96:ff:be:32:de:cd:6c:4c:ef:e5:10:70:
b0:81:08:2b:64:6e:e1:5a:3f:1d:a0:59:b9:9a:e2:
b0:be:48:82:92:1e:e2:3d:e1:48:d9:bb:84:41:96:
1c:17:fd:11:3d:97:77:00:49:b1:b1:59:79:68:fe:
c6:3f:ba:ed:86:10:0e:97:bc:25:f8:b7:1e:a8:10:
bf:5b:15:62:15:95:da:29:ce:7c:91:a0:80:f0:02:
50:12:85:59:fd:44:4f:32:db:59:81:3b:b4:93:90:
13:9b:e9:79:47:76:a5:21:bc:17:05:0d:40:5b:00:
6c:d2:6a:3d:f0:9a:5a:ae:10:dd:2f:15:45:bb:ca:
94:78:8f:13:01:ca:80:85:5f:95:f9:c0:96:8f:e4:
0b:0f:a1:25:1a:5e:d9:d9:c6:19:d1:ec:73:ae:15:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5A:3A:FC:2F:BC:D7:E0:50:17:4A:89:FC:7E:E0:22:BF:75:91:04
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6a:d0:a3:91:2a:3a:c9:b2:e8:6e:94:bf:35:54:7b:1e:5f:
84:00:d5:8a:50:c9:85:43:57:83:f4:25:af:90:f8:22:34:1a:
cc:9d:40:fd:6f:32:6c:7b:b6:47:3e:fc:a1:e9:a4:07:df:f8:
97:b9:d2:d9:fd:fd:f4:2e:0f:4e:a5:44:4a:a1:60:1b:c1:73:
32:fe:b7:9b:85:6a:92:69:07:63:92:25:97:04:9c:a7:6a:d2:
31:12:46:b1:34:3f:6a:3d:d9:e7:cd:38:3f:9e:69:95:b2:91:
3e:07:d6:b3:ab:f5:78:9a:b2:0d:e7:5e:28:fa:34:ce:36:b9:
d5:12:e7:e7:55:07:65:f4:b9:d8:2c:98:a5:21:af:6a:5e:45:
74:74:c4:e6:43:56:7c:dc:62:e6:96:5b:c1:e7:7d:6a:f6:83:
05:1d:62:49:f9:2d:9e:f5:e4:48:93:05:27:28:b4:6c:d9:94:
2b:24:c6:8e:7e:7b:25:dc:ca:fe:1e:10:9b:41:4e:9d:6d:67:
ec:1f:d6:c1:ce:f2:51:a6:5e:fa:91:79:be:ba:dd:f7:2d:7e:
ec:5e:66:d9:4e:f5:72:0f:76:31:2a:36:46:5a:be:a8:ff:ce:
ee:37:ac:79:ca:9a:f6:94:ef:8a:88:d0:27:ce:96:5e:e0:03:
40:0b:c5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:46 2026 by rpki-client