Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
File: GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json)
Hash identifier: tFJZMIeu4gcSkGzYo1uLV9l86X6YseDygsSP00QbI0s=
Subject key identifier: 74:13:E7:78:E5:BB:60:E2:71:BA:6B:76:D0:95:B1:B9:4B:B7:C4:10
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Certificate issuer: /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial: 019D9C2D4F5C12A02AC77CAEC3A7D6633F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 16:01:48 +0000
Manifest this update: Fri 17 Apr 2026 16:01:48 +0000
Manifest next update: Sat 18 Apr 2026 16:01:48 +0000
Files and hashes: 1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: +2vZCqypl8vJRTwNGwjE9VaCwmFFKwVq6jnUhb8AKfI=)
2: H00Omd7RPitereQtVkcKdJ7rvQE.roa (hash: P3INZZ+wxZ5iAVG5bG8aZrx0nXJci1wMPc5cl04gndw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:4f:5c:12:a0:2a:c7:7c:ae:c3:a7:d6:63:3f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Validity
Not Before: Apr 17 16:01:48 2026 GMT
Not After : Apr 18 16:01:48 2026 GMT
Subject: CN=7413e778e5bb60e271ba6b76d095b1b94bb7c410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:03:55:5f:91:28:0a:56:57:30:93:b7:d1:
50:0c:df:24:33:e9:0e:6f:50:fb:c1:5d:c2:4d:6a:
1d:72:72:a7:ad:00:63:b3:73:e7:17:2c:ac:e7:a8:
d6:3c:ac:09:a1:fb:ec:04:a7:cb:05:c2:a5:f3:b7:
a1:7e:5c:15:06:fd:a7:e9:26:65:62:ea:8c:ea:82:
48:38:58:25:25:3a:6a:ce:44:d7:83:ea:53:43:70:
f5:79:59:45:8f:bb:c8:aa:e7:d4:e4:63:e6:12:70:
5f:0e:71:27:a4:f1:d7:26:d4:a5:29:e2:65:ec:c8:
bf:b1:75:f3:f3:1e:6b:da:b9:b5:1a:cf:3a:a3:1e:
e8:01:35:f7:fe:26:af:1f:c5:25:18:af:33:39:87:
ee:c8:7a:16:1b:e3:5b:3c:41:59:ca:e4:7a:90:99:
b1:43:3f:37:84:4d:28:c0:90:4f:74:8b:ef:63:a8:
d3:99:00:5e:62:d2:46:57:47:c9:48:c7:f7:96:b7:
87:b6:8b:83:f2:7a:db:bf:1e:4f:c7:a9:d3:86:e3:
fe:08:ff:61:ee:32:df:64:82:9f:d7:b0:a4:da:fd:
68:f8:08:cc:27:e3:79:c4:20:59:fd:9d:4d:ee:6f:
e6:8a:d5:05:72:f9:3f:f9:4a:a1:c0:ff:57:a3:b8:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:13:E7:78:E5:BB:60:E2:71:BA:6B:76:D0:95:B1:B9:4B:B7:C4:10
X509v3 Authority Key Identifier:
keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d8:f2:9a:a5:ad:88:09:dc:34:f2:38:0e:34:09:fd:72:b4:
d9:69:66:ef:91:10:46:e7:8d:eb:10:e2:64:e7:97:f7:99:72:
6c:1c:97:1a:bd:01:98:89:ea:89:40:12:63:fa:1c:16:04:a7:
93:31:e7:26:c8:55:03:1a:da:48:2f:5e:91:7f:c8:eb:93:29:
3b:8c:40:2c:9e:e6:11:34:dd:2f:d5:2c:ab:a5:3a:98:06:d2:
41:40:9d:7a:65:f3:aa:7e:07:19:d2:29:2e:ac:af:84:ac:b4:
d9:9a:bf:90:5c:bc:b8:6a:3e:f7:d3:29:90:70:29:fa:b0:3c:
97:c0:23:38:ad:34:5d:0f:63:bf:35:d7:fd:95:af:35:67:cd:
4a:ea:8f:c7:29:3c:e7:c9:87:61:e2:fe:25:de:21:53:e6:e9:
03:e2:43:d0:29:79:00:d5:d3:74:a4:41:a6:3d:6c:31:2e:56:
93:d0:76:d8:e2:89:ad:e0:62:85:a0:b4:5b:13:59:bd:c8:26:
9d:f8:cc:c1:74:b6:a9:50:c5:ee:e0:2d:59:80:5a:de:e0:0d:
95:93:a6:ee:44:9e:9b:39:6a:41:fd:e8:5f:09:ad:63:99:1e:
bb:f8:7a:11:41:1a:36:7b:90:19:b9:68:58:ca:4e:c2:9d:29:
01:ef:68:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:19:00 2026 by rpki-client