Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File: gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier: 5RfL/KhD7/X/YwIYi/8Mq6VoCAdNCAOAuaOYAB3/hNk=
Subject key identifier: 7F:0E:28:D2:E7:D3:F4:56:83:1F:EA:8F:39:58:F2:1C:DC:54:9C:EF
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 019D98BD9260167ED0B1210C75A6E2718947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 00:00:53 +0000
Manifest this update: Fri 17 Apr 2026 00:00:53 +0000
Manifest next update: Sat 18 Apr 2026 00:00:53 +0000
Files and hashes: 1: 0xjlkzMLHzYUOQzM0T_hixdH3Vc.roa (hash: w3LcFmfi5o+ZqCPWaVzw9mcyP3jYqj4m9ROiWLMpgAY=)
2: 5t0r8fJd2nhioYpGfkI7Yf9otXA.roa (hash: k52ZXWE/9hDIrYh0zpZm2nywZwLzZgmA6wQ6L4w58mM=)
3: 6K4jtyB3n1dTIno4GBJ6uOlA2H4.roa (hash: s//DyxiKkxSxvwwq0U0tirxt/hDGoM9Ut2Dc50YCwqM=)
4: Cryli7tFA3xQzdS5-qcU49qg2iM.roa (hash: ZS2Te+uiOMALn+TaiqIM3OKXyBaszdLcDeqRDP7qYwo=)
5: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: w/7Mh3j/UiPaeMP9+paBcBVdPFDKmkfhovZNnGHBQeo=)
6: jsVSRtJd2CDXuEExXGRqUMz5PZw.roa (hash: 3KBrD6dE8HRG9EKrovP9Lr4d9GeL2O9jLSsM034LhGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:92:60:16:7e:d0:b1:21:0c:75:a6:e2:71:89:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Apr 17 00:00:53 2026 GMT
Not After : Apr 18 00:00:53 2026 GMT
Subject: CN=7f0e28d2e7d3f456831fea8f3958f21cdc549cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:9f:db:c7:5c:c9:f3:a3:d9:a2:c6:e8:94:
34:70:0d:69:d6:5c:af:b5:c3:72:72:fa:e1:31:db:
3a:be:d9:c2:ed:88:11:1e:bd:18:5c:f8:87:15:bf:
55:4d:b6:4e:8b:66:7c:7b:70:57:7e:71:8c:41:3a:
3e:be:72:b5:2c:dd:35:1b:0e:57:e7:53:1b:48:6d:
ad:0d:cd:50:78:3a:9b:58:ec:f7:e4:0e:d8:ec:a0:
8d:7c:83:3c:03:2c:ad:42:e6:a3:f3:4f:1f:e7:53:
67:f9:6b:8f:ce:18:06:b5:94:af:b3:5d:2f:09:11:
61:8d:4b:62:25:da:76:a2:b5:87:b9:48:f6:5f:d3:
69:e1:e0:e7:2e:65:ae:d4:bb:e2:d8:73:11:b7:d8:
94:14:8f:68:dd:00:7d:0e:dd:c3:49:4d:2d:90:e9:
67:2b:6c:21:67:9f:3b:9f:2d:84:0a:38:c3:47:b4:
e9:11:aa:de:c9:fc:57:f4:95:4c:33:59:d8:1c:82:
75:0f:fa:f7:0d:7a:7d:fd:99:e2:35:30:23:78:37:
97:0f:9b:c3:64:77:70:75:9a:40:a7:31:bc:d4:f8:
8b:b8:c7:95:53:47:3c:e4:32:05:9a:26:a5:45:e9:
5d:c0:52:65:f1:61:5d:05:de:08:98:af:02:ce:79:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:28:D2:E7:D3:F4:56:83:1F:EA:8F:39:58:F2:1C:DC:54:9C:EF
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a9:76:b9:8c:f2:8d:34:09:c9:d4:c1:ba:27:39:c1:47:3e:
9c:15:af:e9:35:84:50:b7:c1:1b:52:e0:cc:79:ae:27:b3:4c:
cc:90:29:db:af:0a:d0:2a:36:65:31:20:5c:16:ad:28:90:06:
00:69:ce:18:d8:e9:ed:5b:21:79:4a:46:9d:67:bd:09:d1:a7:
6d:45:7c:11:5d:68:38:63:8f:ee:9f:ae:3d:29:26:97:11:b0:
8b:d6:1c:14:22:ec:ce:60:0a:84:68:9e:be:c6:52:2d:a5:f8:
78:f6:3a:60:e5:c4:32:3b:5c:57:e7:66:9a:8f:15:ad:3e:1d:
7e:a6:b7:b6:21:3a:f0:26:6a:49:a8:11:92:b2:c2:5c:cd:08:
11:80:f7:60:51:83:08:77:bd:fd:66:c8:d7:73:72:0b:76:b7:
82:46:d2:55:45:42:07:15:60:af:2a:01:f8:f5:22:6d:10:8b:
be:75:fe:bf:0e:ef:39:1b:44:71:ea:d4:1a:2a:49:4a:80:18:
16:71:8c:24:9d:ca:0d:e4:66:4c:86:28:8f:50:f5:a6:84:c7:
4d:9d:22:2a:da:74:c1:fe:02:5f:40:43:a9:8a:6b:3d:e7:ff:
22:47:1e:3a:62:4b:41:15:00:b2:bf:0b:b5:8d:5c:33:77:cb:
2e:76:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:01:19 2026 by rpki-client