Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
File: gP-4grVdAkWUCj414a3dU6esf-Y.mft (raw, json)
Hash identifier: Wzsh13je79XNkTMVuSl318kcyNGU7iaSSvJdZ8QwY0A=
Subject key identifier: 2C:D2:20:E7:0B:63:D9:B9:6F:35:49:60:60:C0:3B:31:97:8E:5E:21
Authority key identifier: 80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
Certificate issuer: /CN=80ffb882b55d0245940a3e35e1addd53a7ac7fe6
Certificate serial: 019D9BF56799A67A22C155CE1B1B93029075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
Manifest number: 0112
Signing time: Fri 17 Apr 2026 15:00:44 +0000
Manifest this update: Fri 17 Apr 2026 15:00:44 +0000
Manifest next update: Sat 18 Apr 2026 15:00:44 +0000
Files and hashes: 1: gP-4grVdAkWUCj414a3dU6esf-Y.crl (hash: gtotRzSYPTRzF5H4g0OK3vSvS3FifYlOSY7qMSjnLiM=)
2: ghkZqiRBYP7F8aWdqRde-YlWVwI.roa (hash: D1th9djUsHfufM7g4Iy1vOHC4rWVpb4G82R0TUpgdcQ=)
3: uwzrkDAt1bWbxPHQL77n6ueMwTQ.roa (hash: v6tCrn+4VuGO560AfCeDjuj3YGlPBrSypyg+OiqsxoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:67:99:a6:7a:22:c1:55:ce:1b:1b:93:02:90:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffb882b55d0245940a3e35e1addd53a7ac7fe6
Validity
Not Before: Apr 17 15:00:44 2026 GMT
Not After : Apr 18 15:00:44 2026 GMT
Subject: CN=2cd220e70b63d9b96f35496060c03b31978e5e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:39:14:72:5c:21:9e:60:41:fa:7f:17:d2:
10:13:b1:e3:ec:b0:10:32:a8:58:c0:88:c0:01:13:
c7:bb:23:7f:b8:ba:14:94:a2:5c:55:ad:dd:3a:ec:
fa:0f:da:b7:e0:84:3c:7a:67:53:a1:ec:e3:2a:63:
80:9d:17:70:4e:83:6c:1b:a8:0a:5e:72:f3:47:46:
5a:b0:54:20:17:19:ca:85:39:15:08:cc:2e:56:f7:
e2:f8:10:05:c1:4a:d9:ab:6d:83:48:38:14:0e:3b:
08:ff:1c:de:4e:da:8f:c3:e2:28:80:c3:94:97:76:
94:06:dd:d8:b5:4e:b7:3d:37:c9:9c:28:d1:5d:3e:
7a:f4:07:ee:dc:a9:23:73:66:15:be:34:f7:fd:39:
29:6f:b5:d8:39:c1:58:ff:e7:70:ff:06:2f:32:26:
43:e5:41:f9:ba:d1:34:bf:5e:55:9f:d6:47:ab:95:
93:55:29:83:e1:fa:b3:f9:23:22:49:72:89:ed:e8:
35:32:9f:8d:be:ed:d8:54:d3:0a:c1:cd:39:82:b3:
56:43:e6:05:c0:a0:3f:3b:1a:71:49:12:4b:dc:05:
e5:ab:7a:70:1f:b5:41:5b:47:ba:08:c1:a2:d7:24:
11:cc:10:ac:32:6c:c5:0c:90:bc:ec:09:51:8e:41:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D2:20:E7:0B:63:D9:B9:6F:35:49:60:60:C0:3B:31:97:8E:5E:21
X509v3 Authority Key Identifier:
keyid:80:FF:B8:82:B5:5D:02:45:94:0A:3E:35:E1:AD:DD:53:A7:AC:7F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP-4grVdAkWUCj414a3dU6esf-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a30194-e74f-456b-891f-68a4153450b1/1/gP-4grVdAkWUCj414a3dU6esf-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:67:c4:85:b6:37:49:23:91:de:87:ce:1a:65:89:56:5f:33:
04:e6:cf:ca:2e:47:35:33:63:f9:62:88:a7:93:88:ae:9b:e5:
4f:e2:42:77:04:36:5e:78:9e:1e:98:a9:7f:df:b2:a9:71:fb:
3b:be:ac:ae:23:1a:18:2f:b9:85:98:f3:70:b8:90:d4:91:9a:
c2:e0:50:f9:00:c2:d7:e1:f5:71:d5:64:1d:0b:4c:5c:2a:80:
60:61:45:46:43:1a:86:19:71:f0:72:5b:38:80:48:df:b3:55:
7a:ad:a2:ab:bd:5b:e7:dd:ec:03:92:9c:da:73:6b:0a:92:c3:
02:8f:86:b4:f5:bb:b5:bc:43:41:e0:0e:5a:1d:be:ee:17:67:
6c:63:85:ce:71:0a:42:1b:0a:25:c4:bf:a3:5d:f5:3c:f9:b8:
31:c4:7f:b0:a5:8f:46:7f:9a:b7:7d:2a:c6:54:0c:2b:b2:43:
34:ba:4a:b9:46:07:2b:ab:43:2b:3f:9c:57:47:9b:96:f2:35:
49:3f:b6:cd:30:8b:33:36:6e:29:4a:8a:3b:58:2e:62:fb:c7:
cc:9d:80:9f:f2:55:79:23:3e:03:32:13:12:6a:25:70:a5:07:
c4:ed:38:12:9c:d2:01:e2:cc:6d:bd:9a:e4:fd:b4:3c:66:c4:
10:52:0d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:15:51 2026 by rpki-client