Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
File: gbv0m8K-YG6m9Ivb-WJX3natfMA.mft (raw, json)
Hash identifier: ur9P8JMF9qH5ZYG+UZsuSOPcSmcfmq+IBYS7aszbiyE=
Subject key identifier: 68:6B:0E:8C:F0:8F:AD:66:E5:D2:B5:35:0D:2B:1B:74:82:69:D0:20
Authority key identifier: 81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0
Certificate issuer: /CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0
Certificate serial: 019DA48B057D6CA8A28F01BE02B366AEAF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 07:01:07 +0000
Manifest this update: Sun 19 Apr 2026 07:01:07 +0000
Manifest next update: Mon 20 Apr 2026 07:01:07 +0000
Files and hashes: 1: gbv0m8K-YG6m9Ivb-WJX3natfMA.crl (hash: QggGHisdYOmy9Kwe6j8RJwv4xjIr0QVZt4//M1tWgDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:05:7d:6c:a8:a2:8f:01:be:02:b3:66:ae:af:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0
Validity
Not Before: Apr 19 07:01:07 2026 GMT
Not After : Apr 20 07:01:07 2026 GMT
Subject: CN=686b0e8cf08fad66e5d2b5350d2b1b748269d020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3f:24:82:56:1a:aa:5e:fc:35:e8:9f:0b:88:
b6:10:e3:71:c6:aa:9d:f0:6d:81:02:f6:ec:5a:8d:
4e:63:fd:29:8e:e5:69:25:06:8c:67:80:6e:3a:7b:
96:07:2f:62:b4:46:ca:31:dd:11:42:98:ff:0a:09:
95:4c:61:7f:26:c0:b6:a8:e9:12:ea:39:dd:91:67:
ba:a9:e7:80:a4:d2:1e:4a:2e:3a:ec:90:1b:1b:f4:
99:6d:e3:1e:d7:0e:08:df:a2:75:d7:71:35:4c:3b:
f7:4b:44:0f:df:38:82:d1:69:18:8f:1f:57:16:4d:
95:32:81:85:1d:6c:eb:d4:d0:82:d5:a2:49:74:c3:
86:67:88:d5:6c:a4:59:6c:2f:bf:3c:62:9c:62:21:
5e:65:77:1e:26:36:86:f6:29:9c:af:8d:f6:bc:b3:
fe:36:e0:6a:9e:58:33:4c:ba:7c:38:55:2a:e6:0e:
6f:75:2b:e8:51:50:58:d1:93:25:54:ee:32:6d:41:
eb:b3:5c:5f:5b:42:77:46:47:6b:03:14:a1:a3:1e:
7f:ba:81:ec:24:de:d9:dd:3f:a1:0d:64:22:f2:f8:
f7:57:2a:ce:af:60:37:45:b8:c7:1a:24:be:be:b8:
f0:65:b8:86:2b:ef:e0:32:89:5f:9a:85:3f:98:fd:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6B:0E:8C:F0:8F:AD:66:E5:D2:B5:35:0D:2B:1B:74:82:69:D0:20
X509v3 Authority Key Identifier:
keyid:81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3b:1a:e9:a3:8c:c3:b7:d3:b9:60:84:64:13:e1:99:83:8c:
29:6b:48:7e:95:82:8e:bc:1d:02:38:23:7b:39:ea:1f:2e:58:
fa:e2:32:6e:73:d1:32:23:a9:cc:1c:ae:b9:b3:53:76:72:23:
67:18:ec:72:94:5b:36:a9:e7:11:2a:be:2d:0c:b2:9c:c5:7d:
3d:b0:14:25:2f:51:4a:9c:dc:8e:c1:ac:ad:ab:3d:6f:3f:bf:
5f:16:22:81:79:25:fd:c4:57:ec:48:d1:2d:6a:91:f6:08:73:
ab:cb:d2:1b:7a:05:10:04:84:89:16:b4:85:1b:c0:f1:9e:3f:
dd:2f:46:e3:93:4c:c7:93:15:29:51:57:51:af:2e:68:2c:f7:
de:fd:89:77:28:bb:73:af:5e:df:6a:85:f7:e1:af:b5:f2:95:
e9:13:04:6d:dc:d8:b9:c6:9a:71:52:bf:62:0e:ec:f2:6b:e4:
08:2f:1d:7d:7a:23:e6:00:2b:48:7f:33:70:cb:fb:0c:13:b8:
0e:95:03:ef:3f:ae:7b:16:d9:47:1e:ea:e5:b3:5d:f0:21:9d:
24:1b:48:20:1d:46:36:fc:02:2f:c0:4a:5a:4c:90:c7:6b:61:
ea:43:4d:ce:6f:2d:e3:33:3c:0e:37:60:23:b3:b5:e6:50:38:
55:47:c2:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kiwV9bKiijwG+ArNmrq8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYmJmNDliYzJiZTYwNmVhNmY0OGJkYmY5NjI1N2RlNzZh
ZDdjYzAwHhcNMjYwNDE5MDcwMTA3WhcNMjYwNDIwMDcwMTA3WjAzMTEwLwYDVQQD
Eyg2ODZiMGU4Y2YwOGZhZDY2ZTVkMmI1MzUwZDJiMWI3NDgyNjlkMDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5z8kglYaql78NeifC4i2EONxxqqd
8G2BAvbsWo1OY/0pjuVpJQaMZ4BuOnuWBy9itEbKMd0RQpj/CgmVTGF/JsC2qOkS
6jndkWe6qeeApNIeSi467JAbG/SZbeMe1w4I36J113E1TDv3S0QP3ziC0WkYjx9X
Fk2VMoGFHWzr1NCC1aJJdMOGZ4jVbKRZbC+/PGKcYiFeZXceJjaG9imcr432vLP+
NuBqnlgzTLp8OFUq5g5vdSvoUVBY0ZMlVO4ybUHrs1xfW0J3RkdrAxShox5/uoHs
JN7Z3T+hDWQi8vj3VyrOr2A3RbjHGiS+vrjwZbiGK+/gMolfmoU/mP2nbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhrDozwj61m5dK1NQ0rG3SCadAgMB8GA1UdIwQY
MBaAFIG79JvCvmBupvSL2/liV952rXzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84NjNlZWUtNzcxNC00YmM0LTkyNjgt
NDE2OTQyMDJkZTY4LzEvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84NjNlZWUtNzcxNC00YmM0LTkyNjgtNDE2OTQyMDJkZTY4
LzEvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTsa6aOM
w7fTuWCEZBPhmYOMKWtIfpWCjrwdAjgjeznqHy5Y+uIybnPRMiOpzByuubNTdnIj
ZxjscpRbNqnnESq+LQyynMV9PbAUJS9RSpzcjsGsras9bz+/XxYigXkl/cRX7EjR
LWqR9ghzq8vSG3oFEASEiRa0hRvA8Z4/3S9G45NMx5MVKVFXUa8uaCz33v2Jdyi7
c69e32qF9+GvtfKV6RMEbdzYucaacVK/Yg7s8mvkCC8dfXoj5gArSH8zcMv7DBO4
DpUD7z+uexbZRx7q5bNd8CGdJBtIIB1GNvwCL8BKWkyQx2th6kNNzm8t4zM8Djdg
I7O15lA4VUfCMw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 15:31:52 2026 by rpki-client