Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: d+30B08UD9yrPt6C1dY+mueZaA8SU4Oumcpevqmo3Yk=
Subject key identifier: A5:84:CC:4A:ED:C6:02:8E:B4:71:AC:AC:55:A6:29:E4:77:EA:A4:B7
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 019D999967B39D728B223BA491ED7A6CF0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 04:01:00 +0000
Manifest this update: Fri 17 Apr 2026 04:01:00 +0000
Manifest next update: Sat 18 Apr 2026 04:01:00 +0000
Files and hashes: 1: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: XvWAuCRIHVt5u2aaz501IKws3uJBAoCSkXlWmmte4dg=)
2: f8VlKt8JzCNAPxp24L1Yki6OYWM.roa (hash: pdFJm+KiuiR3o4ERryoXHrfDwKAIlg8iSODri6S35nw=)
3: qLXb67dE1EAchhK-STW3jwCdYVI.roa (hash: drU9BCSr2spJludNeni+Da0l+Sz7+7Ab8hUqNLHYgcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:67:b3:9d:72:8b:22:3b:a4:91:ed:7a:6c:f0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Apr 17 04:01:00 2026 GMT
Not After : Apr 18 04:01:00 2026 GMT
Subject: CN=a584cc4aedc6028eb471acac55a629e477eaa4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:68:64:e2:c7:7f:9b:bc:2f:20:33:a0:aa:
a5:5e:2b:c5:16:8f:11:99:48:4c:f5:18:f9:d2:33:
20:c4:99:d4:25:79:0b:aa:5d:f2:37:06:92:a7:3c:
e2:ba:81:86:4b:95:1f:b3:2a:85:b2:50:ac:5f:33:
6a:de:b0:a8:94:ba:04:cb:b0:9c:e1:54:2b:aa:d7:
ac:2d:ca:28:f0:54:1a:98:f3:ff:cf:27:a3:e3:99:
e0:ef:43:a0:70:73:c6:7f:18:b7:7e:5e:96:26:ce:
44:da:ec:b2:d0:ff:06:9f:89:7a:60:b1:ab:dd:d2:
16:54:64:40:15:5e:56:ce:63:63:0b:fa:2c:05:97:
f1:81:30:7d:d1:cd:e5:52:49:8e:8b:99:33:fb:79:
81:04:34:18:cc:27:d5:2e:64:3a:2c:e7:fa:42:74:
be:2c:f5:2c:21:17:8b:e9:1b:7e:ff:fd:0a:aa:e0:
fc:a5:4a:06:ec:1c:74:7f:27:0a:22:3f:88:fd:1e:
85:37:87:44:12:8b:8b:13:37:ed:4b:a0:70:93:ee:
be:eb:96:fe:08:82:8f:a9:fd:7a:86:ac:c6:ef:7c:
31:37:12:48:a9:5c:15:85:89:12:c4:0c:11:c0:cb:
a6:5f:a3:c7:7b:21:8d:84:b7:ed:d1:76:39:8f:db:
b8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:84:CC:4A:ED:C6:02:8E:B4:71:AC:AC:55:A6:29:E4:77:EA:A4:B7
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3d:39:1c:39:c5:83:4d:71:85:6a:74:f6:e4:0c:c3:07:39:
74:45:8c:b7:81:06:80:6a:b7:9a:2e:18:7b:d9:42:cf:4f:33:
65:a4:d2:e2:bb:47:c8:e5:c1:36:3a:41:d9:e0:d5:54:76:19:
0f:a3:fa:d7:6c:8d:be:2d:1c:ab:67:08:55:14:7a:af:13:86:
1f:c1:50:eb:bc:b4:8b:ec:6d:e3:6e:42:a1:42:d9:d3:cd:e8:
77:9c:7a:b0:c9:7a:1d:11:e7:ba:ce:32:90:10:40:d5:10:be:
f6:86:4e:ab:c0:5d:f7:e4:63:50:62:c6:9f:88:f4:cd:ae:fb:
6b:cf:a8:88:a0:c0:77:04:45:46:9c:6a:0c:cf:42:9a:aa:7b:
ac:22:db:16:6b:e9:aa:20:cd:66:13:e1:11:72:5c:b5:14:1d:
62:1e:6c:0b:d4:e3:d8:b6:b0:f1:fd:ac:92:87:14:ff:64:81:
24:4f:62:e1:ef:6c:1f:c3:32:82:af:49:ad:fa:f1:a2:a6:46:
4d:45:36:fd:32:8d:86:2d:cb:75:80:a0:46:fd:fe:10:bc:82:
11:08:09:d8:f5:5d:3e:4e:8f:20:71:cc:c3:95:ea:3b:d0:c7:
53:55:8c:e1:45:01:a1:3a:fd:44:80:5f:e8:38:32:8a:78:a6:
52:24:f9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:23 2026 by rpki-client