Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: 6xQBMztDtSmUtczGqz4I7MRDjdxuZB+u78qrcJU/pak=
Subject key identifier: 29:A4:B3:FD:E4:59:2E:4C:66:F6:B7:B7:07:70:A2:4D:1F:F8:B6:59
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 019DA41D17641E68C49FCF1F5590CE4ACA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 1587
Signing time: Sun 19 Apr 2026 05:01:02 +0000
Manifest this update: Sun 19 Apr 2026 05:01:02 +0000
Manifest next update: Mon 20 Apr 2026 05:01:02 +0000
Files and hashes: 1: CiIrcBM9yA3ZewdtgV4N1CH8GZY.roa (hash: /RFq6SqUsBxBmefl/oJJgPlTdelQAi+UQdtXbYFfKHs=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: MU4RmK8TDANYTtUpCm6lEY8NI1LFXcvNTAYgLU+SZxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:17:64:1e:68:c4:9f:cf:1f:55:90:ce:4a:ca:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: Apr 19 05:01:02 2026 GMT
Not After : Apr 20 05:01:02 2026 GMT
Subject: CN=29a4b3fde4592e4c66f6b7b70770a24d1ff8b659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6d:de:39:b6:1c:f7:e7:b1:6e:3a:9e:5e:12:
01:34:e5:b0:a6:20:f5:44:50:72:32:e7:a2:55:07:
7d:1b:dd:8e:65:b7:ea:54:fb:be:be:1e:a5:0b:46:
7f:5f:4e:a1:4d:39:6e:e1:4f:42:77:6a:e4:25:b2:
de:52:2c:b8:e7:8f:3b:44:db:17:c3:b6:e5:2b:3e:
0f:03:29:64:61:6b:d2:ee:b2:ae:af:da:a7:13:34:
e2:8c:ce:fa:d0:ba:db:e3:eb:90:82:d2:76:4c:c3:
ca:27:71:7d:4b:c4:6e:d4:1e:8f:97:9b:9c:06:ae:
fe:27:47:ac:c2:72:d8:b9:fa:53:2a:b3:d8:5e:40:
ba:94:ba:55:d7:c5:c3:50:3c:04:09:fc:33:cb:e7:
d6:f3:20:e7:6d:f1:a6:18:40:f3:82:0d:ff:be:71:
9b:61:c7:5e:5b:28:08:d0:2f:0b:3f:b5:ca:78:42:
9f:36:fb:a6:31:8b:17:02:e4:c1:70:31:a6:0c:3e:
46:70:f7:53:bb:05:61:b7:6b:a9:bc:15:e1:75:ad:
49:a7:f5:a9:2b:cb:65:c3:73:a1:e3:07:d7:e6:e1:
9a:29:10:e7:e0:80:17:dc:7d:0e:cc:1f:91:46:e3:
00:b6:bc:8f:24:71:82:30:66:26:da:8e:ea:0e:77:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A4:B3:FD:E4:59:2E:4C:66:F6:B7:B7:07:70:A2:4D:1F:F8:B6:59
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0e:fd:9c:cf:ba:91:36:86:3b:ac:09:f4:34:8b:3f:7d:fd:
10:b7:61:6f:fb:68:1d:16:0e:9b:54:d8:61:71:12:a8:40:32:
85:20:ea:24:82:7b:36:53:8c:52:58:5e:2c:dc:f8:fa:75:c5:
9a:57:b7:78:e4:50:9d:00:d4:42:b4:ce:28:0b:09:90:71:79:
30:c2:3b:74:6d:bf:32:72:7e:4a:c7:e1:b3:ff:ea:fc:44:82:
76:32:5b:79:fc:20:16:66:77:6c:33:90:b4:a9:ab:33:48:40:
40:c5:9b:ad:0b:5c:12:2c:2d:84:9b:d6:cd:11:5b:c6:1d:0f:
7c:47:d6:c4:fb:5b:de:5d:e6:38:39:3c:02:02:50:09:3f:d5:
49:6b:3d:18:a4:48:1b:52:9b:56:00:24:40:ae:98:24:39:cf:
71:01:cf:bc:14:29:07:b3:ab:8a:1b:e8:66:fb:93:7e:0a:31:
e7:cd:52:82:dc:b7:8a:eb:ef:f9:56:5a:f0:d3:a5:f2:25:ee:
e4:af:f2:30:ba:15:65:8e:59:e7:9d:79:6a:b8:b8:41:f3:e1:
b3:60:7c:ba:7e:ec:2e:eb:ec:ee:bf:cf:15:c9:f6:db:7b:d8:
38:f8:5f:fe:3a:6d:1f:9f:fe:f0:28:fb:e3:23:fa:f1:8e:d0:
cc:33:df:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:00 2026 by rpki-client