Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: FgV/xgE/1CqeVPzROkW4HvH2KUP+u/Jukci5+E1FCaI=
Subject key identifier: C4:F9:CD:F6:29:32:5F:17:47:D5:59:93:9C:7E:86:78:E7:1A:E2:C6
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 019DA3E699CC9D42FAAFC36D57EEB897CDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 0C0F
Signing time: Sun 19 Apr 2026 04:01:32 +0000
Manifest this update: Sun 19 Apr 2026 04:01:32 +0000
Manifest next update: Mon 20 Apr 2026 04:01:32 +0000
Files and hashes: 1: Dg5PEYmKpTVI2DCPpp7B0MOqhXQ.roa (hash: 0r9Wvfa6jCmlqCpm1KLg+xpqhpapVEOAPFkYXdbs38g=)
2: H-gl84k76iOlzZYYJCblbDHN-l8.roa (hash: 9kM+SrqoWq0lxyCjUYdOI+zgBattq8/xzQWtVJ/ldQQ=)
3: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: Vfx4LERLiCgNEh9kDTQ3Bv9RoUMEKwNpSUDfJWWHQBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:99:cc:9d:42:fa:af:c3:6d:57:ee:b8:97:cd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Apr 19 04:01:32 2026 GMT
Not After : Apr 20 04:01:32 2026 GMT
Subject: CN=c4f9cdf629325f1747d559939c7e8678e71ae2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:72:72:44:57:ce:f4:73:ea:ac:17:59:17:
49:c8:df:fe:07:83:e5:ee:a0:28:22:e1:c2:17:f2:
24:50:2a:18:20:4e:c1:2e:b1:c4:c2:f6:6f:b0:e6:
40:0e:a8:85:ec:27:69:53:67:c9:ef:39:91:7d:57:
44:e3:78:f0:cc:bd:a2:29:3e:77:85:57:e1:f5:16:
58:01:57:33:d5:c3:c5:c1:b1:9c:4e:c4:f3:4c:82:
48:7f:13:56:28:87:fd:17:e1:c8:24:e7:b2:5a:99:
bc:9b:ef:fb:07:c9:99:78:57:89:83:ea:c0:0a:97:
73:b5:9c:54:2c:6a:54:e2:96:d1:4d:9d:f2:01:3a:
20:1b:da:ce:ed:9d:43:10:62:5c:0f:c7:fe:f6:41:
a5:8f:7a:a9:1f:1f:4e:57:3f:84:65:3f:0e:77:8a:
2a:3c:93:98:b9:47:ce:62:1b:a3:72:b4:77:9d:f6:
e9:de:b7:8e:14:d7:6f:27:33:64:73:dc:ec:92:0f:
62:5c:87:4f:75:17:bf:ef:2b:b6:34:a8:47:3b:07:
6c:06:68:e8:67:26:7e:f7:03:13:71:f6:b0:c4:15:
c4:a4:a3:99:bc:35:01:3e:78:16:06:e0:4f:d8:4c:
6d:41:79:d5:a7:92:eb:51:ae:b0:0c:62:f0:33:8f:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:CD:F6:29:32:5F:17:47:D5:59:93:9C:7E:86:78:E7:1A:E2:C6
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6c:5a:1e:9e:04:f2:96:d0:66:b6:c7:a1:83:df:db:18:a5:
54:73:6b:e3:5c:1d:44:01:5e:dc:ca:79:a0:df:b3:82:34:08:
cb:b7:52:a0:ab:ab:b3:5e:0a:d0:7e:61:f2:de:e5:2a:59:f7:
1e:d3:3d:4a:c9:a0:cd:5e:5c:62:88:8a:d6:e7:3f:a3:d6:df:
d6:b8:37:e5:43:1a:d3:0b:82:10:4e:61:64:16:e4:1d:4a:a3:
4d:7c:d0:0a:59:19:eb:6f:93:ca:f3:29:37:7e:4b:d4:3e:10:
b0:97:b8:90:01:e1:2c:3b:7f:7b:96:d8:6d:ab:b0:03:ee:61:
63:10:fc:ef:61:84:af:3a:9c:29:79:b5:0b:76:26:62:dc:99:
db:d0:0f:32:ab:e0:d4:02:a6:ea:f3:4e:e2:1d:c7:8a:5b:55:
d5:be:70:a0:a1:bd:90:0f:89:7b:46:b9:d1:e0:51:d8:43:f6:
a8:fa:32:4e:45:3d:60:db:60:5c:38:d7:8a:1d:74:23:02:47:
ba:e7:d6:84:8e:01:89:75:ca:e3:59:c9:c7:f4:8c:1a:ef:86:
05:c9:c3:1d:b6:4a:2a:2d:fa:2b:9a:8c:54:93:51:d8:29:d8:
2d:81:d4:52:60:43:38:1e:e8:b3:63:bf:a2:e0:23:53:e4:8c:
58:7a:29:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:47 2026 by rpki-client