
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: ujog8Bj1MXk63mj2zsYC36PEENkEnbNMympluFIFHlc=
Subject key identifier: DE:EB:18:C0:A8:A5:3F:ED:2C:D7:52:A9:DF:C9:17:B8:9C:67:4B:C0
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 019D97E21630E917B0DD7B2FEC3E3F12343C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0E46
Signing time: Thu 16 Apr 2026 20:01:09 +0000
Manifest this update: Thu 16 Apr 2026 20:01:09 +0000
Manifest next update: Fri 17 Apr 2026 20:01:09 +0000
Files and hashes: 1: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: C8XAWgJjdraAbilKmUvngu8Kw3MArKhGsTwSnJ9cuzQ=)
2: ioSKJKkF_4HM_F6u6RJnkLY1uWU.roa (hash: WbXNH1FTymiYyoPgw712is108gr5GM8N98thfxq0yjg=)
3: s7B9p4vTJAow4sBYhbnToQXwFKo.roa (hash: nHDCoe/MNgEdbVoOhEHnJFTP5BTnyS6pKwNLw3+w7aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:16:30:e9:17:b0:dd:7b:2f:ec:3e:3f:12:34:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Apr 16 20:01:09 2026 GMT
Not After : Apr 17 20:01:09 2026 GMT
Subject: CN=deeb18c0a8a53fed2cd752a9dfc917b89c674bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:56:98:e5:a8:93:33:d2:ab:7c:50:3a:27:
2b:b9:f8:92:5a:88:22:d3:33:f5:b1:1a:9a:42:8e:
a0:d7:18:17:1c:5d:13:70:95:43:d9:36:7c:49:5c:
8c:78:7b:4f:ec:01:c7:cf:da:bf:63:56:48:63:91:
ab:75:70:1b:60:ac:f2:c7:77:ca:4d:7e:d3:d6:0f:
6f:41:5a:ae:9a:60:4f:34:00:be:b6:a5:2a:6b:a0:
76:17:86:fb:d2:c6:be:ae:e0:59:bc:98:16:04:55:
c3:a6:49:38:24:3b:68:e7:d3:ec:89:5d:4d:25:45:
0c:b3:88:3c:d0:cb:b1:f1:c8:71:20:9d:ce:c0:73:
fa:79:6e:d8:a8:f4:73:8c:9b:98:20:09:6e:2f:e3:
6f:3f:31:65:ae:97:11:6c:04:59:bb:26:c2:3a:38:
fa:f0:a2:28:1c:30:50:42:e0:e1:94:03:8d:fe:c0:
44:e9:1f:14:cc:cf:19:e4:f5:4d:90:83:b2:da:06:
86:1b:61:36:68:40:3b:fe:9f:4a:88:48:55:58:3e:
1c:c1:4e:67:92:fd:bb:31:ae:fc:d8:0c:e6:81:9c:
b5:58:d0:1a:88:9b:74:73:34:9d:c6:98:af:fa:e3:
34:14:42:00:9e:6d:5e:fe:d3:c5:ab:7d:aa:5f:41:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EB:18:C0:A8:A5:3F:ED:2C:D7:52:A9:DF:C9:17:B8:9C:67:4B:C0
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:13:35:d6:32:24:55:5d:1c:3d:b1:97:5c:b7:fe:36:c5:bd:
05:fa:a7:22:d2:8c:80:51:db:b1:6c:f3:99:12:98:7f:38:99:
8f:05:58:15:4a:36:53:d9:32:40:eb:e5:d5:46:f1:66:d2:a9:
66:88:c8:93:be:90:53:5b:3f:83:1e:46:0a:b2:6b:a3:76:f0:
44:3d:10:f4:1f:e4:a1:d2:c9:70:b1:77:dd:20:42:7f:dc:40:
87:33:28:df:6e:15:07:26:4b:b3:5c:bf:1b:65:3d:76:5e:33:
be:26:48:63:ee:af:85:18:2a:16:fc:c8:a8:37:d0:41:de:c4:
bc:a5:bf:11:43:8e:32:f0:47:71:71:7d:98:21:31:c0:9e:6f:
48:78:23:86:a9:df:9f:de:8b:5d:05:65:b3:f1:93:24:c5:ca:
2b:76:47:9b:11:49:0f:e9:1a:2e:76:1a:e6:a8:9b:d8:dc:f0:
50:c4:81:32:9c:71:6f:82:25:0d:a5:5f:07:8e:e8:94:aa:e2:
46:b9:81:18:e6:75:9a:27:17:84:9b:fb:99:35:71:73:a6:3e:
00:1a:6a:9c:a6:d8:bc:db:c2:58:26:97:46:26:62:a4:87:20:
19:cc:30:0b:ae:25:5f:e9:7d:04:01:0d:19:d4:1c:f8:ad:09:
56:df:1d:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4hYw6Rew3Xsv7D4/EjQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMWQyMTU0YjkzMjRlZmIzOWNhMzhiYTE5MzFiYTVkZmI1
OWU4ZmQwHhcNMjYwNDE2MjAwMTA5WhcNMjYwNDE3MjAwMTA5WjAzMTEwLwYDVQQD
EyhkZWViMThjMGE4YTUzZmVkMmNkNzUyYTlkZmM5MTdiODljNjc0YmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA5WmOWokzPSq3xQOicrufiSWogi
0zP1sRqaQo6g1xgXHF0TcJVD2TZ8SVyMeHtP7AHHz9q/Y1ZIY5GrdXAbYKzyx3fK
TX7T1g9vQVqummBPNAC+tqUqa6B2F4b70sa+ruBZvJgWBFXDpkk4JDto59PsiV1N
JUUMs4g80Mux8chxIJ3OwHP6eW7YqPRzjJuYIAluL+NvPzFlrpcRbARZuybCOjj6
8KIoHDBQQuDhlAON/sBE6R8UzM8Z5PVNkIOy2gaGG2E2aEA7/p9KiEhVWD4cwU5n
kv27Ma782AzmgZy1WNAaiJt0czSdxpiv+uM0FEIAnm1e/tPFq32qX0EyeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7rGMCopT/tLNdSqd/JF7icZ0vAMB8GA1UdIwQY
MBaAFBodIVS5Mk77Oco4uhkxul37Wej9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAt
ODkwMWIwNTJiODZiLzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAtODkwMWIwNTJiODZi
LzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzxM11jIk
VV0cPbGXXLf+NsW9BfqnItKMgFHbsWzzmRKYfziZjwVYFUo2U9kyQOvl1UbxZtKp
ZojIk76QU1s/gx5GCrJro3bwRD0Q9B/kodLJcLF33SBCf9xAhzMo324VByZLs1y/
G2U9dl4zviZIY+6vhRgqFvzIqDfQQd7EvKW/EUOOMvBHcXF9mCExwJ5vSHgjhqnf
n96LXQVls/GTJMXKK3ZHmxFJD+kaLnYa5qib2NzwUMSBMpxxb4IlDaVfB47olKri
RrmBGOZ1micXhJv7mTVxc6Y+ABpqnKbYvNvCWCaXRiZipIcgGcwwC64lX+l9BAEN
GdQc+K0JVt8dgg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:56:41 2026 by rpki-client