Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: R4GQUdQ2SzUiZvx8UP5F0YGrQJN7jxDUIP6+pGR3Z/k=
Subject key identifier: 66:CA:F3:70:69:80:D5:3E:25:ED:8E:FD:0B:8C:44:54:E1:9C:31:F6
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 019D9A749C4C1820496600F7079BDEEF915C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0AA7
Signing time: Fri 17 Apr 2026 08:00:26 +0000
Manifest this update: Fri 17 Apr 2026 08:00:26 +0000
Manifest next update: Sat 18 Apr 2026 08:00:26 +0000
Files and hashes: 1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: wIHwHOhUzlmm95GCJtA4r5rGO1z6iX0U2L1JahaMRnw=)
3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:9c:4c:18:20:49:66:00:f7:07:9b:de:ef:91:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Apr 17 08:00:26 2026 GMT
Not After : Apr 18 08:00:26 2026 GMT
Subject: CN=66caf3706980d53e25ed8efd0b8c4454e19c31f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:53:4d:0b:fe:14:db:b8:28:6f:fd:81:56:
ac:bf:0b:f2:fb:3f:cc:e8:8f:62:93:99:44:63:af:
66:b2:42:70:58:68:c6:3e:4f:e3:9d:5c:9b:bd:d6:
d5:63:35:38:d8:d6:0b:29:87:ad:e2:65:2a:79:ce:
b2:a5:34:8b:34:ca:c9:4c:7c:c8:60:15:97:48:bd:
e8:e0:78:82:6e:9e:70:d2:29:ef:d6:ef:2e:7c:89:
45:af:02:3c:4d:c6:41:02:19:34:de:1f:a9:0a:be:
14:77:8e:4d:37:0d:79:d3:fc:56:67:ed:ed:f7:67:
56:2c:f6:7b:cd:7f:12:91:77:d1:e6:98:a0:e5:a4:
a3:78:80:d2:2c:b0:26:84:ec:4c:00:d8:5a:9d:f8:
d7:16:55:1b:e4:0c:7c:f7:65:a2:12:df:40:f3:9f:
0f:dc:b7:b2:1f:17:87:57:f4:0f:68:5a:bb:05:57:
67:11:ed:76:ce:f9:a7:e1:3c:e4:02:54:8d:ec:86:
7c:76:68:9e:ca:3f:5f:a8:42:21:bb:d5:38:67:48:
2d:bc:83:af:f4:92:74:7a:32:5a:61:f2:3f:5b:ca:
5e:a4:3f:63:7f:7c:c2:d4:35:fb:70:1a:d9:45:6e:
d4:6c:29:06:48:e7:23:b5:f5:6b:09:87:f0:85:a1:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CA:F3:70:69:80:D5:3E:25:ED:8E:FD:0B:8C:44:54:E1:9C:31:F6
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fa:45:59:02:81:f6:4a:76:0f:c5:fd:e7:de:3e:ef:74:98:
b1:e6:32:00:07:4f:1f:5d:c0:0a:e9:a3:f6:e5:40:ba:ee:90:
ba:5e:e3:5c:9b:4d:0d:93:d4:e7:d3:14:33:88:08:d6:3d:0d:
18:57:3d:0d:3d:25:42:f2:32:9b:a5:d8:49:0b:e8:bc:03:c6:
70:5c:0f:9f:37:df:cb:21:3d:e2:5a:ee:67:2c:ea:11:0b:60:
19:6a:d2:23:e9:89:2b:5e:7c:43:ef:8d:2b:50:b1:ef:66:2a:
ba:0d:81:09:9e:1f:d8:9c:61:77:82:09:9e:34:8c:19:57:c2:
c7:64:49:c3:d6:6c:30:c3:b9:c6:a0:23:f6:cd:2a:3c:14:19:
9d:00:c1:16:f2:b3:24:bb:38:77:dd:8f:84:8f:02:f4:d3:61:
6d:be:22:02:8f:97:8c:16:63:e5:45:e4:e0:28:6c:9d:27:62:
e9:40:88:e3:8b:8c:21:d6:ff:ff:34:c6:87:fc:72:0d:1c:ad:
6e:fd:ab:fb:9f:fe:0c:b1:db:56:ee:13:e8:a8:37:1c:eb:89:
03:b0:37:82:5f:f5:7e:23:2d:b9:d3:db:ba:e3:8e:94:04:86:
02:63:ea:fd:03:9b:76:fb:0f:eb:d6:7c:6f:ba:58:40:df:8d:
af:9b:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:32 2026 by rpki-client