Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
File: GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft (raw, json)
Hash identifier: Y2xE5af6B8PlAQPugn4aW9oxzKncpH8WSnBLHeVL3kg=
Subject key identifier: 86:CC:7F:D3:5C:41:B6:7A:82:82:3B:35:A4:53:5C:81:82:3C:F3:37
Authority key identifier: 19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
Certificate issuer: /CN=196628617c00e8dff20ca6699313af79fad0afc6
Certificate serial: 019D9AE333518E7F32D31598A5A44FFC8D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
Manifest number: 1187
Signing time: Fri 17 Apr 2026 10:01:14 +0000
Manifest this update: Fri 17 Apr 2026 10:01:14 +0000
Manifest next update: Sat 18 Apr 2026 10:01:14 +0000
Files and hashes: 1: GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl (hash: 7Wv/cJTDow0vWH+9UUpldYdF8lXqQwtbEedYBIWuq30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:33:51:8e:7f:32:d3:15:98:a5:a4:4f:fc:8d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196628617c00e8dff20ca6699313af79fad0afc6
Validity
Not Before: Apr 17 10:01:14 2026 GMT
Not After : Apr 18 10:01:14 2026 GMT
Subject: CN=86cc7fd35c41b67a82823b35a4535c81823cf337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:9f:1e:72:9f:fb:f7:a7:3f:ce:fe:9c:04:
24:2d:24:c5:a4:22:82:bb:d8:2c:98:d4:34:42:5f:
c0:46:f7:1a:15:35:30:b1:6b:f9:13:85:14:d0:dd:
42:8a:d7:52:82:1b:f3:bf:d9:96:3d:0e:77:23:71:
5b:e2:97:66:30:f4:d7:b3:20:83:73:30:21:fd:c3:
9a:0a:bb:88:35:d4:9d:e0:51:c5:01:d6:e6:28:82:
80:b3:15:38:3e:50:b1:f5:d4:da:ae:2b:9e:bb:75:
94:5b:1c:87:74:0d:b9:61:56:d8:8c:83:cc:0a:46:
7d:66:45:ba:b6:ef:54:91:44:82:11:21:f6:9d:d2:
df:55:bf:7e:06:ad:3d:a3:11:fb:67:06:37:c8:8d:
31:0f:c6:2e:aa:7a:86:60:a4:26:7f:16:c5:13:20:
13:a6:4d:ab:63:7e:40:c9:21:f3:71:0d:5c:3b:91:
cf:96:b2:d3:74:e6:00:38:97:3c:bc:32:f6:b2:11:
0e:9e:4b:56:39:21:4e:24:7a:58:90:b1:1c:76:de:
4f:49:03:8c:db:ed:a4:fe:93:ac:67:b0:34:d0:5b:
c7:14:ee:72:1c:d7:88:48:a1:eb:84:7b:fe:be:dd:
f3:82:c5:f9:53:7b:0f:80:dd:30:65:4a:02:d0:19:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CC:7F:D3:5C:41:B6:7A:82:82:3B:35:A4:53:5C:81:82:3C:F3:37
X509v3 Authority Key Identifier:
keyid:19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ea:01:9a:0b:ce:b7:d0:97:7a:c8:a2:44:80:b1:5b:ed:2e:
f3:98:7a:af:58:a6:e0:58:e4:2b:3d:f6:ae:06:5d:87:7f:e9:
db:51:82:36:8e:45:7a:ef:a9:9c:6d:88:a6:bf:3e:2a:a9:5f:
68:38:a2:8d:72:b5:02:e6:d5:21:d6:38:e0:3d:52:08:6a:0c:
77:00:57:44:0b:13:50:84:88:63:26:1d:a6:8e:33:fd:c8:cc:
1a:be:ab:c2:78:e0:9f:11:99:30:b6:55:50:d0:ca:26:ee:e5:
fe:71:3f:96:77:d9:91:ac:3f:29:47:72:3b:98:26:a4:09:06:
1e:c7:f0:09:0e:19:0d:5b:57:0d:ff:80:f9:b8:87:cc:12:cf:
e3:c5:20:7e:d6:7f:2c:b7:df:dd:d8:e3:fc:4a:3b:37:7f:6e:
e3:75:60:dd:22:9b:a6:37:71:44:b5:7d:56:58:c4:11:d1:e6:
cb:50:69:18:59:6a:6e:c4:c3:12:6c:db:b5:b4:8c:7d:f0:b9:
46:76:54:50:fb:46:39:bf:22:26:d4:eb:7c:12:12:20:60:fe:
0b:9c:e8:19:16:47:cb:73:e8:05:b1:7b:b1:c7:ac:20:e5:23:
3e:a1:4a:2b:1c:68:71:a6:2c:19:2c:74:94:be:0d:95:fc:bc:
e0:a0:fe:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4zNRjn8y0xWYpaRP/I1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjYyODYxN2MwMGU4ZGZmMjBjYTY2OTkzMTNhZjc5ZmFk
MGFmYzYwHhcNMjYwNDE3MTAwMTE0WhcNMjYwNDE4MTAwMTE0WjAzMTEwLwYDVQQD
Eyg4NmNjN2ZkMzVjNDFiNjdhODI4MjNiMzVhNDUzNWM4MTgyM2NmMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRafHnKf+/enP87+nAQkLSTFpCKC
u9gsmNQ0Ql/ARvcaFTUwsWv5E4UU0N1CitdSghvzv9mWPQ53I3Fb4pdmMPTXsyCD
czAh/cOaCruINdSd4FHFAdbmKIKAsxU4PlCx9dTariueu3WUWxyHdA25YVbYjIPM
CkZ9ZkW6tu9UkUSCESH2ndLfVb9+Bq09oxH7ZwY3yI0xD8YuqnqGYKQmfxbFEyAT
pk2rY35AySHzcQ1cO5HPlrLTdOYAOJc8vDL2shEOnktWOSFOJHpYkLEcdt5PSQOM
2+2k/pOsZ7A00FvHFO5yHNeISKHrhHv+vt3zgsX5U3sPgN0wZUoC0BkbIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbMf9NcQbZ6goI7NaRTXIGCPPM3MB8GA1UdIwQY
MBaAFBlmKGF8AOjf8gymaZMTr3n60K/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dZb1lYd0E2Tl95REtacGt4T3ZlZnJRcjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iMDlhY2ItNjM2Yy00NTU3LTgwYTgt
NmQ5Mjk2OTVhNWJjLzEvR1dZb1lYd0E2Tl95REtacGt4T3ZlZnJRcjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iMDlhY2ItNjM2Yy00NTU3LTgwYTgtNmQ5Mjk2OTVhNWJj
LzEvR1dZb1lYd0E2Tl95REtacGt4T3ZlZnJRcjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+oBmgvO
t9CXesiiRICxW+0u85h6r1im4FjkKz32rgZdh3/p21GCNo5Feu+pnG2Ipr8+Kqlf
aDiijXK1AubVIdY44D1SCGoMdwBXRAsTUISIYyYdpo4z/cjMGr6rwnjgnxGZMLZV
UNDKJu7l/nE/lnfZkaw/KUdyO5gmpAkGHsfwCQ4ZDVtXDf+A+biHzBLP48UgftZ/
LLff3djj/Eo7N39u43Vg3SKbpjdxRLV9VljEEdHmy1BpGFlqbsTDEmzbtbSMffC5
RnZUUPtGOb8iJtTrfBISIGD+C5zoGRZHy3PoBbF7scesIOUjPqFKKxxocaYsGSx0
lL4Nlfy84KD+xw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:05 2026 by rpki-client