Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
File: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json)
Hash identifier: hlvSKQI6PweUF+xWpZ4/vGasXy5isZWXz5wU3u5osMU=
Subject key identifier: F8:59:02:8F:01:F6:6B:CE:63:D4:05:31:C5:48:98:9D:77:A2:21:0F
Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
Certificate issuer: /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Certificate serial: 019D98F4A2D15C5BAECDC5E92E6D95EA5155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
Manifest number: 117E
Signing time: Fri 17 Apr 2026 01:01:02 +0000
Manifest this update: Fri 17 Apr 2026 01:01:02 +0000
Manifest next update: Sat 18 Apr 2026 01:01:02 +0000
Files and hashes: 1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: 1CVevpUzuxnjGHa6w4fC7unA0o/iR7qoGi/ThwFKkDQ=)
2: sy-wPXvfKLWfZlxG6JFjMdz2jc4.roa (hash: hlaNZxdKE60uOdHncJsjvUxLctHZFlI5jG9Xoxf9FL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a2:d1:5c:5b:ae:cd:c5:e9:2e:6d:95:ea:51:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Validity
Not Before: Apr 17 01:01:02 2026 GMT
Not After : Apr 18 01:01:02 2026 GMT
Subject: CN=f859028f01f66bce63d40531c548989d77a2210f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:37:4e:94:52:32:d9:6b:01:c2:65:ba:20:
d9:46:df:8a:0b:de:22:cb:73:7b:a8:9a:e7:71:66:
bc:4d:98:c8:cb:ff:d5:24:5f:3c:07:f4:97:14:20:
a0:15:5b:19:b0:81:b7:83:0e:2f:b1:05:a1:a4:2b:
ad:60:83:b4:33:51:98:b0:b4:0d:08:4a:41:48:f1:
06:9c:83:6a:9b:47:d9:56:c8:66:8c:ef:9b:58:a7:
c7:ff:82:bc:00:e3:6b:93:06:f8:85:fd:7d:99:72:
a7:aa:fc:d0:74:0d:55:12:55:5a:47:9e:a2:36:39:
ef:76:30:21:9f:a1:37:d5:e5:4e:02:27:90:44:4a:
f7:26:ab:6e:90:3f:bf:f1:9c:bb:0f:7d:14:07:dc:
a4:c8:0f:07:66:e4:7f:f5:25:6b:96:a8:62:45:ca:
a5:f0:2b:b5:85:02:e2:ce:53:cd:86:6c:33:3f:2d:
2b:40:fb:3c:de:bd:28:49:f4:cb:34:e1:71:61:63:
4c:94:22:0f:31:62:81:65:e0:d5:40:00:f9:dc:41:
ff:a5:78:4a:04:c5:e1:fa:65:b8:e1:ad:70:8d:8b:
a3:88:b0:37:5f:8d:2e:40:eb:7d:4f:7a:4e:e3:7e:
29:f7:a7:b2:91:a2:1d:78:c2:6a:c5:9f:04:9f:ab:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:59:02:8F:01:F6:6B:CE:63:D4:05:31:C5:48:98:9D:77:A2:21:0F
X509v3 Authority Key Identifier:
keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:fb:3f:b8:51:c9:3d:08:58:11:ed:6a:71:27:3e:84:ec:f1:
3a:f6:d2:18:80:88:30:26:33:2d:33:55:c0:e6:1c:50:cf:1a:
59:5f:2e:9f:ca:0a:45:84:9a:f9:92:08:39:dd:c6:05:27:3a:
18:f3:36:84:d6:57:e5:38:e4:67:a1:64:fd:ba:8d:71:22:1b:
ab:d3:73:12:3d:67:55:37:1f:96:61:d7:61:e6:bd:9f:6f:d7:
3e:f5:f3:51:1e:0f:7b:3f:2a:e0:65:0f:ea:c9:6c:f1:0b:0f:
7b:9c:28:e0:33:1f:10:84:25:77:7c:d5:4e:57:c8:a5:93:b8:
3c:70:aa:60:da:af:a0:14:48:30:fb:3d:20:82:40:03:7c:53:
d6:20:72:b8:4e:9a:82:4b:65:90:a4:38:7f:99:fd:e2:34:79:
80:76:56:df:73:25:4a:86:da:e7:e5:c0:99:3d:1f:8c:a2:87:
8b:32:6a:fc:6c:bf:e9:a1:a1:fa:82:7a:d3:ef:f5:65:dd:aa:
c3:60:87:5b:4d:d4:01:c6:cd:bb:a4:f8:c2:85:8f:33:97:92:
c8:66:93:e3:66:3f:33:0e:88:50:9b:2d:3e:0b:e1:08:23:76:
be:1b:1f:d4:df:e1:47:93:e9:02:00:35:79:8f:a2:c3:9b:86:
9c:db:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:38 2026 by rpki-client