Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
File: gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json)
Hash identifier: AZbdhk8CazZbbJ8z39065ru3gahvziTXDR4pmPtheNw=
Subject key identifier: 33:C7:B7:08:EE:23:EA:0B:33:4F:D2:B3:48:B6:E7:3E:C9:49:90:E9
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Certificate issuer: /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial: 019D9BBF0BC94BC6BF95969515C530CFE41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
Manifest number: 1105
Signing time: Fri 17 Apr 2026 14:01:21 +0000
Manifest this update: Fri 17 Apr 2026 14:01:21 +0000
Manifest next update: Sat 18 Apr 2026 14:01:21 +0000
Files and hashes: 1: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: 9IbKuY6hr3MVeGaI/j/05Kxb85IekDXvMerQUs0sLDo=)
2: lHeFeB5XmUgMTZd-xp7pg5O2hRk.roa (hash: yDjRb/PwiyZiL5zE1UM9tbqgd31//MiOL1EvDdOA92U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:0b:c9:4b:c6:bf:95:96:95:15:c5:30:cf:e4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Validity
Not Before: Apr 17 14:01:21 2026 GMT
Not After : Apr 18 14:01:21 2026 GMT
Subject: CN=33c7b708ee23ea0b334fd2b348b6e73ec94990e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:b7:87:c0:0e:bf:fc:87:e3:35:74:06:d2:
fe:05:82:3e:87:e8:38:79:cc:be:17:3e:b8:29:63:
82:8b:c0:b6:54:5f:cc:ea:69:56:a4:e1:f5:c4:d7:
79:24:60:4a:28:95:f5:67:10:51:4c:73:9b:2c:7f:
ff:a5:fe:49:70:66:a0:45:85:5c:e2:18:ff:88:e0:
fc:00:46:bb:c3:ce:72:51:ad:b9:b2:0e:56:ef:d3:
62:ca:b6:c2:e7:d2:34:71:6d:ec:8f:37:4f:d6:61:
0e:1e:34:78:d5:5f:4c:62:30:cf:75:fc:cc:91:a8:
66:9a:6b:dd:1c:9a:78:35:91:7f:24:69:9d:ce:eb:
0a:09:00:8d:30:38:37:35:2b:39:b1:b4:fc:58:17:
ea:a2:52:2f:8e:c8:42:f0:7a:b4:60:4f:f4:16:f6:
5f:4f:0b:52:a3:55:0a:90:af:4a:af:06:77:b3:ed:
13:ba:e9:13:c1:78:ff:89:6f:b2:0a:22:9c:54:6e:
1d:59:65:42:c2:8e:2b:01:1c:28:c4:d0:70:7a:a7:
1a:dc:d4:96:95:da:9d:9f:92:ec:3d:97:6c:c4:ca:
c2:7f:dc:b0:90:76:13:15:dc:1b:61:9f:ed:51:10:
62:a8:af:11:15:89:00:42:05:c2:4e:9d:57:ff:88:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:B7:08:EE:23:EA:0B:33:4F:D2:B3:48:B6:E7:3E:C9:49:90:E9
X509v3 Authority Key Identifier:
keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c7:77:aa:42:e6:07:9f:e1:23:9f:6c:cf:1f:ea:93:a4:35:
f1:e6:5e:4a:ba:8d:86:15:f6:e7:8b:ac:a3:74:f3:0b:ef:e7:
e9:84:e4:4c:c7:a0:93:61:59:5b:c0:92:6f:65:cc:3b:3a:b0:
0f:48:6a:ec:5f:25:2c:73:c2:9a:44:0b:f0:e2:f5:d8:53:a4:
d8:c9:50:c3:7d:01:e3:fd:7d:d2:70:29:62:e7:eb:bc:40:55:
4f:c4:f7:47:46:31:f0:d8:c9:ff:b1:2d:74:da:90:1b:34:08:
e1:a3:ba:d0:d4:ad:a4:97:44:dd:e1:dc:e8:65:80:fc:a7:59:
14:95:90:25:40:49:4f:f7:2f:23:0e:57:ff:46:4f:39:41:e3:
f7:59:2b:e9:17:c3:76:ff:79:fe:9c:42:42:76:a8:61:ee:e2:
52:45:9e:d0:71:a8:dc:7b:a7:dc:47:15:f4:09:b0:3a:84:70:
3e:3a:c3:f5:51:76:98:96:6b:f8:4e:c6:91:b2:6f:e0:08:d1:
07:89:a9:8e:91:82:ff:5c:8c:bd:50:91:33:30:6f:14:43:d9:
1a:d0:9b:5f:2a:b8:a1:c7:e1:84:bc:22:43:9f:e4:2f:c9:03:
24:97:ad:63:25:72:b9:3a:97:5c:75:f9:cf:8a:67:75:32:95:
ec:db:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:40 2026 by rpki-client