Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: ccxC8VR/olPyNs+NZM+nq4Loz7K8TXjDcYoPbJlFqNE=
Subject key identifier: FE:1D:55:29:B8:FA:AB:62:4A:A9:FB:54:1D:73:7D:3E:50:60:28:28
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 019D98F457A49F89AA133167C78B2C82B535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:00:43 +0000
Manifest this update: Fri 17 Apr 2026 01:00:43 +0000
Manifest next update: Sat 18 Apr 2026 01:00:43 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: bpGEpzvgp1k3r0Weh8Co1nBjrAwMrzx7V0SwrQQRaX0=)
2: QjFn6_kap5YT5wJGjuWydP9ovDM.roa (hash: /kI/7NdcivqH51KbH9Az38dv1Sm+7SZzBZyhFKOG6OY=)
3: U8WN1zqZlitTPF__hjyiuUy0R1c.roa (hash: mDHRfN2i8bM/0SSYCQob7Dr24tBbE96JKVBgc95p8M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:57:a4:9f:89:aa:13:31:67:c7:8b:2c:82:b5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Apr 17 01:00:43 2026 GMT
Not After : Apr 18 01:00:43 2026 GMT
Subject: CN=fe1d5529b8faab624aa9fb541d737d3e50602828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:00:a6:7e:ab:c9:63:c3:ee:41:c9:85:a1:
4a:8c:9d:e1:ff:14:1e:3d:c6:ce:d5:e2:d4:26:5c:
bb:fd:b9:ef:8c:46:49:6e:b3:68:40:34:7a:ad:7f:
8f:35:92:59:ae:01:ed:65:99:65:d9:fb:ee:4f:46:
01:69:db:ad:b3:41:af:56:a4:f8:da:5b:55:c7:6e:
77:cc:18:f7:fa:1d:c2:6c:ba:c2:b9:af:ed:df:b2:
fd:e9:b5:3f:6a:2d:22:15:ac:8b:91:12:7e:13:27:
05:6f:2a:63:b4:66:c4:ef:dc:d1:7e:3d:40:80:eb:
de:9b:5b:36:68:72:4b:53:f7:2e:4d:6f:7f:a3:1f:
46:bf:71:31:96:1d:8b:9b:45:52:1a:3e:b7:34:ba:
97:d9:dc:e5:a8:f5:01:04:10:a9:f2:85:c0:be:f8:
d1:32:6b:cf:15:ff:58:aa:2b:0d:b7:e0:d5:40:90:
e7:47:5f:4e:20:5b:1c:a7:50:83:b6:61:ca:d8:52:
16:06:2b:36:61:eb:ba:e8:d1:32:2e:aa:25:0e:d7:
ed:87:74:42:cf:4c:7b:ce:69:e0:a7:95:1d:15:a4:
18:0b:16:10:e5:c7:2f:8f:cb:b9:2d:55:d6:fb:a0:
ae:a4:bb:ab:54:30:95:a7:a3:7c:ee:ea:03:48:5e:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1D:55:29:B8:FA:AB:62:4A:A9:FB:54:1D:73:7D:3E:50:60:28:28
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:df:3a:bb:89:f4:48:bc:a8:46:c6:0f:52:8f:cc:71:d5:18:
ae:d0:31:79:10:14:64:22:13:cd:f3:3a:af:e1:63:39:c8:5f:
3b:f2:c5:f3:96:cd:6c:b4:2e:70:a9:fa:0f:99:60:f9:b2:3a:
f1:88:01:15:7f:3a:d9:5a:e9:08:b0:8d:0b:ac:e9:13:6d:e7:
a6:c6:bb:02:70:96:b1:70:0f:d8:51:e3:d4:70:dc:58:5f:e3:
39:46:71:6a:f4:6e:27:aa:58:bd:95:91:6a:be:48:28:c7:97:
f0:8c:a1:67:10:ba:ce:81:ec:d6:77:17:df:c2:9b:8d:56:6e:
fa:76:0e:e7:2a:9e:ab:a9:75:f6:e0:c0:96:c8:79:8f:67:8b:
ce:82:2f:02:1a:d4:1b:41:fb:3e:b2:13:11:cc:f7:4f:ba:0e:
63:7a:86:6f:56:50:75:30:f6:b0:09:e5:ba:a5:c5:8e:51:2a:
5b:48:8a:32:e3:9c:3a:93:32:24:2d:5f:10:35:69:ad:36:a2:
64:6b:2a:a5:9a:89:13:06:5f:44:90:9a:80:0c:cf:81:0c:2e:
d3:ba:7b:6b:f4:ff:c0:c8:e0:d7:fe:b6:a9:29:b5:78:95:be:
46:d9:f5:d3:99:1f:16:08:cf:35:87:19:17:76:22:b4:7c:8e:
0a:8d:b6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:40:42 2026 by rpki-client