Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
File: Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json)
Hash identifier: gml/Pi94FHvUZgrVb2+TqUUAZz35vvNT3R/Soo2Ff0w=
Subject key identifier: 1C:C6:97:CB:6D:87:A3:B5:52:FB:43:54:F3:0C:D0:A3:88:F6:4E:FA
Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
Certificate issuer: /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Certificate serial: 019D98F4AD2E9CC93B652FB806865613B469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
Manifest number: 0BED
Signing time: Fri 17 Apr 2026 01:01:05 +0000
Manifest this update: Fri 17 Apr 2026 01:01:05 +0000
Manifest next update: Sat 18 Apr 2026 01:01:05 +0000
Files and hashes: 1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: i0gHofbh6tv26JAhClYHKNJm/hAwcV54vLTJIyblacc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ad:2e:9c:c9:3b:65:2f:b8:06:86:56:13:b4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Validity
Not Before: Apr 17 01:01:05 2026 GMT
Not After : Apr 18 01:01:05 2026 GMT
Subject: CN=1cc697cb6d87a3b552fb4354f30cd0a388f64efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:d2:2e:04:d7:db:9b:aa:d8:2b:29:90:61:
67:2a:68:48:a6:a1:00:a8:36:98:f3:2e:a8:d2:4b:
8a:7e:88:77:bd:f1:39:66:1b:7e:46:ea:de:ed:78:
cb:1f:7e:96:8d:f9:e0:eb:6a:e9:42:fc:c6:a3:5c:
1c:e5:b8:bf:1c:67:85:e0:a5:43:8b:d0:ee:da:9a:
4f:d4:32:e5:9d:bf:17:d2:cb:81:1b:1c:74:67:d1:
24:84:b4:db:9f:cf:dc:00:31:1e:f1:a3:91:5c:9b:
76:28:0e:3a:ff:57:b7:aa:f5:cc:a6:da:02:8d:3f:
0f:7a:2a:29:e9:2a:e9:1f:be:64:3e:c0:2c:a6:dd:
f0:27:f5:07:c7:c9:14:b4:c9:5b:ed:bb:03:a1:34:
2c:eb:2d:bf:a7:37:72:7a:73:9d:47:d8:42:93:32:
d9:6e:a0:31:66:27:6a:57:74:82:a4:a8:3e:a3:7d:
0e:5c:01:a7:bd:b9:6f:51:6c:13:1e:fa:73:83:e1:
f4:4b:78:99:c2:a3:b7:16:3e:64:f0:6c:60:3f:e5:
dc:3e:27:6e:5b:4f:04:83:bc:b7:cd:ff:6d:82:fe:
b1:55:1c:9c:35:2f:15:a5:b6:66:ce:01:36:71:df:
a2:c3:b5:f0:41:91:cc:db:6f:3d:2d:47:2f:6b:fa:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C6:97:CB:6D:87:A3:B5:52:FB:43:54:F3:0C:D0:A3:88:F6:4E:FA
X509v3 Authority Key Identifier:
keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:be:35:8a:30:a3:f7:f2:54:41:fd:28:d9:89:a5:99:14:6f:
a3:23:90:55:d0:ad:c0:a3:1f:a4:24:a6:d2:61:a8:29:79:5f:
33:c7:cc:b9:8a:1d:07:ed:6d:8b:27:2f:74:eb:c4:90:e4:03:
d4:72:93:5f:38:dc:51:20:a0:55:38:42:36:b3:b7:1b:42:3b:
87:a6:88:be:d0:6c:01:71:75:8d:3d:bb:1a:fa:ce:5b:79:8b:
cb:53:cf:34:df:35:7b:f6:1d:ec:6c:3d:e8:2b:5a:6c:09:bd:
95:8b:1c:f5:8b:11:25:f3:5e:a1:b8:8c:ff:de:29:c9:05:5c:
05:2c:20:28:12:c2:3a:e1:3c:75:e4:eb:de:34:9d:83:6f:f6:
a3:ff:05:62:64:68:13:9f:a0:54:c0:17:d0:c9:0f:33:17:6d:
99:7e:5b:1e:c6:ab:a3:70:48:67:b1:3e:a4:73:12:5f:91:b5:
cf:08:87:ea:6e:8e:bd:93:b7:6e:f4:1e:e2:71:00:0c:38:3f:
6c:f7:32:5c:77:7a:cf:94:e4:2f:5a:eb:15:a5:a3:8b:14:7c:
11:3c:9f:bc:e1:4d:e7:ca:43:5e:aa:74:39:5d:53:d5:ff:00:
34:7a:05:4e:6a:e6:63:f0:28:73:bc:ff:cd:92:9c:98:3e:7e:
9a:26:45:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:24:29 2026 by rpki-client