Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft
File: gjwMX13-U9s74NqofrgP8jOghVU.mft (raw, json)
Hash identifier: tKa5o7HvEFd8NaVHNGS5kq9dRAHS4taJA7Y2O99USMA=
Subject key identifier: AF:93:20:ED:64:BD:68:21:8D:76:91:8E:F9:82:45:93:DE:50:D5:FD
Authority key identifier: 82:3C:0C:5F:5D:FE:53:DB:3B:E0:DA:A8:7E:B8:0F:F2:33:A0:85:55
Certificate issuer: /CN=823c0c5f5dfe53db3be0daa87eb80ff233a08555
Certificate serial: 019DA4538DDD9057CB9FF0DBD767F8931F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft
Manifest number: E6
Signing time: Sun 19 Apr 2026 06:00:32 +0000
Manifest this update: Sun 19 Apr 2026 06:00:32 +0000
Manifest next update: Mon 20 Apr 2026 06:00:32 +0000
Files and hashes: 1: V34l5uFzYw3kKb1sTTfoMorRyxQ.asa (hash: MTaS52CxVyh3Tkcvp3/p/Y0eCYEdwzDZPEbKIi5PiFI=)
2: gjwMX13-U9s74NqofrgP8jOghVU.crl (hash: 9bRqcLDM0bzKLbpo0hkNa0tgwXinBr9FL3iBGGSgziI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:8d:dd:90:57:cb:9f:f0:db:d7:67:f8:93:1f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823c0c5f5dfe53db3be0daa87eb80ff233a08555
Validity
Not Before: Apr 19 06:00:32 2026 GMT
Not After : Apr 20 06:00:32 2026 GMT
Subject: CN=af9320ed64bd68218d76918ef9824593de50d5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:fc:b9:15:1f:fe:b6:88:50:b6:65:3d:c5:
68:61:47:7e:d9:75:57:a9:64:cf:94:ce:17:e5:5c:
ad:4f:64:d0:dc:da:5a:11:16:23:b2:6a:e0:db:0d:
4c:8e:6e:94:13:4e:ca:3a:75:98:a6:48:52:e0:46:
5b:81:82:81:e6:af:f3:a7:1c:fd:db:b9:76:51:f1:
6f:b1:c8:e0:c3:50:36:d3:f5:70:de:2c:52:7e:c1:
c2:f2:dc:ad:6d:b0:b1:94:d5:e7:90:b3:29:d0:07:
86:d5:63:c3:1f:b1:92:0e:2c:c1:7c:0e:be:65:64:
7d:f1:36:1a:4c:c5:2e:eb:d6:b1:67:cd:4c:54:94:
92:fc:bc:ce:6b:b6:d4:54:e3:c4:a6:45:30:42:09:
d4:dc:70:77:aa:48:e4:25:35:2d:fe:cc:04:40:89:
83:63:ca:0c:34:d4:2e:20:99:37:50:c9:a0:9d:f3:
63:6c:33:b5:1c:78:69:66:91:e0:2f:c2:e4:17:b8:
0c:f4:77:63:54:46:48:bd:ca:d8:1a:f3:d7:c2:99:
fd:35:07:d4:04:70:30:f7:85:ed:c7:9d:3a:c8:ef:
3e:6c:23:ee:f1:85:3b:71:db:c4:88:09:99:a7:fb:
b5:43:3d:0d:ff:3e:7c:a3:7d:83:17:2f:5d:1a:ea:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:93:20:ED:64:BD:68:21:8D:76:91:8E:F9:82:45:93:DE:50:D5:FD
X509v3 Authority Key Identifier:
keyid:82:3C:0C:5F:5D:FE:53:DB:3B:E0:DA:A8:7E:B8:0F:F2:33:A0:85:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c5:49:6e:bb:f1:9c:7a:78:1d:e5:fb:7f:9d:24:a4:11:45:
73:f8:c2:a9:91:48:b1:b7:2e:93:f6:4a:99:d5:e3:89:d5:03:
1f:96:29:56:c9:a4:50:a6:1d:eb:87:9a:5a:3c:67:bd:3f:2d:
ef:1d:11:03:1f:64:a3:de:f9:32:c4:6e:d4:00:36:c3:26:e9:
76:0a:3a:02:f1:8e:47:9e:ae:da:54:8e:cf:a3:f2:be:75:6c:
0e:ff:df:0c:50:66:f9:6b:8d:fa:84:1c:04:2e:02:da:9e:1e:
a4:f6:ec:3c:e3:47:33:b7:50:1e:dd:47:8c:a0:a3:14:04:7c:
b6:af:fd:0e:86:54:36:e6:cd:9f:00:74:78:bd:6e:12:58:1e:
fa:4f:f4:85:6e:be:29:58:e6:0c:20:24:2a:6e:a5:ee:07:ec:
26:56:e5:9d:53:6a:c8:94:bb:00:b5:7b:fb:73:69:58:c6:ba:
b7:72:4c:ef:f6:4e:1f:76:cc:ed:51:3e:f0:89:18:f8:4f:1d:
9f:af:19:75:8c:67:fc:0c:cd:95:62:2e:6f:24:8c:9f:0a:ea:
86:dd:2d:0f:6e:d2:08:91:c5:ec:af:76:53:e8:40:b9:ba:45:
6b:6a:97:27:5d:40:62:10:28:12:e5:08:33:7b:5e:2e:95:9a:
f2:cc:2b:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU43dkFfLn/Db12f4kx8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyM2MwYzVmNWRmZTUzZGIzYmUwZGFhODdlYjgwZmYyMzNh
MDg1NTUwHhcNMjYwNDE5MDYwMDMyWhcNMjYwNDIwMDYwMDMyWjAzMTEwLwYDVQQD
EyhhZjkzMjBlZDY0YmQ2ODIxOGQ3NjkxOGVmOTgyNDU5M2RlNTBkNWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJz8uRUf/raIULZlPcVoYUd+2XVX
qWTPlM4X5VytT2TQ3NpaERYjsmrg2w1Mjm6UE07KOnWYpkhS4EZbgYKB5q/zpxz9
27l2UfFvscjgw1A20/Vw3ixSfsHC8tytbbCxlNXnkLMp0AeG1WPDH7GSDizBfA6+
ZWR98TYaTMUu69axZ81MVJSS/LzOa7bUVOPEpkUwQgnU3HB3qkjkJTUt/swEQImD
Y8oMNNQuIJk3UMmgnfNjbDO1HHhpZpHgL8LkF7gM9HdjVEZIvcrYGvPXwpn9NQfU
BHAw94Xtx506yO8+bCPu8YU7cdvEiAmZp/u1Qz0N/z58o32DFy9dGuqrkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+TIO1kvWghjXaRjvmCRZPeUNX9MB8GA1UdIwQY
MBaAFII8DF9d/lPbO+DaqH64D/IzoIVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2p3TVgxMy1VOXM3NE5xb2ZyZ1A4ak9naFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wMjU5ODMtNmU1ZS00ZDMzLTg2M2It
YmU2NjQyN2VhYmZlLzEvZ2p3TVgxMy1VOXM3NE5xb2ZyZ1A4ak9naFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wMjU5ODMtNmU1ZS00ZDMzLTg2M2ItYmU2NjQyN2VhYmZl
LzEvZ2p3TVgxMy1VOXM3NE5xb2ZyZ1A4ak9naFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8VJbrvx
nHp4HeX7f50kpBFFc/jCqZFIsbcuk/ZKmdXjidUDH5YpVsmkUKYd64eaWjxnvT8t
7x0RAx9ko975MsRu1AA2wybpdgo6AvGOR56u2lSOz6PyvnVsDv/fDFBm+WuN+oQc
BC4C2p4epPbsPONHM7dQHt1HjKCjFAR8tq/9DoZUNubNnwB0eL1uElge+k/0hW6+
KVjmDCAkKm6l7gfsJlblnVNqyJS7ALV7+3NpWMa6t3JM7/ZOH3bM7VE+8IkY+E8d
n68ZdYxn/AzNlWIubySMnwrqht0tD27SCJHF7K92U+hAubpFa2qXJ11AYhAoEuUI
M3teLpWa8swrcA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:53:58 2026 by rpki-client