Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json)
Hash identifier: lFtp+cG2CqxKYxTIUDjFncQM6L1DhvZP3a6SJV2Hj8U=
Subject key identifier: C5:54:7F:2D:B2:D7:8B:9B:71:EE:AA:C8:0A:8D:35:6A:A2:D0:75:C1
Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159
Certificate serial: 019D98BDC92F6CBD448B65072D7E815977AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:01:07 +0000
Manifest this update: Fri 17 Apr 2026 00:01:07 +0000
Manifest next update: Sat 18 Apr 2026 00:01:07 +0000
Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: yilKmZ1hfXBMj+IEInk96I7ay7ohOLQ9ko1jgYVBlSk=)
2: _OEYR_NlTtbmQ4jWp8KafD4MvOk.roa (hash: 4XDRL8Ii1WLuqDpCaTnrPdX+U3rQ6Em8H+bJRAAY9Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c9:2f:6c:bd:44:8b:65:07:2d:7e:81:59:77:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1902391799337601331f5a12af11e9f4f6421159
Validity
Not Before: Apr 17 00:01:07 2026 GMT
Not After : Apr 18 00:01:07 2026 GMT
Subject: CN=c5547f2db2d78b9b71eeaac80a8d356aa2d075c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fb:66:8f:78:e5:5a:71:ce:d1:74:21:ea:82:
76:67:94:1c:b6:a1:21:1e:7e:61:e1:bc:5a:48:2d:
03:47:4f:92:66:aa:1e:f5:48:19:c7:aa:92:de:93:
e7:e9:74:62:c7:36:30:0f:bb:5e:04:a0:c4:5a:03:
73:76:42:63:ef:76:79:85:30:91:df:92:90:46:e4:
de:65:75:36:63:67:9c:64:2c:61:26:a2:75:51:0e:
65:19:fc:ba:8e:c9:59:95:d6:9f:1c:05:ed:2c:4b:
b3:31:be:cd:8b:7b:43:42:7a:ad:26:be:50:b3:d8:
8b:85:09:de:e0:8b:d5:41:1d:09:13:90:83:54:f6:
2c:ce:cc:43:0e:5c:fa:a5:3f:5f:a1:30:a4:ec:9d:
81:d3:4c:c0:ae:c4:48:4c:d1:35:d4:16:d2:09:81:
39:8c:7e:9c:21:fc:c8:9b:38:dc:06:2a:ec:72:47:
28:9c:3d:5d:32:27:38:e8:29:9e:df:ff:a1:e2:af:
41:80:c0:e9:b2:03:28:da:4d:14:c3:b2:be:71:08:
ad:0c:d3:a4:f5:6f:2a:ca:b5:0e:6b:0b:56:b2:4c:
7a:a6:5e:bf:01:b5:f4:11:17:ea:c7:e2:81:49:13:
45:73:03:d4:5b:16:c9:d5:41:87:59:67:01:92:ca:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:54:7F:2D:B2:D7:8B:9B:71:EE:AA:C8:0A:8D:35:6A:A2:D0:75:C1
X509v3 Authority Key Identifier:
keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5b:eb:36:40:96:f3:fe:78:34:7b:e0:91:fc:ef:a5:b7:a7:
05:ae:ab:fb:ae:23:4e:f1:61:fc:5f:7c:1d:6f:e3:40:91:e2:
52:f9:e7:3c:c6:80:c1:aa:e5:24:74:ee:60:24:20:55:0a:71:
93:4e:4e:ea:67:5e:5e:96:2d:ac:7e:53:9c:dd:f2:28:58:4c:
b1:46:ea:b6:d5:29:05:64:70:cc:d0:4b:74:74:09:dd:0f:cc:
53:4b:61:ce:be:af:7e:e7:24:20:c8:3f:6d:cc:bc:86:e6:0a:
eb:8b:ba:4a:a3:e6:31:ad:eb:72:f1:b6:4b:61:91:b0:e8:c1:
27:c8:e3:9d:28:c4:31:1c:16:70:ee:e2:5f:2f:26:03:9f:fe:
51:ea:26:8a:13:45:a7:9d:05:c1:49:0f:ba:60:43:1a:30:e1:
44:fa:2e:f5:7c:ca:e8:c6:07:3b:ca:b6:b5:c9:4d:50:4c:36:
ce:d0:47:e3:02:4e:da:f2:fd:3d:31:89:5e:33:78:25:ba:49:
84:73:ac:a2:91:e8:05:a0:46:98:f9:a3:a0:d9:70:14:01:45:
e8:46:23:5b:46:fa:1c:db:74:b9:02:26:2c:68:d7:88:42:7d:
16:2a:4f:b2:83:13:34:e8:5e:1f:e5:ea:ea:26:5f:9f:1a:4d:
92:9d:a9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:28 2026 by rpki-client