Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: NamK2PcsX9aEsQyzVFnzab6UNz7fJDjTCUMxHY7t2+c=
Subject key identifier: D4:54:84:CF:E6:22:EE:8E:60:77:11:3B:FD:18:BB:F6:95:8E:F5:76
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 019D679B3993D163FC14953DDFC230562B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0E2D
Signing time: Tue 07 Apr 2026 11:01:59 +0000
Manifest this update: Tue 07 Apr 2026 11:01:59 +0000
Manifest next update: Wed 08 Apr 2026 11:01:59 +0000
Files and hashes: 1: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: y9TsKO0K2Dr7RJdJcrep16OPPS0OyM6KPbRuqj0QEBw=)
2: ioSKJKkF_4HM_F6u6RJnkLY1uWU.roa (hash: WbXNH1FTymiYyoPgw712is108gr5GM8N98thfxq0yjg=)
3: s7B9p4vTJAow4sBYhbnToQXwFKo.roa (hash: nHDCoe/MNgEdbVoOhEHnJFTP5BTnyS6pKwNLw3+w7aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 11:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:9b:39:93:d1:63:fc:14:95:3d:df:c2:30:56:2b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Apr 7 11:01:59 2026 GMT
Not After : Apr 8 11:01:59 2026 GMT
Subject: CN=d45484cfe622ee8e6077113bfd18bbf6958ef576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:98:f3:b1:7b:f5:e9:a4:be:a3:64:9b:7b:90:
04:89:e5:d0:e5:f1:0b:81:48:d3:29:fb:a8:e4:3f:
20:0b:3f:3a:2b:42:ad:4f:35:99:aa:93:bb:2c:c0:
22:61:91:ba:30:48:e7:6f:dc:37:66:9f:10:bf:0c:
51:5b:9f:00:a5:94:43:55:74:b8:60:9a:70:39:ba:
2c:89:63:af:3b:bd:4c:2b:df:26:70:62:6b:56:d9:
62:4e:d5:aa:6e:1c:7b:71:70:e6:f6:f4:08:80:f2:
d0:15:8d:08:20:7e:f3:77:56:98:f2:be:21:ed:0d:
67:57:b6:9c:15:b2:d0:fb:4e:01:f4:eb:4e:85:1b:
eb:5a:3e:73:57:47:ed:fd:d3:f2:5f:0a:ef:04:16:
79:ef:c1:b5:bb:e4:1e:62:05:2a:31:d5:0a:87:91:
1c:49:75:39:1e:34:b8:aa:f8:b6:32:e9:4d:b8:e1:
40:9b:b5:e9:59:0d:0b:7b:e6:1e:6d:69:89:31:30:
08:f3:f7:87:59:6b:94:3c:e0:c3:cd:2e:85:de:40:
87:5f:58:6c:9e:a9:38:a0:4f:c7:9d:30:64:26:67:
66:0b:f4:db:06:57:b9:c2:4d:b0:94:84:ff:f0:98:
b1:a4:24:98:99:45:1e:81:23:27:c5:bf:a3:a4:81:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:54:84:CF:E6:22:EE:8E:60:77:11:3B:FD:18:BB:F6:95:8E:F5:76
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:75:33:01:3e:76:8d:02:39:ad:f5:1a:06:b8:13:26:8d:a0:
dc:b7:92:5a:e6:26:ae:2e:b5:78:b9:5f:b0:56:3d:86:a9:48:
65:9f:39:0d:12:78:2f:c9:da:01:50:b6:8f:b6:05:c2:c1:ea:
89:0b:3e:ce:92:ca:19:03:d5:6b:69:a4:de:03:13:88:59:60:
2b:2e:85:37:a0:ce:c4:ad:a4:1d:1c:5e:cc:95:6d:27:82:df:
ed:ff:d4:76:35:da:3b:e1:9e:46:f7:e2:75:1f:94:ec:d4:d1:
33:78:17:01:20:8a:92:a1:d0:e7:21:1f:b0:8f:a0:be:05:8e:
07:23:a4:b4:e3:3d:33:4e:31:73:1b:bd:e2:19:a0:03:ff:38:
98:8a:2c:d2:2a:8f:5b:32:e1:5c:cc:25:fd:4f:c0:1b:c6:65:
54:22:bd:d5:a1:ee:7c:6d:28:ee:e9:c8:d2:2b:89:45:c3:83:
4d:14:41:ce:61:10:fd:1d:be:2c:87:1e:99:f9:81:66:2e:4f:
dd:a8:47:73:39:ab:53:db:e8:a4:8a:16:c5:37:a1:14:ab:fa:
26:86:04:09:e2:ed:d0:91:17:50:45:63:8e:ea:d2:0d:7f:f6:
76:e1:df:19:9d:3c:6c:e9:d0:61:41:b7:32:9d:b9:49:b8:54:
98:11:6d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:12:57 2026 by rpki-client