Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
File: GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft (raw, json)
Hash identifier: EnksuRZ7erj2Qj0U+Xj5GLAgyQtBV5svZnn2a3Q+hxg=
Subject key identifier: D4:65:14:23:8D:3E:2D:DB:AD:A3:8C:6F:F5:75:65:5A:10:C0:AD:D9
Authority key identifier: 18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
Certificate issuer: /CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Certificate serial: 019DDCFAD70B9E3B97DE8495FD850991403D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
Manifest number: 0166
Signing time: Thu 30 Apr 2026 06:01:59 +0000
Manifest this update: Thu 30 Apr 2026 06:01:59 +0000
Manifest next update: Fri 01 May 2026 06:01:59 +0000
Files and hashes: 1: GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl (hash: mYivFhluuVczXYib5qvTiXjRrXeLfFuQLKvC/znjU20=)
2: dKUSVy6IdXXRjgtpigNGU0J9jeU.asa (hash: CejzruUkEWq9zLEaoAabqikLpPGhjf75ZRntC5aAVpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:d7:0b:9e:3b:97:de:84:95:fd:85:09:91:40:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Validity
Not Before: Apr 30 06:01:59 2026 GMT
Not After : May 1 06:01:59 2026 GMT
Subject: CN=d46514238d3e2ddbada38c6ff575655a10c0add9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:b4:a8:90:9c:a6:37:35:47:43:12:1a:e6:
ad:77:35:38:9c:92:a8:6b:37:e8:b8:fc:aa:3f:de:
e9:4a:02:d2:7e:4d:39:f6:36:e7:cc:aa:fc:8f:6f:
0e:fd:c4:df:e7:1d:c0:4f:8e:dd:96:c4:a9:bf:d2:
b7:a3:0b:00:2a:7d:1f:e0:fd:4f:d1:b7:f6:15:2e:
3b:45:36:56:45:65:20:be:e4:09:2d:54:f0:58:97:
9c:83:6c:a1:04:ff:7c:db:d4:d8:b9:9a:78:d8:ef:
18:2d:a7:15:1f:77:de:fb:58:59:0e:2a:3c:27:c0:
85:c7:65:c5:00:17:c9:33:86:ae:96:20:e5:51:3d:
c6:3d:d6:d2:6f:a0:37:a9:36:19:da:c9:ec:0a:a1:
1e:8f:ba:52:ca:26:15:e5:b6:02:1f:10:e3:06:ff:
9d:8f:3c:81:fe:69:fc:7e:fe:c0:fc:ec:f0:a4:46:
61:65:b0:39:e8:85:1b:38:e0:a2:59:ab:fd:ea:07:
a9:49:57:df:6c:80:03:87:ca:27:18:b7:48:a6:d2:
98:4f:57:b4:df:e8:74:dc:b3:d3:d3:f2:38:ff:8e:
db:dd:ff:4f:3b:49:0a:37:ec:82:ea:e6:f9:62:a6:
09:30:46:7e:7c:42:24:9d:d6:1b:1d:40:8b:54:a2:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:65:14:23:8D:3E:2D:DB:AD:A3:8C:6F:F5:75:65:5A:10:C0:AD:D9
X509v3 Authority Key Identifier:
keyid:18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:30:40:fd:98:7f:0b:86:04:0e:49:75:e3:a7:40:83:60:7e:
57:0a:bf:27:b7:db:d0:00:74:92:30:f6:6f:df:be:84:7c:95:
db:60:2e:65:2b:88:9c:b3:d5:59:1e:f4:f8:57:b7:17:cd:7a:
16:39:a1:2b:31:d2:ff:30:79:aa:50:83:db:56:1a:ce:ed:f9:
c9:e9:12:e4:4f:f0:d3:93:20:c8:62:21:a2:58:06:96:c0:5e:
49:0a:24:0d:a5:9a:8c:89:56:48:63:83:84:e9:e2:4f:aa:5b:
c3:5c:98:ed:af:d2:21:52:44:c5:75:b6:c6:ed:e3:01:54:1d:
d9:05:53:1d:f5:8b:ec:8d:88:dd:6c:a8:cf:85:81:f0:76:11:
5a:47:b5:27:bf:5e:4e:5a:2e:ec:5e:fc:05:58:74:1c:24:75:
4f:98:80:86:81:37:13:72:1a:f1:7f:71:80:cd:96:df:b9:e8:
c4:0a:de:34:a8:3e:4d:18:0d:a7:65:55:03:39:3b:e3:a5:77:
2d:3f:15:a5:9e:3d:16:04:68:21:04:27:44:e0:73:24:c8:50:
66:15:73:e4:32:cd:91:69:4a:2a:00:e0:48:e9:7d:3b:49:1a:
c9:5a:d0:ba:67:c2:0a:80:b9:29:11:11:8d:a3:f7:44:6a:ed:
e7:8f:70:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3c+tcLnjuX3oSV/YUJkUA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OGE4N2FiNzkxMDE5Mzc5M2I4YWE2YzNjMWVlNjZiZGIw
NmE3MWYwHhcNMjYwNDMwMDYwMTU5WhcNMjYwNTAxMDYwMTU5WjAzMTEwLwYDVQQD
EyhkNDY1MTQyMzhkM2UyZGRiYWRhMzhjNmZmNTc1NjU1YTEwYzBhZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbq0qJCcpjc1R0MSGuatdzU4nJKo
azfouPyqP97pSgLSfk059jbnzKr8j28O/cTf5x3AT47dlsSpv9K3owsAKn0f4P1P
0bf2FS47RTZWRWUgvuQJLVTwWJecg2yhBP9829TYuZp42O8YLacVH3fe+1hZDio8
J8CFx2XFABfJM4auliDlUT3GPdbSb6A3qTYZ2snsCqEej7pSyiYV5bYCHxDjBv+d
jzyB/mn8fv7A/OzwpEZhZbA56IUbOOCiWav96gepSVffbIADh8onGLdIptKYT1e0
3+h03LPT0/I4/47b3f9PO0kKN+yC6ub5YqYJMEZ+fEIkndYbHUCLVKK3uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRlFCONPi3braOMb/V1ZVoQwK3ZMB8GA1UdIwQY
MBaAFBiKh6t5EBk3k7iqbDwe5mvbBqcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0lxSHEza1FHVGVUdUtwc1BCN21hOXNHcHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hZjExMjYtMWZjNy00MTMxLTkwZWYt
NjQ4NGYyYTQzN2RlLzEvR0lxSHEza1FHVGVUdUtwc1BCN21hOXNHcHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9hZjExMjYtMWZjNy00MTMxLTkwZWYtNjQ4NGYyYTQzN2Rl
LzEvR0lxSHEza1FHVGVUdUtwc1BCN21hOXNHcHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjBA/Zh/
C4YEDkl146dAg2B+Vwq/J7fb0AB0kjD2b9++hHyV22AuZSuInLPVWR70+Fe3F816
FjmhKzHS/zB5qlCD21Yazu35yekS5E/w05MgyGIholgGlsBeSQokDaWajIlWSGOD
hOniT6pbw1yY7a/SIVJExXW2xu3jAVQd2QVTHfWL7I2I3Wyoz4WB8HYRWke1J79e
Tlou7F78BVh0HCR1T5iAhoE3E3Ia8X9xgM2W37noxAreNKg+TRgNp2VVAzk746V3
LT8VpZ49FgRoIQQnROBzJMhQZhVz5DLNkWlKKgDgSOl9O0kayVrQumfCCoC5KRER
jaP3RGrt549w4Q==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:58:47 2026 by rpki-client