Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File: GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier: xGeXjS/BYgOCokiN7mkUTrhfnx3AhuS8Pl0SALYZWHA=
Subject key identifier: A1:23:ED:33:6D:27:F3:A2:63:34:74:7D:0B:76:96:C1:6F:9E:B3:2D
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer: /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial: 019DCFE346C225A40E61CB4EE8D8769E39D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number: 13F4
Signing time: Mon 27 Apr 2026 17:01:11 +0000
Manifest this update: Mon 27 Apr 2026 17:01:11 +0000
Manifest next update: Tue 28 Apr 2026 17:01:11 +0000
Files and hashes: 1: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: zyONDUxUztPfz45yUzZSLv7WvNchqnZ5ov0VTUZeLRA=)
2: PvoOGCPl9_uRABB0axn6ZoPjSfw.roa (hash: R0bL5Wz36hlUi6u7PbZBlbeTSW6yCz9pE1JTno5Jnd4=)
3: f2RzKPqHeeSwshGgaI03kVuo9ZY.roa (hash: vcuUb/xuMjhKt4KDFSNHCcpL3GkZRwfPEaVwfoajM48=)
4: v6DHuOuOQo5ADYQoffR2c_O6QS8.roa (hash: i6eWCZPdAHUsEhQJa4fw9gAODBNNYJr2pgzQXjsynVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:46:c2:25:a4:0e:61:cb:4e:e8:d8:76:9e:39:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Validity
Not Before: Apr 27 17:01:11 2026 GMT
Not After : Apr 28 17:01:11 2026 GMT
Subject: CN=a123ed336d27f3a26334747d0b7696c16f9eb32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:b2:d3:e0:35:56:40:d4:f5:82:5b:b7:87:
db:76:86:99:b5:51:fc:fd:34:d4:a5:b1:a7:75:58:
be:3f:3e:ca:46:b1:30:62:2c:5a:8f:94:29:9c:63:
a2:f9:df:f6:8a:01:07:d0:48:43:79:fb:76:12:a1:
a1:b3:85:62:b9:5d:83:be:63:c4:bc:2c:50:2d:00:
be:c5:ca:ee:7d:c3:d3:57:37:e3:46:9f:96:1c:2c:
bd:2b:bf:29:60:5c:92:6d:19:3b:d7:ec:c7:8c:68:
c2:f3:dd:88:e3:d0:2f:c0:0d:55:2e:7a:ab:2a:2a:
76:02:6c:b5:a5:7d:9e:51:fd:aa:ce:a0:6d:25:f2:
c6:d3:21:92:e7:3a:21:5b:19:8e:89:8b:ac:04:fa:
94:89:af:6c:2c:2b:16:7c:a3:a7:8e:af:b8:92:26:
18:05:8a:80:5b:5c:f5:0b:5c:1e:47:8e:d9:b6:87:
58:ed:f4:21:42:02:e2:fd:8d:08:f2:cc:68:40:5c:
33:a6:63:4e:c0:8d:48:1d:fa:27:0e:d9:03:28:07:
ca:12:08:90:12:8f:a3:ae:12:de:44:6a:cc:25:67:
54:b3:74:3f:a7:13:5a:3b:39:7c:0d:2b:b1:ce:9e:
5c:42:95:e0:84:05:b0:62:25:32:5a:5d:16:ec:c5:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:23:ED:33:6D:27:F3:A2:63:34:74:7D:0B:76:96:C1:6F:9E:B3:2D
X509v3 Authority Key Identifier:
keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f8:8c:85:a7:2e:32:33:5a:31:30:49:f4:41:9f:ee:34:4a:
f1:8c:fd:53:84:59:c9:a8:17:8e:1e:06:25:9b:bf:52:f5:59:
67:6e:b6:15:08:0a:76:a5:26:56:bb:53:f0:6b:b0:13:32:b6:
8a:f0:80:1d:6e:df:8d:dd:a1:9a:5d:bd:91:03:b1:56:4e:ba:
9c:15:da:17:66:cf:af:0c:2a:4e:1b:51:bc:92:76:d3:f7:9e:
ff:90:91:57:ac:37:3c:d2:34:28:02:48:4c:90:c9:1d:ac:6b:
cf:43:83:fd:f1:20:d7:dc:d8:c8:c1:79:a9:ea:99:2e:f3:44:
b2:33:75:32:cb:a4:25:56:0a:9f:2a:98:9b:c0:e2:a5:e9:74:
43:9e:4c:d5:cb:16:8d:df:6f:46:0b:8a:09:8c:1d:b7:97:ee:
d1:69:a9:1a:02:c5:16:0c:e6:93:5c:f5:ca:b8:f0:13:7f:27:
d6:c3:7f:9e:6b:1d:f0:7a:49:12:b5:0e:7b:b5:d9:02:3b:8e:
32:87:08:94:72:35:40:3e:8e:a8:ab:56:de:8d:f5:8e:b6:e7:
6f:0d:c8:a3:7d:d2:8c:50:e0:8e:c6:78:f4:1a:fd:8c:df:ae:
93:97:b0:c2:5c:d3:15:39:16:4e:b9:1d:b1:23:fe:20:c9:cf:
f8:d7:6e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:29:12 2026 by rpki-client