Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier: YUNvehidD/rm29l7RUIxdicnSfZUB5Q8zli3U7DyY08=
Subject key identifier: CF:52:CD:74:CC:6D:76:6D:38:8E:FC:A5:76:2E:1A:34:22:5F:F9:4A
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 019DD050F5E90E4CD0C29DD03784A38AB9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 19:00:59 +0000
Manifest this update: Mon 27 Apr 2026 19:00:59 +0000
Manifest next update: Tue 28 Apr 2026 19:00:59 +0000
Files and hashes: 1: Qy5yKoxjLWJA1uRpC0vjfkx5IHQ.roa (hash: y7SNkohtjGeeXJKm5Co5EsY36dtQ+/7kfkwvtYcQU4g=)
2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: 7R5DzN41UKLaRbjE2bMe66AolSOXczxkiMePe0g6p2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:f5:e9:0e:4c:d0:c2:9d:d0:37:84:a3:8a:b9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Apr 27 19:00:59 2026 GMT
Not After : Apr 28 19:00:59 2026 GMT
Subject: CN=cf52cd74cc6d766d388efca5762e1a34225ff94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:ea:b9:66:cc:2d:32:04:5d:03:e2:0a:4c:
22:37:d4:38:c3:85:f3:4a:df:54:d7:ad:30:89:8d:
18:b9:81:2b:f7:70:38:2e:a6:36:1c:6d:43:68:7e:
38:ea:c0:a5:01:e5:13:30:ce:c6:70:fd:10:65:59:
df:a2:26:87:59:64:4f:90:ed:c9:d9:57:96:37:dd:
9a:56:ff:4c:3d:aa:6e:ae:93:d5:d1:60:5a:39:d6:
0a:6b:0d:a6:c2:88:1b:25:44:ec:fc:8c:d8:83:f6:
76:ba:32:0d:21:12:32:49:ef:08:41:d0:5c:25:b5:
c7:52:2b:30:84:05:1d:03:47:bb:08:d1:10:a6:86:
87:45:47:d7:c3:7c:83:14:92:fe:e6:2e:05:d3:46:
60:af:29:c4:ba:2d:88:f4:90:00:31:ba:c1:95:6b:
17:f0:5b:88:6b:90:78:80:d2:f2:0d:2e:bd:77:64:
a3:fb:20:01:b1:f5:2c:2c:76:87:a7:a4:57:e1:9d:
4b:6c:9b:dc:5b:eb:93:99:64:b8:8c:1f:93:01:be:
4f:8e:cd:6c:20:0e:1f:2c:03:29:90:1a:ee:21:a1:
6b:71:30:99:83:79:2a:21:e4:54:a6:f2:c1:7a:18:
6c:53:e5:75:8f:3a:22:7b:97:91:ee:de:83:87:26:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:52:CD:74:CC:6D:76:6D:38:8E:FC:A5:76:2E:1A:34:22:5F:F9:4A
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f8:ee:08:57:87:8c:54:45:d2:12:48:2d:19:89:60:df:d2:
ac:6a:36:d0:de:21:62:3d:d6:19:89:1c:a8:42:bc:86:bf:f2:
3f:09:82:02:04:c9:20:c6:6d:15:b0:20:7f:4e:32:2b:0d:cf:
e8:c3:0b:58:d5:63:4c:d6:33:d0:c8:5b:9b:fb:bf:3d:83:13:
5c:b4:68:b0:f2:ef:76:46:b9:da:c4:14:8e:5a:45:b9:3c:93:
16:2f:4c:b4:de:3c:be:2a:e4:f6:57:90:fc:66:65:c7:91:ff:
23:19:58:23:ad:2e:76:54:01:a6:f6:96:c8:a0:1e:a5:3f:8f:
67:a5:5a:66:10:2c:01:60:bd:20:f9:db:96:f8:3b:5a:66:9a:
a9:f9:d7:e8:eb:e9:7e:67:49:55:ea:a9:c6:4d:54:64:3c:72:
5a:1c:43:2a:a0:9b:65:ef:d2:11:c3:64:4d:db:b9:9c:e1:8d:
b6:f8:fc:c7:9c:fb:07:c1:ed:d0:e0:e1:38:7e:0b:22:6a:a3:
54:96:95:05:5a:5d:86:96:26:16:28:3e:b4:e5:87:af:44:3c:
79:30:28:8c:21:09:6c:8b:52:2c:e2:c0:9f:18:36:06:8e:e8:
d4:f5:a1:d8:34:9a:57:02:b2:4c:b0:f3:e3:7a:f4:86:80:d3:
57:06:4a:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QUPXpDkzQwp3QN4SjirnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMTI0ZDA0MTFhMjBmZDJiYjU0Njk3MGVhODAxMTZlZjI3
NmRiYWIwHhcNMjYwNDI3MTkwMDU5WhcNMjYwNDI4MTkwMDU5WjAzMTEwLwYDVQQD
EyhjZjUyY2Q3NGNjNmQ3NjZkMzg4ZWZjYTU3NjJlMWEzNDIyNWZmOTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot3quWbMLTIEXQPiCkwiN9Q4w4Xz
St9U160wiY0YuYEr93A4LqY2HG1DaH446sClAeUTMM7GcP0QZVnfoiaHWWRPkO3J
2VeWN92aVv9MPapurpPV0WBaOdYKaw2mwogbJUTs/IzYg/Z2ujINIRIySe8IQdBc
JbXHUiswhAUdA0e7CNEQpoaHRUfXw3yDFJL+5i4F00ZgrynEui2I9JAAMbrBlWsX
8FuIa5B4gNLyDS69d2Sj+yABsfUsLHaHp6RX4Z1LbJvcW+uTmWS4jB+TAb5Pjs1s
IA4fLAMpkBruIaFrcTCZg3kqIeRUpvLBehhsU+V1jzoie5eR7t6DhyZQnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9SzXTMbXZtOI78pXYuGjQiX/lKMB8GA1UdIwQY
MBaAFIMSTQQRog/Su1RpcOqAEW7ydturMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmIt
ZmNmMGYxNTk0ZDJmLzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmItZmNmMGYxNTk0ZDJm
LzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfjuCFeH
jFRF0hJILRmJYN/SrGo20N4hYj3WGYkcqEK8hr/yPwmCAgTJIMZtFbAgf04yKw3P
6MMLWNVjTNYz0Mhbm/u/PYMTXLRosPLvdka52sQUjlpFuTyTFi9MtN48virk9leQ
/GZlx5H/IxlYI60udlQBpvaWyKAepT+PZ6VaZhAsAWC9IPnblvg7WmaaqfnX6Ovp
fmdJVeqpxk1UZDxyWhxDKqCbZe/SEcNkTdu5nOGNtvj8x5z7B8Ht0ODhOH4LImqj
VJaVBVpdhpYmFig+tOWHr0Q8eTAojCEJbItSLOLAnxg2Bo7o1PWh2DSaVwKyTLDz
43r0hoDTVwZKCA==
-----END CERTIFICATE-----
Generated at Tue Apr 28 01:15:15 2026 by rpki-client