Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
File: G5gPIqWVKk75pOxKng0MNR_slFQ.mft (raw, json)
Hash identifier: Y+PnNFPZKkhKXLCCDYDrcA378HNOnHBfVO75EsAZkjE=
Subject key identifier: CF:7C:E9:96:03:B4:BA:FD:FA:4B:AD:7B:A6:B2:46:92:F6:48:3D:E8
Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
Certificate issuer: /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Certificate serial: 019DCC3CD8F847C74379D8E601CCB5BBCF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
Manifest number: 18DB
Signing time: Mon 27 Apr 2026 00:00:32 +0000
Manifest this update: Mon 27 Apr 2026 00:00:32 +0000
Manifest next update: Tue 28 Apr 2026 00:00:32 +0000
Files and hashes: 1: G5gPIqWVKk75pOxKng0MNR_slFQ.crl (hash: zMP4hYnm9cDlex5cGz/wP1TAamilzkZlAZl80k/RlAw=)
2: dKV0T8IeH_spYDt_UVR5tMQ6_PE.roa (hash: FiQzj2IJBDAdsIUNZqGewdZB+7P9vXYxqwfhvf0ZCJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3c:d8:f8:47:c7:43:79:d8:e6:01:cc:b5:bb:cf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Validity
Not Before: Apr 27 00:00:32 2026 GMT
Not After : Apr 28 00:00:32 2026 GMT
Subject: CN=cf7ce99603b4bafdfa4bad7ba6b24692f6483de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:62:1e:da:4f:f4:67:24:e5:63:cd:fe:23:
67:bf:65:c9:bb:25:07:98:a7:b0:49:5f:7b:72:81:
f2:fc:31:93:aa:fd:90:32:19:80:b6:50:f8:4c:3d:
dd:58:49:d4:7a:5f:6f:07:91:08:f4:37:fb:94:ff:
79:da:0c:39:f8:9e:d6:b5:43:69:11:99:dc:95:f3:
72:ab:4f:f7:2b:94:2a:d3:7a:24:08:18:e2:ba:9f:
91:03:85:37:38:15:88:40:e0:e1:93:27:35:ed:34:
27:a1:dc:8d:72:0f:66:ae:ad:ff:ab:95:d0:8e:a9:
57:30:30:bc:c8:af:81:de:73:fa:b4:7c:55:01:19:
94:7d:07:c0:e4:4e:63:59:54:ab:db:91:a2:fe:3f:
61:25:1a:1a:d4:6e:67:8a:ae:a6:81:70:44:f2:52:
e2:eb:83:13:7e:86:00:ad:a5:9e:49:63:f4:0e:7b:
0e:7f:f4:9a:cc:71:9c:e9:c9:7c:52:2e:8d:9a:dc:
d6:1a:31:2b:f2:c5:22:3a:ad:96:2d:69:d3:63:44:
15:dc:b5:d5:c9:0b:db:ba:8f:ab:f2:d9:1f:e8:bd:
e1:30:d3:62:b4:ed:e1:f0:23:7e:35:b0:c9:cc:a2:
e5:f1:c7:27:53:eb:81:b6:e8:ba:91:f1:14:25:19:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7C:E9:96:03:B4:BA:FD:FA:4B:AD:7B:A6:B2:46:92:F6:48:3D:E8
X509v3 Authority Key Identifier:
keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cf:29:71:ff:8c:92:85:a1:bf:a9:5d:04:c7:bd:10:d7:26:
f6:54:bd:16:a7:eb:97:28:57:f0:5c:71:3d:e4:45:5e:60:1e:
7e:77:ae:36:39:c4:93:1d:ca:81:76:fb:e8:f1:de:ff:46:c8:
ff:29:ac:a0:cf:27:9a:b0:8a:f9:0d:f0:29:7d:24:3e:43:98:
dd:b0:02:11:3a:7c:28:4a:b4:fb:07:7f:2b:fc:dc:72:8a:4a:
d5:04:9f:f9:e5:37:71:5a:b0:50:1e:57:59:95:2d:e0:fc:76:
26:f4:c9:4e:6f:45:d3:35:7b:c1:43:3b:fb:4e:91:ed:d6:2d:
a8:55:9b:a5:ab:ab:b4:b2:e7:f4:7b:b6:f2:fa:69:46:bd:6a:
77:e8:4b:c0:7d:53:b4:6f:dd:0a:99:c5:1a:92:b6:e0:e9:92:
c8:94:0b:25:93:94:44:90:74:11:c5:90:05:98:72:05:07:5c:
a7:9b:70:9c:62:56:59:4b:0e:47:89:d8:a7:be:b6:3b:de:b5:
d5:50:5c:bf:4a:63:b6:cd:7e:07:31:58:ec:d5:39:25:34:85:
99:ee:4e:ce:f3:4b:18:11:6c:01:2a:f9:8b:1e:77:18:b6:82:
5f:52:78:23:0f:f0:9e:92:f7:77:eb:56:08:70:21:27:63:fb:
a2:08:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:16 2026 by rpki-client