Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
File: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft (raw, json)
Hash identifier: lT9dKdqmP3asX/t5N9zJRyI56lfmLTUqxYMFR22c+Sw=
Subject key identifier: CF:60:0C:3F:00:78:FA:D5:B3:A9:79:02:95:E7:65:F6:A2:6F:90:99
Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
Certificate issuer: /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Certificate serial: 019DA1898D102233621217122AA4FFF02004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
Manifest number: 13C8
Signing time: Sat 18 Apr 2026 17:00:39 +0000
Manifest this update: Sat 18 Apr 2026 17:00:39 +0000
Manifest next update: Sun 19 Apr 2026 17:00:39 +0000
Files and hashes: 1: 1-uY3ByKZWX6EbvY022ukUYAIf0A.roa (hash: RrYvBD/sXCQXZ4ZUGRnJ0kZRIByBBH3L6RfLx0gb2ec=)
2: 2VnEP0kZcDQSDl0UL_jzXnG71q4.roa (hash: ZjSYJHerA/IUP/DXVd1u6yoH1Bz+1CyyRDmQ7NJ49jM=)
3: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl (hash: taa5Mkax5aG2N0kH8zmVh3dZGXmTHmUwAECbJMxs2LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:89:8d:10:22:33:62:12:17:12:2a:a4:ff:f0:20:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Validity
Not Before: Apr 18 17:00:39 2026 GMT
Not After : Apr 19 17:00:39 2026 GMT
Subject: CN=cf600c3f0078fad5b3a9790295e765f6a26f9099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:7e:27:c7:36:41:1f:be:08:61:4f:d2:3e:
7b:10:30:b8:c4:6d:08:fe:92:d6:af:a6:cb:29:df:
06:6e:25:6b:8e:7b:5e:1e:83:aa:f4:28:91:d0:d6:
57:23:c2:d6:d6:79:78:b2:93:de:f2:b9:c0:0a:3e:
46:94:69:d5:d4:73:4f:16:52:60:7f:32:cc:44:77:
a9:2d:e2:4e:c6:62:70:82:d2:c2:bf:af:8b:c6:fb:
aa:90:3a:c5:1d:3d:c6:8b:a2:47:9a:f7:7d:4d:98:
2f:d8:89:d5:29:d0:4a:08:11:9f:74:cc:5a:84:88:
88:49:d5:c1:4d:0f:e6:94:89:ce:36:0e:e8:53:d6:
28:91:fb:03:49:89:da:1d:61:44:65:7b:92:89:38:
89:e7:f3:3d:3b:34:38:41:8b:db:e8:2f:5e:55:a0:
5f:3d:6f:a3:84:90:ab:51:a4:a2:a8:18:19:26:31:
e3:d7:5c:86:10:80:14:f3:00:54:0e:a0:7b:19:bf:
fb:11:77:53:56:0d:2b:89:24:08:5e:dc:58:ed:b0:
4e:bb:c3:f6:a7:5e:8f:0b:7a:b5:3e:58:f5:26:32:
fd:f6:93:7d:87:a6:06:88:b3:96:2b:44:d3:e0:f4:
6e:0c:14:78:f6:52:ba:e6:66:61:f1:bf:e6:6e:9f:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:60:0C:3F:00:78:FA:D5:B3:A9:79:02:95:E7:65:F6:A2:6F:90:99
X509v3 Authority Key Identifier:
keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:13:13:e2:b2:fb:73:35:fa:75:ea:ef:dc:7f:16:3e:52:19:
68:9a:08:68:f9:f8:59:4e:28:04:93:9f:95:a8:e8:77:e1:f8:
91:2c:c9:33:0e:20:b0:35:1f:f1:b2:32:32:a4:ee:d6:f7:3c:
af:12:03:3a:66:74:3b:c0:8d:60:04:c7:37:d4:bc:e9:73:ab:
bc:1b:e8:78:7e:3b:6a:c0:85:ab:da:bf:ee:72:6c:0f:40:95:
b3:57:c4:89:02:90:35:3e:87:0c:13:bb:f0:52:d4:d6:4e:63:
5c:09:0e:16:01:3f:cd:98:fb:58:73:36:90:a9:26:a9:8e:e4:
55:65:a1:8a:35:6f:e6:0c:7f:7e:80:4f:a0:e5:0b:1d:f0:2f:
ab:c1:96:ca:05:cc:d0:74:cd:d4:08:a6:38:40:a7:8e:92:d9:
08:bf:3e:32:e2:72:02:5f:3b:ad:94:d2:5d:c4:6d:3e:fa:b8:
97:99:da:23:39:65:b3:c2:7b:4f:ab:db:cc:23:7d:9c:6a:39:
8a:8c:f8:db:f1:3a:9b:72:f4:54:8f:bb:21:7f:8b:a4:9c:d1:
53:e8:29:74:51:18:ee:ae:3c:f8:11:fc:0d:27:93:87:83:bc:
ac:2a:e5:f7:bc:10:55:7c:6e:75:73:a9:f3:01:ed:57:f3:37:
75:52:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:42 2026 by rpki-client