Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: 928RVzMWcrlD7Hixukq3aKZJQC4frdfJNyQqG4Qg5aA=
Subject key identifier: BA:55:73:18:67:63:32:62:6D:7C:62:62:83:ED:E3:A8:CD:9A:B3:26
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 019DD019A22859E74034B0B3CEF6010FB9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 18E9
Signing time: Mon 27 Apr 2026 18:00:33 +0000
Manifest this update: Mon 27 Apr 2026 18:00:33 +0000
Manifest next update: Tue 28 Apr 2026 18:00:33 +0000
Files and hashes: 1: Vsdmkmln10BiNEuLpWL8g2ijOQY.roa (hash: K20X211w556xHOeU3InnMg8U45i9ouCLxtCagR86/1M=)
2: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: U+KsP217QIH7XlHh0RAJotb1doTbueL3/Bjgy6cvbxs=)
3: wKFjWYTMPtrlK-c49_r01lazux4.roa (hash: AjjqYm+l9OOwd9NCFpN4Uf4cEvsbCyWIxuOKPKNz6YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:a2:28:59:e7:40:34:b0:b3:ce:f6:01:0f:b9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Apr 27 18:00:33 2026 GMT
Not After : Apr 28 18:00:33 2026 GMT
Subject: CN=ba557318676332626d7c626283ede3a8cd9ab326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:e0:11:b7:f5:1c:2c:e5:9d:ae:59:c6:2e:
61:a5:fa:58:ba:be:e8:5d:f6:e0:35:95:ca:4c:0b:
bc:e7:7f:92:59:69:74:61:f2:06:73:4c:bf:a7:42:
1b:f2:99:3e:62:08:ba:19:e2:6e:aa:0b:20:90:3d:
69:ef:38:89:52:f1:35:f0:0f:eb:de:70:8c:52:ce:
03:e4:9d:ab:95:31:6a:56:7e:36:51:fb:b6:0d:c7:
b2:9b:f5:95:22:6d:7a:d6:19:39:f5:16:76:e7:09:
db:54:b2:49:a3:15:81:3c:de:2d:23:b7:93:42:e5:
36:2f:86:b5:c8:14:b0:50:55:05:36:a1:00:c0:8b:
f9:2d:d4:6f:93:f7:d2:d4:5f:19:fe:22:5e:07:96:
d0:6d:a1:8c:33:1e:c2:69:f7:49:99:4e:78:d6:6f:
a9:73:85:65:ae:b0:bf:b8:1c:0c:54:87:6a:e7:2f:
9a:68:61:91:40:53:a3:86:9a:00:1e:f1:97:56:54:
25:37:2e:2c:3b:e6:89:59:7e:16:c2:46:32:e3:41:
9f:8f:9b:47:61:fa:43:49:d7:d8:a1:9a:38:40:86:
71:a3:ca:be:e5:5c:f7:70:a7:63:c3:4e:92:d7:33:
9c:19:93:e7:ac:ac:6b:00:6f:79:74:29:14:22:29:
5a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:55:73:18:67:63:32:62:6D:7C:62:62:83:ED:E3:A8:CD:9A:B3:26
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9d:6e:62:7a:e6:b4:c5:85:72:15:3b:17:0a:03:c4:8c:f2:
9d:1c:11:50:11:da:9f:83:11:b8:c2:0c:38:b8:7a:39:31:75:
8a:56:d0:25:21:c9:b9:74:f3:46:e3:cd:cb:97:79:ac:16:05:
69:ae:7f:73:37:fe:6e:89:76:96:6b:4e:ea:40:33:f8:fc:a5:
27:af:41:58:b2:8e:5d:e0:ee:c1:c8:7d:b9:82:8b:7b:f8:b2:
41:d2:a4:ea:ed:65:bb:a4:30:1b:1f:a0:08:07:b8:67:ae:9a:
5a:d3:4a:30:1e:eb:82:cc:7b:6a:35:d5:26:99:c0:ef:3c:1c:
20:b4:36:d1:ba:56:c0:79:49:6e:71:ca:18:8d:9d:89:3a:ed:
e7:3a:5d:77:aa:7b:2d:e8:68:12:aa:da:15:d8:24:4f:d0:25:
62:4e:48:a3:7a:89:96:08:31:4d:6e:59:02:36:3b:b1:bd:c7:
0b:a2:66:0a:58:24:5c:81:ee:fd:ba:f3:fc:83:d6:83:36:c3:
20:d6:1a:8d:c6:10:0e:6f:00:85:d7:ae:f5:fd:db:29:e8:38:
29:a5:5c:5a:4f:b8:c6:3b:f0:17:f5:e2:76:93:33:a0:a0:13:
24:84:3a:fe:6f:9a:16:5c:76:94:50:e9:1d:39:f4:a2:02:1e:
b5:5e:aa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:49:55 2026 by rpki-client