
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File: GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier: CMyXQLuuIA+2Nn6CvdEAxmHfcWIvJuJ3UMcMw9IL0wE=
Subject key identifier: 20:F6:87:0A:62:E0:89:B5:57:D1:F6:BF:31:85:0C:C3:B1:EC:9E:8F
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial: 019DCED0C8A3BB697B576F83293A1D18040C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number: 18DB
Signing time: Mon 27 Apr 2026 12:01:22 +0000
Manifest this update: Mon 27 Apr 2026 12:01:22 +0000
Manifest next update: Tue 28 Apr 2026 12:01:22 +0000
Files and hashes: 1: 7owqXESGy_RXh39I2zXYrOmIRmY.roa (hash: uD/kXqY4+DVU4PEvK0O92LooxshLndRFHktHnH9fzjs=)
2: FhTqn0nI2AOefAde-zGtbwEbRRY.roa (hash: pvmj7N2aWwyL4DhPFHc9oWpCfcCMtoks7zjIuX/XA3M=)
3: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: w9QHruLibUboJmVy7xIZYKttKEfDG+zXp/qyx5AxZBo=)
4: IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa (hash: 9Z9gCW1kabV4H10WypJ+CcaUnOFek5gLKpjj5o/RjC0=)
5: nnLZ_anjPSOLRayVOL-RzewgHwI.roa (hash: 2WaAIYb59kGhe6tvXHb5ioUayH6vLhFoDq8NRlocKJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:c8:a3:bb:69:7b:57:6f:83:29:3a:1d:18:04:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Validity
Not Before: Apr 27 12:01:22 2026 GMT
Not After : Apr 28 12:01:22 2026 GMT
Subject: CN=20f6870a62e089b557d1f6bf31850cc3b1ec9e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a7:49:42:f9:a6:55:e2:17:55:b9:dd:7b:19:
d9:92:c5:ef:47:72:b1:cd:3f:d9:c6:35:bb:11:46:
ee:c0:b0:bd:f2:12:3e:2c:da:72:c6:13:e5:58:b2:
f8:ed:ce:5d:0a:bc:a0:ab:22:d2:05:42:8a:36:53:
4a:0c:ea:c1:fc:37:97:b0:2a:c9:0f:a8:ee:de:90:
8c:59:e7:88:53:75:49:60:38:cc:37:67:44:de:c1:
92:3d:6e:8c:8d:98:fa:42:a6:fb:94:a6:5b:4e:3a:
e7:4e:8a:7c:08:23:60:ed:97:d7:6c:64:e5:f3:b6:
9b:86:00:f4:ab:13:85:db:a2:24:ff:e8:ab:b7:b3:
86:74:59:33:dc:f7:c5:71:51:05:fd:e9:ae:8f:d6:
51:e0:1e:92:c9:82:68:31:6a:ca:68:b7:13:8e:04:
09:26:40:dc:c8:1a:2f:7e:b3:21:33:65:98:c5:92:
1a:96:05:69:f8:6a:f2:66:fe:28:fc:c1:52:50:2d:
86:65:75:4b:fd:2f:20:1a:66:ac:42:2b:2f:66:c7:
cf:10:05:bb:00:c0:91:a6:f4:60:b5:2c:5e:01:d8:
f6:03:c2:87:03:9a:e2:59:b0:da:a9:0f:59:71:99:
d0:86:74:33:e0:98:cf:3c:74:b7:ad:07:9a:e6:aa:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F6:87:0A:62:E0:89:B5:57:D1:F6:BF:31:85:0C:C3:B1:EC:9E:8F
X509v3 Authority Key Identifier:
keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8b:35:12:a9:81:6b:15:98:14:d2:79:79:da:39:f7:6c:36:
3b:4f:5a:4e:5c:57:12:26:a9:65:de:9e:50:ae:f0:7c:40:3a:
ae:6f:74:aa:cc:bd:b4:25:63:e3:25:1a:3c:47:ac:4e:39:78:
65:14:a5:a6:64:e0:81:92:bd:a5:f1:85:21:1d:55:ba:2f:5c:
4c:dd:19:02:38:6a:6b:96:c9:52:88:6e:b6:55:e1:1d:fa:1c:
1b:2f:30:f7:19:08:ac:bc:20:c6:83:2f:56:74:bf:6e:ce:bc:
a5:57:8a:1f:63:b7:2b:51:82:8a:85:9c:6e:05:8f:23:e8:52:
cc:35:be:74:cf:be:c3:57:63:30:09:8e:bd:8b:44:7e:b2:93:
2d:6e:d4:bd:e2:b5:05:89:e1:ab:b9:9e:9c:df:7a:dd:36:bd:
36:f9:54:bd:98:06:c5:9b:00:ec:ef:2c:5d:7c:d3:34:da:ae:
0f:27:89:d8:e0:42:96:45:12:5d:f7:39:40:93:98:3d:c7:59:
1c:f1:13:ef:63:cb:c4:b8:6d:5e:9d:4e:45:06:bd:83:35:bb:
9b:7a:ce:ed:3d:23:d4:da:c9:97:89:05:7c:84:31:ee:07:72:
b3:5e:1c:a2:87:a5:32:32:a2:a9:f0:7d:f5:72:25:fb:4d:a2:
9f:9d:0e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:09:26 2026 by rpki-client