Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: BNEaCrkk8Lso9E92TGeDJfYJwixQ3HmijwxmYmUDD+c=
Subject key identifier: 1B:57:52:9C:8D:5D:90:8D:F6:13:E7:87:3E:27:96:0D:07:33:B0:A3
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 019DA754C4F41F1A860AD41482421FF4F507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: 0469
Signing time: Sun 19 Apr 2026 20:00:43 +0000
Manifest this update: Sun 19 Apr 2026 20:00:43 +0000
Manifest next update: Mon 20 Apr 2026 20:00:43 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: FVOdyu3SEK0wt0hBiMGIocGe3EezR94LBrJ9OxJhFWw=)
2: ps8p5Yxss_yS4gX9BmkqFddX40Q.roa (hash: nYuC3F6vhPJEBCLmfMqrTPfplxmjR9SoiZf1ZnDUcP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:54:c4:f4:1f:1a:86:0a:d4:14:82:42:1f:f4:f5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: Apr 19 20:00:43 2026 GMT
Not After : Apr 20 20:00:43 2026 GMT
Subject: CN=1b57529c8d5d908df613e7873e27960d0733b0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:74:3f:68:af:a6:4f:e8:b6:80:cf:5b:a4:
f9:ef:af:a7:c5:29:ea:61:1b:f0:ab:7d:d8:b1:5e:
0e:40:8c:43:80:bf:37:21:3f:6c:08:62:e1:8c:fa:
c9:0d:7d:0a:b8:1e:fb:e2:87:fc:a4:86:55:fc:3f:
a0:41:75:72:d6:1d:ac:f2:3e:78:a7:b9:a7:41:d3:
df:b6:09:ec:88:62:9f:a5:3c:a2:ee:56:08:6b:5b:
80:cc:fe:50:da:9d:ac:d7:d7:a7:13:28:57:45:88:
33:e3:3e:b8:6f:a5:1b:00:d7:f2:ed:09:11:e6:aa:
9c:2c:b1:bf:53:0d:e2:16:21:67:1f:f4:fc:38:27:
44:b6:bb:18:d1:14:8c:cd:66:93:76:6a:3d:40:42:
71:4e:e3:61:0e:c5:20:cf:89:ff:92:d5:96:25:bc:
ab:38:53:eb:69:13:7a:aa:68:2f:7f:07:6c:c8:4f:
e1:7a:f2:2e:b3:87:66:fa:85:d9:83:ff:60:47:1f:
c2:20:89:10:2f:ca:82:27:16:f8:68:4d:53:c9:1b:
f8:6a:be:a1:91:bc:89:05:42:6e:af:0f:be:0b:a1:
0c:d4:22:12:34:83:8c:00:75:97:10:01:10:17:3c:
d9:8a:f5:51:a9:e1:07:ca:d0:9b:0e:a9:af:42:10:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:57:52:9C:8D:5D:90:8D:F6:13:E7:87:3E:27:96:0D:07:33:B0:A3
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:42:2a:1e:30:bc:fd:6a:e3:06:a3:e9:65:eb:ca:46:21:c6:
d3:42:14:4d:f2:06:45:82:75:cc:a7:95:e5:33:da:28:90:02:
c9:d8:0d:fd:76:8e:40:11:f7:62:f5:5e:7a:c4:bf:db:28:5e:
c2:9c:8a:d9:61:f8:10:e8:4a:19:8d:f2:58:dc:90:45:a2:2c:
e4:de:21:85:e9:5e:25:58:ff:d0:2c:0b:1a:28:5c:40:81:8f:
2e:0c:8b:51:12:58:e5:d1:9e:ef:a5:a6:46:04:e6:5f:e7:fe:
71:f7:a9:3f:0d:90:87:18:34:ff:b8:97:4c:b9:22:cf:29:3d:
44:bc:bb:75:1a:21:f8:a5:d2:c9:8c:ed:a2:f2:80:2c:ae:80:
7d:78:46:f4:2b:41:90:94:7b:49:ea:29:24:ec:e9:14:1c:d2:
f0:5e:e2:6b:9c:a8:b6:bc:39:ee:ea:78:ac:fd:30:f5:b9:6e:
40:f9:1d:2a:c3:3f:df:b5:06:0d:30:46:fa:f1:7f:6c:f1:cc:
d1:22:f9:12:89:6c:38:d9:91:53:20:80:96:e9:81:ad:7a:46:
5a:8d:43:4c:79:77:ed:19:a0:6f:3e:2e:c2:31:a4:da:84:d7:
46:54:0f:99:44:63:7d:df:fd:30:8c:44:3b:e4:de:62:c1:d4:
3c:20:69:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2nVMT0HxqGCtQUgkIf9PUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTgxZGU4Yjc3MjAzOTQ1OTQ0NDhiN2EwZTYyNWMzM2Ez
OGRjNjYwHhcNMjYwNDE5MjAwMDQzWhcNMjYwNDIwMjAwMDQzWjAzMTEwLwYDVQQD
EygxYjU3NTI5YzhkNWQ5MDhkZjYxM2U3ODczZTI3OTYwZDA3MzNiMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oF0P2ivpk/otoDPW6T576+nxSnq
YRvwq33YsV4OQIxDgL83IT9sCGLhjPrJDX0KuB774of8pIZV/D+gQXVy1h2s8j54
p7mnQdPftgnsiGKfpTyi7lYIa1uAzP5Q2p2s19enEyhXRYgz4z64b6UbANfy7QkR
5qqcLLG/Uw3iFiFnH/T8OCdEtrsY0RSMzWaTdmo9QEJxTuNhDsUgz4n/ktWWJbyr
OFPraRN6qmgvfwdsyE/hevIus4dm+oXZg/9gRx/CIIkQL8qCJxb4aE1TyRv4ar6h
kbyJBUJurw++C6EM1CISNIOMAHWXEAEQFzzZivVRqeEHytCbDqmvQhBdKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtXUpyNXZCN9hPnhz4nlg0HM7CjMB8GA1UdIwQY
MBaAFBmYHei3cgOUWURIt6DmJcM6ONxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQt
YWMyYWU0ODM5NTVlLzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQtYWMyYWU0ODM5NTVl
LzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA00IqHjC8
/WrjBqPpZevKRiHG00IUTfIGRYJ1zKeV5TPaKJACydgN/XaOQBH3YvVeesS/2yhe
wpyK2WH4EOhKGY3yWNyQRaIs5N4hheleJVj/0CwLGihcQIGPLgyLURJY5dGe76Wm
RgTmX+f+cfepPw2Qhxg0/7iXTLkizyk9RLy7dRoh+KXSyYztovKALK6AfXhG9CtB
kJR7SeopJOzpFBzS8F7ia5yotrw57up4rP0w9bluQPkdKsM/37UGDTBG+vF/bPHM
0SL5EolsONmRUyCAlumBrXpGWo1DTHl37Rmgbz4uwjGk2oTXRlQPmURjfd/9MIxE
O+TeYsHUPCBp8w==
-----END CERTIFICATE-----
Generated at Mon Apr 20 04:52:12 2026 by rpki-client