Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: nBDifosbG0Io7okl6+XwmKohwcMyVpfKIyXmyJsT14o=
Subject key identifier: 6F:27:89:20:60:03:39:3F:47:26:CD:70:03:0A:4F:D2:57:78:E8:3C
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 019DA71E5AAC699EB8CD4EC84AAB3B3D3A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 18CD
Signing time: Sun 19 Apr 2026 19:01:17 +0000
Manifest this update: Sun 19 Apr 2026 19:01:17 +0000
Manifest next update: Mon 20 Apr 2026 19:01:17 +0000
Files and hashes: 1: K4rNlv6gYUKRgIqav4ptqCTSNGg.roa (hash: peGnClYWPqnMOOfi13oSusAgZ5+U+k8ztyI3Zgy/aPo=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: 2SUYOxXoN5KEYaMRQNx0fhcqqlzUmfPC72iRuUoPmU0=)
3: zposQW8-Ml33uc3ENu1a83hxjEI.roa (hash: aFqmx16M5gCNIMqJZ5eqfmDRHZVtOgPSXQjK2JfuQ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:1e:5a:ac:69:9e:b8:cd:4e:c8:4a:ab:3b:3d:3a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Apr 19 19:01:17 2026 GMT
Not After : Apr 20 19:01:17 2026 GMT
Subject: CN=6f2789206003393f4726cd70030a4fd25778e83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:cd:13:65:2b:f5:81:cb:36:04:ba:3c:69:
d8:d4:6d:a6:24:ae:15:71:c4:a8:cc:35:44:cb:53:
1f:60:7f:10:1c:6d:d7:b4:36:e5:28:53:81:1e:20:
72:d3:58:0f:1e:a0:b0:8c:20:4d:fc:88:fa:f5:9c:
98:42:48:6c:6a:ce:70:e6:52:38:f3:5d:c5:9d:a2:
2a:0d:9b:63:12:1e:30:1f:24:9c:07:d8:5b:a9:eb:
5e:90:3d:d8:86:a3:1c:1e:9a:fa:93:d0:56:38:e6:
95:21:51:01:7c:f5:06:87:c0:fd:d6:97:3d:1d:00:
8f:1a:4b:92:64:01:07:b4:8e:4f:87:3f:b4:79:84:
2b:aa:01:f2:54:22:b8:ac:33:bf:5b:fd:0b:44:b1:
af:8b:e9:f3:83:33:30:57:fa:44:85:2a:4c:66:43:
a5:49:a7:7d:f0:ee:cd:f8:2e:b2:0c:5c:11:d4:6f:
cf:18:82:97:3f:e3:a7:42:b4:b9:f3:44:dc:8d:d2:
2c:86:92:26:0e:11:f9:25:57:df:16:f7:4a:0a:59:
fa:47:f7:de:1b:57:a5:ce:ca:f2:8b:11:d2:ab:3a:
ae:38:e5:78:c2:9b:c1:98:c0:1f:3c:62:74:17:69:
12:fc:8c:8b:d8:0c:ff:24:17:57:cf:fa:56:e5:c3:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:27:89:20:60:03:39:3F:47:26:CD:70:03:0A:4F:D2:57:78:E8:3C
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9c:6b:bc:4a:b9:ad:26:2f:ae:a8:0f:34:1b:6c:9e:5b:94:
ce:a4:92:71:f6:37:2f:5b:b2:0a:7c:25:b6:27:82:b4:dc:a7:
da:26:91:a9:34:b8:34:b2:55:8b:ab:19:a8:b9:cf:12:d2:3b:
df:7b:a1:b4:3d:9e:eb:78:5a:ab:58:c5:3c:5a:f5:65:86:c0:
4f:7b:18:ac:ab:71:68:ae:4f:dd:e6:a4:92:54:32:37:35:c4:
76:15:8f:6a:9c:55:5a:88:3a:3b:27:56:81:69:8f:04:0d:b9:
f9:68:31:fa:72:8e:61:d7:a6:cd:f3:b9:79:d8:d8:1e:f8:0c:
aa:0d:fa:b7:26:de:35:fd:c2:10:a7:89:97:6c:4f:4b:b1:28:
0d:bf:e4:29:21:49:bf:0d:fe:e1:18:30:47:13:9e:29:d7:70:
83:02:0a:43:0d:a7:51:dc:96:36:44:fd:cf:ff:7f:ff:32:bc:
02:2c:ef:f2:34:91:d0:be:02:65:c8:0d:ae:d1:6a:af:7e:13:
64:f4:39:20:1b:42:3d:b2:63:dd:6f:ed:95:a8:62:1d:88:18:
0d:35:4a:bb:ad:96:49:9e:ae:b1:02:01:98:38:c4:0c:a8:0e:
e0:ea:3b:33:51:98:d8:31:b4:af:d4:fb:41:0f:a6:36:74:4c:
a2:fd:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:18 2026 by rpki-client