Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier: /dq4qhks83fxg2dbfv1LLDqhKHVWY3V54s6qCFeFM50=
Subject key identifier: 58:DB:9F:8D:D1:6B:DC:E3:37:5D:EE:13:45:41:36:4C:2E:3C:85:AC
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019DA679163E17C918C616D92EA30A516359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number: 1122
Signing time: Sun 19 Apr 2026 16:00:46 +0000
Manifest this update: Sun 19 Apr 2026 16:00:46 +0000
Manifest next update: Mon 20 Apr 2026 16:00:46 +0000
Files and hashes: 1: 8Ql9UfBMlhf-9sEO0J-6rh-4uGE.roa (hash: cCjd/UNv//U8Wz2A7iG4uR2Nv+n8ykigX0NiqbbBYBw=)
2: Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa (hash: 1lD5R4cJuPj/nZ60zfBHs9WvrZ5YRD+ZAX1KkvheAUY=)
3: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: oBv4s++ZPM6iA0jSOkfm0swEzlTKDpgCaVqLtkQFv1M=)
4: lnQm--gY8ePlCI161SZETEH7iss.roa (hash: vxrBUtHuyLV0LieoKDVoBuqAYfEuInf7kfLphmP99fg=)
5: mb8r9vp3wM6oJLJdPmkNlWrgKtE.roa (hash: Xrfg/Aqkw9N5mVtt/uYm1yP5BsOe0X4pZfMOzaQDicg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:79:16:3e:17:c9:18:c6:16:d9:2e:a3:0a:51:63:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Apr 19 16:00:46 2026 GMT
Not After : Apr 20 16:00:46 2026 GMT
Subject: CN=58db9f8dd16bdce3375dee134541364c2e3c85ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:84:22:a6:7e:58:58:19:09:64:70:f1:79:
12:38:d2:74:e8:4c:cd:41:28:42:15:4d:08:da:aa:
f2:79:91:e6:da:c9:32:fe:f6:56:56:5c:10:73:00:
ab:0a:5f:d8:8b:28:38:69:ff:6e:0b:44:91:f9:4d:
9f:d6:17:85:cb:1b:ba:a0:3e:b1:b9:f9:16:95:a4:
b6:df:41:a2:aa:3c:b5:7b:07:fe:75:a2:a0:c5:9d:
06:20:df:93:db:67:b4:0f:21:6d:65:8d:b4:4d:ac:
e8:bb:f7:e5:fa:44:42:80:7e:45:ad:e5:63:94:89:
c1:d5:4c:d0:46:ff:a4:8d:bc:34:cf:f9:f5:3d:6a:
d7:28:0b:0b:e3:30:6d:81:53:5c:48:5f:fd:e3:60:
34:d6:0b:f2:07:77:c1:7e:98:5e:af:28:b4:7d:47:
23:81:91:90:bf:60:22:f2:f6:d0:52:de:6f:5e:bd:
f4:78:68:79:9d:11:9c:12:17:5f:18:2f:01:97:14:
38:7e:d8:54:11:4a:7b:98:0b:e1:7a:d0:0f:ac:d8:
02:41:68:91:13:9c:64:d5:51:7f:c8:f6:fa:a5:20:
ff:f3:d6:8c:aa:d4:eb:17:21:09:99:f6:41:ca:c6:
f9:e2:41:3b:66:04:31:ef:ac:97:df:24:fd:cc:ca:
d3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DB:9F:8D:D1:6B:DC:E3:37:5D:EE:13:45:41:36:4C:2E:3C:85:AC
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:18:a9:98:c0:3c:49:e7:5c:b9:bd:3f:38:b0:53:69:9a:ab:
77:dc:b9:70:47:76:b8:7a:ad:39:10:be:e8:73:08:c4:f1:02:
43:98:ff:00:4c:d9:69:75:45:2e:5b:32:df:3a:cb:e5:50:9b:
8c:ae:03:ad:8c:d8:1e:41:5a:f9:16:36:20:82:ba:11:1b:04:
3b:a9:d3:6c:b3:6a:be:27:2b:b3:a9:ca:bc:fb:a8:09:65:16:
60:56:6c:36:3b:6b:19:d1:03:48:89:f4:fb:76:c6:13:c3:20:
96:4c:55:45:9b:bc:25:08:5d:9a:f4:dc:c8:37:56:28:12:11:
2e:cd:8c:1c:de:2a:6e:b3:f0:8b:d5:35:1b:7d:1b:80:6e:b1:
a8:dd:92:8f:37:f8:26:6f:69:0f:d5:65:5a:33:c7:c1:54:6b:
0c:87:51:4f:78:19:69:81:2c:0f:a8:88:1e:58:32:91:f6:6d:
71:11:73:fe:96:7a:e2:a7:c2:65:c5:cc:82:e6:00:97:3e:67:
44:b6:2b:27:a8:30:1f:f6:3e:fb:0b:34:24:e6:a9:6b:e3:8e:
4d:7e:16:fb:ac:1a:fc:2e:05:4f:1d:d0:70:67:e3:cb:64:3a:
c2:07:87:ab:9d:18:5e:f3:f8:fb:86:b9:cd:ec:ac:f6:59:60:
08:28:56:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2meRY+F8kYxhbZLqMKUWNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4
ODBiZTAwHhcNMjYwNDE5MTYwMDQ2WhcNMjYwNDIwMTYwMDQ2WjAzMTEwLwYDVQQD
Eyg1OGRiOWY4ZGQxNmJkY2UzMzc1ZGVlMTM0NTQxMzY0YzJlM2M4NWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvCEIqZ+WFgZCWRw8XkSONJ06EzN
QShCFU0I2qryeZHm2sky/vZWVlwQcwCrCl/Yiyg4af9uC0SR+U2f1heFyxu6oD6x
ufkWlaS230Giqjy1ewf+daKgxZ0GIN+T22e0DyFtZY20Tazou/fl+kRCgH5FreVj
lInB1UzQRv+kjbw0z/n1PWrXKAsL4zBtgVNcSF/942A01gvyB3fBfpheryi0fUcj
gZGQv2Ai8vbQUt5vXr30eGh5nRGcEhdfGC8BlxQ4fthUEUp7mAvhetAPrNgCQWiR
E5xk1VF/yPb6pSD/89aMqtTrFyEJmfZBysb54kE7ZgQx76yX3yT9zMrTywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjbn43Ra9zjN13uE0VBNkwuPIWsMB8GA1UdIwQY
MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt
ODdmNWI2NDc5ZDFlLzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl
LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhipmMA8
Sedcub0/OLBTaZqrd9y5cEd2uHqtORC+6HMIxPECQ5j/AEzZaXVFLlsy3zrL5VCb
jK4DrYzYHkFa+RY2IIK6ERsEO6nTbLNqvicrs6nKvPuoCWUWYFZsNjtrGdEDSIn0
+3bGE8MglkxVRZu8JQhdmvTcyDdWKBIRLs2MHN4qbrPwi9U1G30bgG6xqN2Sjzf4
Jm9pD9VlWjPHwVRrDIdRT3gZaYEsD6iIHlgykfZtcRFz/pZ64qfCZcXMguYAlz5n
RLYrJ6gwH/Y++ws0JOapa+OOTX4W+6wa/C4FTx3QcGfjy2Q6wgeHq50YXvP4+4a5
zeys9llgCChWfQ==
-----END CERTIFICATE-----
Generated at Mon Apr 20 03:29:43 2026 by rpki-client