Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: apRiUJel+7U28e0A10+MZblVJ6P/OrJUKGJo0c2yx28=
Subject key identifier: 9F:51:96:48:95:5A:EB:11:EA:5B:C1:A3:56:DE:33:26:AC:97:64:4B
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019E1D90D4C11C61D6F59F8CABDA90FFB9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 0635
Signing time: Tue 12 May 2026 19:01:31 +0000
Manifest this update: Tue 12 May 2026 19:01:31 +0000
Manifest next update: Wed 13 May 2026 19:01:31 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: xIBcm69hxguzi7UDVzJIyS0zctJcvpyg9HrSMiGOob0=)
2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:d4:c1:1c:61:d6:f5:9f:8c:ab:da:90:ff:b9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: May 12 19:01:31 2026 GMT
Not After : May 13 19:01:31 2026 GMT
Subject: CN=9f519648955aeb11ea5bc1a356de3326ac97644b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:52:15:bc:73:ec:21:03:f2:49:9c:3d:19:ec:
a1:be:b9:57:ed:ac:a2:25:8c:9b:39:d0:ea:b3:61:
f0:01:6b:98:3b:e0:f5:59:30:c6:a1:cf:8b:1f:1b:
89:ae:d7:64:9d:6d:5f:d5:e1:48:33:a0:06:45:f3:
63:cd:8a:7d:71:16:fa:ab:62:60:2f:68:d0:aa:62:
50:37:b2:14:d8:87:df:fc:a9:05:45:bf:ec:bc:68:
6e:c5:fc:23:ab:48:28:cf:99:7f:64:7e:49:03:e8:
94:05:51:4c:8d:be:db:31:1c:d0:df:1f:8b:a2:56:
ef:98:e0:36:a0:10:16:08:71:90:c8:3d:0b:5b:0e:
b6:20:39:b3:e8:4f:af:45:d1:9d:b6:b9:15:fa:1d:
e8:72:c9:93:5b:e8:b4:d3:a6:c3:56:3f:e5:a7:e1:
ed:96:bf:9a:c3:64:f4:c3:5d:a1:01:9d:99:85:eb:
2b:00:b8:9f:ab:e2:f7:d9:9c:6a:2e:f1:dd:00:fa:
4c:eb:42:e2:76:84:0f:84:67:f1:de:40:87:a9:89:
0b:03:40:09:9b:8e:34:bb:23:2e:89:63:f6:c9:7e:
08:0c:1b:aa:48:ac:65:9f:2b:35:58:d2:9e:a6:8c:
79:c5:35:c3:f5:b7:4e:e6:94:84:3c:60:cf:84:f0:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:51:96:48:95:5A:EB:11:EA:5B:C1:A3:56:DE:33:26:AC:97:64:4B
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:98:a5:5c:22:8a:e9:53:22:16:71:2d:ef:a5:f5:bf:d8:b0:
54:95:c0:3b:f1:fe:8f:b4:b5:94:5e:58:07:25:42:0a:82:cc:
4e:44:b7:d8:9e:db:a8:19:63:5f:5e:42:81:df:13:d0:c1:34:
0a:fd:8a:db:d2:c1:af:80:03:1d:68:d9:f9:1f:46:d1:43:34:
e8:a8:4a:4e:cd:c2:7b:c5:43:a6:a7:f5:46:f9:1c:66:28:d7:
2f:f8:cd:71:09:59:39:c8:c9:8d:fc:ae:3f:50:87:0e:03:c1:
ca:c2:e8:dc:6e:b0:c2:c3:14:aa:a3:23:72:e2:53:76:c0:14:
d5:5c:85:d1:66:8f:7c:21:86:2b:93:2b:83:50:ae:20:24:eb:
83:58:bb:5c:43:1f:df:69:d6:ee:01:c4:e1:35:86:7a:ec:67:
a5:81:8e:27:18:f1:0b:88:5c:c6:fc:87:7b:d2:3f:08:90:f8:
bd:34:4c:6c:ae:79:5e:1e:ed:b4:4f:f9:c0:1c:06:e1:dd:ef:
a2:d8:fa:08:5a:f9:fe:41:a6:2d:4b:e9:3f:dd:5d:36:c3:5d:
c7:1e:4e:66:a8:2e:15:94:b0:41:19:cf:1d:a5:63:95:ff:34:
8b:a4:68:b5:90:78:7a:49:45:62:ce:93:bf:55:8a:74:4a:bd:
36:89:46:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:32 2026 by rpki-client