Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: QRWKhyezQFLZtM4u80IrJYcHR/3RfpGrxGOpv0tdIbg=
Subject key identifier: B9:9F:2A:15:E9:A4:7D:74:90:D2:D5:02:8D:3C:74:74:F8:D1:76:3B
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 019E1D903D87B3EDF4C0CCD2D2A250AE57DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 0327
Signing time: Tue 12 May 2026 19:00:52 +0000
Manifest this update: Tue 12 May 2026 19:00:52 +0000
Manifest next update: Wed 13 May 2026 19:00:52 +0000
Files and hashes: 1: VZlk3_EL61CYb3RNlcU2J6pWmUI.roa (hash: TdKNl2Itc9GRjoDkFHDMi9Jg/tD3GjcluXEZzxUL/Fo=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: eprgMuiU52jLsdsjiP2fcb26PdVuUb7NHaU+rDeC+PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:3d:87:b3:ed:f4:c0:cc:d2:d2:a2:50:ae:57:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: May 12 19:00:52 2026 GMT
Not After : May 13 19:00:52 2026 GMT
Subject: CN=b99f2a15e9a47d7490d2d5028d3c7474f8d1763b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:cd:bd:9c:83:c4:d5:99:c9:f0:97:61:c2:
d0:d1:20:33:52:e4:1a:6f:3c:15:ca:cb:14:3a:36:
19:60:27:71:03:61:6d:67:b7:e2:00:65:19:48:ac:
b4:4a:83:0e:f9:b0:9a:b1:b4:0d:f8:d0:34:f5:70:
1f:c3:70:0e:42:f9:dc:60:56:0a:ba:d0:93:33:38:
5e:d4:38:2a:b6:87:2f:f1:bb:3c:56:68:34:72:1b:
b6:dc:bc:f6:cc:e6:9a:94:a0:3f:c9:29:ae:c2:99:
98:7c:ca:c0:0d:bc:7b:45:84:e9:04:f9:8c:90:d3:
c6:b3:64:2a:2d:56:71:0d:b8:1f:34:2f:06:5f:9b:
84:43:97:f6:86:7f:5a:bb:6e:ac:a2:e3:cf:84:74:
4a:9a:6c:16:5c:ee:f6:8a:50:57:61:10:fc:cb:21:
62:1e:cc:59:c5:f8:f2:ed:a7:3b:54:b4:bc:57:45:
0f:de:ac:68:fd:2a:95:8a:be:51:74:5b:18:05:e3:
95:89:75:2d:17:2d:55:a8:77:02:72:92:8a:81:f7:
9f:c8:df:8f:ac:e9:92:af:8e:fa:1c:f3:b1:8b:45:
01:6c:04:2b:b3:66:52:71:c2:c3:b5:a1:98:2a:fe:
a2:8f:9c:31:fc:be:e0:9d:99:6d:26:23:62:b9:e1:
40:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9F:2A:15:E9:A4:7D:74:90:D2:D5:02:8D:3C:74:74:F8:D1:76:3B
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a7:3a:c3:ba:bf:7b:80:d8:ab:3c:52:dd:c8:f7:04:89:81:
14:7f:e0:aa:fd:3a:e3:ad:4a:60:b8:cc:62:ab:da:86:64:b4:
2f:2f:4b:74:7d:25:4f:04:9e:ab:ba:da:6d:f6:b4:af:f7:3d:
25:dd:64:67:91:8d:c8:73:51:3b:5a:a5:ec:29:45:58:b1:69:
9d:5b:49:05:47:28:03:30:64:b4:dc:68:3f:52:b9:31:05:de:
39:9e:da:e8:83:30:8f:d8:f2:42:ec:9c:a7:9e:b4:29:a3:13:
47:d2:97:65:2e:be:ee:19:5e:d7:6e:5d:1c:6b:aa:2d:bc:5d:
ef:ad:1e:1f:21:1a:31:d1:e9:bb:d0:0e:ca:1d:26:91:fc:9c:
36:9e:11:02:c1:69:34:d5:16:e0:e3:71:95:76:75:17:ef:ab:
6d:4a:c0:77:33:d4:76:a9:60:98:2b:e8:34:f7:55:c9:8d:da:
84:c3:aa:41:bf:ce:82:45:8e:33:81:35:fa:1a:bc:21:60:a8:
24:74:b4:a0:18:2e:c7:bd:8e:fc:bf:55:03:17:2f:62:4f:0c:
35:72:5d:69:28:16:06:55:91:3d:1c:fc:3d:4c:7b:39:5e:ff:
d3:18:16:7e:8c:8a:95:94:b4:26:13:dc:3e:9e:61:63:2d:0b:
46:48:87:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:37 2026 by rpki-client