Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: 4TROJ2w9ElvRKJnwqTtL/LHmpl4p3ZXBGoBk9ZxsdTk=
Subject key identifier: 38:26:F7:9C:7D:26:C1:9D:CE:02:16:CC:47:6B:2E:7F:25:B3:C1:B8
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 019E1ED9D0C5E6972FB1927D9B1B05BA634F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 062F
Signing time: Wed 13 May 2026 01:00:51 +0000
Manifest this update: Wed 13 May 2026 01:00:51 +0000
Manifest next update: Thu 14 May 2026 01:00:51 +0000
Files and hashes: 1: GHSDF2JPEye0O4AWUxBCYSEkaAI.roa (hash: 0lOTIXpj+IiF+Cvw2ZPIma45JyDvj6gDTakt2B0h2bc=)
2: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: TcHgMyvhvxNaeEnShovBUR/BbKEg2yX/5yfEDr7hxRM=)
3: zTqwVEZEkJ2o5vXaLHz2zvS-PCU.roa (hash: 3m9rp/jqInhSmfaVC+tbC+fcAxs/SBMNeqBaNmCor5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:d0:c5:e6:97:2f:b1:92:7d:9b:1b:05:ba:63:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: May 13 01:00:51 2026 GMT
Not After : May 14 01:00:51 2026 GMT
Subject: CN=3826f79c7d26c19dce0216cc476b2e7f25b3c1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:60:62:40:d0:ca:cd:f3:70:ad:79:c4:0d:ca:
10:c0:b9:9b:2e:13:99:ee:53:46:5f:a9:0a:f0:ae:
7b:63:5a:e8:3d:34:2d:72:4c:b0:85:43:74:37:30:
2b:a9:07:3d:b3:6a:61:3a:a6:70:ba:60:b8:76:cb:
3b:49:74:d8:fa:cc:f0:a0:c2:a7:25:57:4e:d9:23:
bc:48:15:ae:64:37:2f:49:c2:7c:d3:f4:83:46:a6:
94:d1:fb:0a:0d:ae:75:a5:ca:2d:f2:5b:b9:9f:8b:
93:17:a7:78:ab:09:ff:4b:2c:f2:0b:05:96:63:81:
82:bd:ab:77:3a:17:d0:76:1f:7e:96:7d:07:6d:52:
88:36:52:b8:06:96:08:7f:13:46:9c:b8:d2:44:36:
09:93:3c:2d:bc:b6:12:64:e9:e1:e0:e1:67:d9:e9:
02:6e:4f:10:b2:14:a6:d3:69:f4:f7:8a:ad:5d:b1:
16:1e:d0:ed:59:aa:3c:5d:27:82:67:76:fb:42:ac:
e7:a4:a9:cb:41:d4:db:51:99:ca:13:2f:bc:26:df:
5d:6c:a1:cb:72:5b:7d:cf:fd:d6:22:e7:64:8a:4f:
01:7c:5d:c5:e5:ad:86:3c:a1:57:c8:1a:c1:3c:85:
6e:0d:f8:f5:44:3d:aa:d8:10:9e:2b:93:a8:eb:da:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:26:F7:9C:7D:26:C1:9D:CE:02:16:CC:47:6B:2E:7F:25:B3:C1:B8
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ce:7d:98:61:c8:ed:05:5e:25:c0:bc:62:80:38:55:70:55:
50:e1:8f:84:b2:35:19:9d:50:e3:70:72:65:77:d6:f1:5b:d8:
ca:77:f9:2b:11:91:bd:86:b9:51:8a:ea:7b:ff:ae:f1:3c:7e:
b6:2b:89:7d:88:0b:b7:ed:6a:97:cb:d4:e7:71:8f:02:ba:56:
92:07:2a:b6:e4:6e:54:8c:b4:38:2e:5d:b3:01:37:f3:3d:6e:
03:9b:3c:d3:31:92:e6:5f:d1:07:b5:fa:8f:26:4b:ce:1c:76:
72:1f:5d:57:c0:58:83:ef:cf:d0:fd:b8:4d:19:e2:54:b3:d5:
ae:53:4d:35:32:99:66:f6:d2:45:64:60:07:92:6f:c7:9c:19:
52:b7:5f:ee:57:51:c1:a2:d0:05:0f:fa:3f:78:24:ea:da:2e:
1f:3e:ad:c7:27:31:70:f5:ae:11:ad:8a:5e:06:5e:aa:6c:01:
fa:7b:61:91:d0:41:04:01:04:55:c7:66:7f:b0:83:2c:d6:50:
99:66:1b:51:f0:4a:ca:9f:d6:bf:a4:69:d3:15:1b:56:db:0a:
20:33:7d:48:ab:63:3e:04:7c:d8:3f:0a:4b:43:47:ba:a1:d4:
5b:fa:10:ed:db:42:e9:04:b1:c8:28:48:47:51:05:54:9d:ee:
23:6f:78:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:52:54 2026 by rpki-client