Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: G7UHKmiFXW7aZ6HADeKuiSFNWBWEG4WHhVkDpkpsOPQ=
Subject key identifier: DF:AE:EC:FC:89:20:54:4B:07:2A:50:8C:45:54:0E:27:0B:38:56:FF
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 019E1C471693CFB17ED5A53D9E6B91D27A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0D1D
Signing time: Tue 12 May 2026 13:01:21 +0000
Manifest this update: Tue 12 May 2026 13:01:21 +0000
Manifest next update: Wed 13 May 2026 13:01:21 +0000
Files and hashes: 1: M00pliKuNDats_ZC6HyNepm6oHs.asa (hash: G3itmzhXQg35jkvFpR4kKmB9KsdkESgaFNJeidZ7FPE=)
2: TtXo5-QRvXwKIgknKnZ4_4t2vL8.roa (hash: mXHeMxujxsacK8/QlflktbO+DxAXX0UCko2MtIwDM0I=)
3: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: oldaRW6+Qxwk9jnt3phhy9Xrr33iM4zblaMiYgmJoO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:16:93:cf:b1:7e:d5:a5:3d:9e:6b:91:d2:7a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: May 12 13:01:21 2026 GMT
Not After : May 13 13:01:21 2026 GMT
Subject: CN=dfaeecfc8920544b072a508c45540e270b3856ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:0b:3a:04:34:b9:c6:42:1e:72:b0:cb:f8:
83:a5:8f:35:6e:9e:22:73:94:c1:b7:11:d9:14:78:
d9:a3:fd:42:f4:ca:2e:74:83:43:a2:3a:c2:c4:2c:
92:48:40:3a:df:e7:21:56:ba:10:87:7c:ee:d6:c5:
01:b9:59:40:94:09:02:40:5e:6e:88:19:6f:53:d9:
af:ea:6f:fe:b9:8c:22:49:ba:9c:8b:27:10:94:45:
3c:42:63:01:aa:f3:a2:ed:b1:20:6d:ce:19:d4:fc:
0d:bf:28:ee:e1:a6:e0:24:77:a2:c9:c9:c6:59:37:
7a:9c:c1:36:71:75:8a:a4:27:2a:f7:cc:2d:37:5b:
68:67:55:10:6c:a6:5f:ba:c6:67:2a:c9:40:9e:b8:
a5:42:3a:7b:4e:46:de:05:55:fd:a0:25:85:7b:20:
08:b2:ae:5c:ac:50:5f:b0:47:56:3a:68:c2:53:6b:
da:48:d2:d8:f3:35:00:f2:05:10:67:13:3b:03:85:
2e:90:0d:ca:67:78:a9:8f:d3:90:e1:93:e2:31:b9:
f9:e0:dc:12:6e:4d:38:37:ed:10:c4:1d:cd:e1:c1:
65:5d:d0:1b:e1:41:4e:b8:4b:ab:5e:4e:c8:19:77:
ad:7d:00:ef:2f:6d:c9:86:3f:a2:b7:be:64:e8:48:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AE:EC:FC:89:20:54:4B:07:2A:50:8C:45:54:0E:27:0B:38:56:FF
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6a:e6:28:a1:aa:1a:0d:c8:84:0b:d4:1f:23:94:48:d5:74:
e1:f3:04:e8:c0:2c:39:ef:9f:ef:69:54:dc:ac:90:a3:8c:da:
80:20:11:18:f6:fb:56:42:f0:5c:13:c7:7d:da:72:5b:45:a8:
c3:59:b7:32:7c:70:79:a3:65:b7:e9:37:da:56:63:ba:dc:f8:
73:e2:92:4c:17:79:b6:23:39:b8:e6:7c:81:fb:dc:1a:09:8a:
0e:b8:4b:d6:e7:af:8e:75:e9:32:1b:00:7a:05:95:7d:e5:7b:
5d:fc:04:e0:cc:77:4c:90:83:61:85:f0:f8:b6:bf:e7:6f:75:
ab:df:e9:c3:83:87:70:45:c9:21:62:1e:b0:64:b4:6e:8e:45:
ee:eb:01:5f:98:92:02:a5:d8:09:cc:ae:16:10:3c:12:53:04:
3e:59:8b:2b:09:f1:d9:1f:a7:f3:82:a2:c6:4b:79:70:1f:10:
87:ca:62:dd:d7:ae:7e:4b:2d:cd:a1:d0:73:ef:5e:b8:2e:9b:
49:af:80:c6:74:8f:08:ce:61:3e:b4:86:47:89:17:1f:86:24:
39:e0:41:d0:95:10:f8:c4:c2:eb:11:07:df:2c:03:46:7b:dc:
8e:fa:6f:b3:10:84:eb:19:7d:16:53:a5:c0:23:c6:ae:ca:b3:
55:4c:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:19 2026 by rpki-client