Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: LzZq4wFV3s5tyRQT6ryoD9kdQ/mlwYWz+Dz/si1qpbs=
Subject key identifier: CE:A8:B9:B9:C4:C7:35:7B:EC:08:AE:EE:4C:76:A2:44:7F:20:C3:6D
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 019E1F7F3631C9966BC29EB04478DB41A53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 0A62
Signing time: Wed 13 May 2026 04:01:30 +0000
Manifest this update: Wed 13 May 2026 04:01:30 +0000
Manifest next update: Thu 14 May 2026 04:01:30 +0000
Files and hashes: 1: EvlHWqhQzmdjRG2k6tk-9HD_zOg.roa (hash: CaEBziMi2C6rN6WGf7O34W/+WtB1Ogao7r0fRD3u2XA=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: FLx0iX2qsKwCAdZSOCv/8JZL9zeLuJfvg3vYONiQZUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:36:31:c9:96:6b:c2:9e:b0:44:78:db:41:a5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: May 13 04:01:30 2026 GMT
Not After : May 14 04:01:30 2026 GMT
Subject: CN=cea8b9b9c4c7357bec08aeee4c76a2447f20c36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:06:c3:ef:10:e4:e1:93:96:3e:73:9d:01:
f7:03:ec:f8:54:22:6d:cf:b5:d2:8c:ce:80:11:e8:
ca:da:fc:40:72:c8:ee:7e:fa:6d:49:72:7c:6c:66:
be:e8:f0:8a:b7:81:2d:3b:a1:6d:99:cf:83:c6:52:
36:57:c4:ed:f6:5c:86:4b:df:18:a8:bb:fd:7f:0a:
e5:7e:f5:2e:2c:b0:f6:0f:8b:9d:73:e2:b2:24:9e:
28:10:89:56:39:07:9d:04:f5:ae:fb:53:0a:3e:69:
1e:fd:24:74:61:87:aa:7d:5b:f4:0d:99:eb:b3:04:
c8:9b:f1:10:e3:98:03:8d:6e:8c:2e:ba:71:46:c0:
98:55:8a:e2:01:c5:51:f9:aa:e6:7a:10:45:14:55:
fc:ba:1e:07:da:df:a1:94:b5:c7:9f:fa:69:ee:5f:
b3:d4:2c:0d:42:5b:93:71:84:16:0b:33:36:a9:52:
f3:8c:fe:fb:33:6d:7a:c9:52:35:25:d7:e0:62:85:
69:f4:6f:01:ce:c2:dd:f6:2c:08:4a:88:d7:8a:8b:
b2:ee:88:84:35:6e:cd:35:a8:bb:3a:1e:73:26:41:
e6:ec:c8:49:80:5e:43:97:bb:34:e3:d5:c3:ad:f4:
5c:77:e7:44:4b:2b:a6:b1:b9:ea:43:3e:4c:77:d6:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A8:B9:B9:C4:C7:35:7B:EC:08:AE:EE:4C:76:A2:44:7F:20:C3:6D
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a7:49:46:21:48:f0:56:60:3e:79:eb:d6:0f:26:41:1b:7b:
9e:c5:d2:a9:82:48:4b:91:23:4b:15:5e:24:66:43:6b:94:d8:
e2:76:e6:d5:3a:cb:12:88:9f:48:88:dc:c8:c1:a0:a8:66:36:
39:90:56:ad:4a:72:c3:90:19:a7:28:c3:f4:c7:3d:02:65:7a:
3f:51:db:1f:90:4d:42:99:95:38:59:46:95:b1:f3:24:c7:ac:
4c:38:8f:af:d9:85:23:2d:b4:8f:d6:6d:b5:56:8d:06:4d:b8:
60:89:85:25:da:1a:18:47:87:9e:22:f3:79:fd:bc:03:7c:90:
2e:ac:bc:fb:ba:d6:85:a4:da:8d:58:19:cb:15:eb:1e:a2:36:
12:0d:ca:ff:1b:86:2b:87:1d:4b:5b:10:f2:15:dc:1c:fd:87:
8a:0b:65:0e:2e:c1:0b:d3:a5:50:f4:88:cb:3f:c5:7c:2a:3c:
28:52:0a:10:b7:fa:07:27:6e:8b:f4:21:b1:99:5c:cd:84:75:
36:65:ad:73:f8:f0:35:56:8b:72:90:1d:9a:d2:b2:07:20:c7:
5b:0e:c9:25:ab:6e:b8:2b:b3:a3:49:fe:6b:69:25:79:6f:1f:
5a:57:ae:10:46:31:3c:b4:9b:cd:b0:93:b9:f5:e3:6c:89:26:
5d:d1:6d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:20 2026 by rpki-client