Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier: CatAedydzJfxNplATIsIKHX6r5FceK6wfW6/sl6Z0D4=
Subject key identifier: 43:8D:48:D1:10:73:7F:DF:B9:16:6B:7C:48:42:72:65:8A:D4:84:17
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 019E1EA2A95084D88028910E76200E1B05D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 00:00:37 +0000
Manifest this update: Wed 13 May 2026 00:00:37 +0000
Manifest next update: Thu 14 May 2026 00:00:37 +0000
Files and hashes: 1: 75SRw9aNyewbtPYAMH8et8hfSr4.roa (hash: Ef79opNAcjrl49Rm2x5OxhpX27NyaA68e2jdXKrtpHA=)
2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: BELuN6EL3VaTtzi7DAM4wsTzLWUSMPg0qM2uwhvW74Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:a9:50:84:d8:80:28:91:0e:76:20:0e:1b:05:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: May 13 00:00:37 2026 GMT
Not After : May 14 00:00:37 2026 GMT
Subject: CN=438d48d110737fdfb9166b7c484272658ad48417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:e1:23:6f:08:c1:92:9d:47:d9:90:e8:64:
17:eb:9d:3b:42:43:da:12:7e:8c:1d:7f:8f:65:30:
b4:f8:4d:94:22:4d:80:1d:51:ba:21:f9:b0:7e:38:
8b:24:b5:61:dc:de:55:d0:aa:63:af:1e:43:92:97:
e1:c5:de:aa:2e:80:1b:28:2b:21:44:1c:4b:35:65:
59:fe:01:4f:16:8d:1c:0d:22:a3:a2:07:68:c7:18:
84:a0:4f:48:85:2b:07:fe:ae:4b:6c:0c:13:22:14:
95:99:46:91:0a:f0:58:64:95:d7:29:a0:3e:43:07:
e8:90:33:12:23:69:05:44:c4:e0:5a:c8:00:d4:fb:
99:51:29:4a:d0:ad:de:2e:b3:52:ad:09:63:44:66:
84:91:62:4e:2a:47:21:5f:02:8f:13:0f:d1:21:03:
da:d0:14:f6:c1:f8:68:6a:0a:a8:96:48:ab:f5:67:
0f:41:5b:8c:dd:86:ca:c1:76:02:ca:81:6c:d3:a3:
44:5f:fd:e1:50:9e:60:45:b0:5d:a6:30:e1:08:c1:
05:73:c2:d5:99:f3:c5:fe:fc:a4:f1:e1:5b:6a:81:
3f:3b:7d:c0:c9:83:9f:56:7e:53:70:88:80:28:12:
ee:62:16:59:0d:81:e7:4d:6f:71:f4:85:dc:5a:cd:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8D:48:D1:10:73:7F:DF:B9:16:6B:7C:48:42:72:65:8A:D4:84:17
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f5:1e:7e:53:7a:d0:0a:d3:aa:32:a9:cf:23:3f:26:70:0e:
ae:d7:31:43:92:a7:cd:d1:0e:7f:ee:c1:7d:78:87:bd:13:78:
f8:5d:96:64:19:35:43:09:49:8c:4d:31:71:05:c5:14:56:fc:
91:58:a1:bd:4b:07:88:0f:bd:49:f4:d5:3d:2b:e9:22:f8:69:
20:3e:5f:53:e0:78:49:a8:77:19:64:98:a0:78:d3:0d:fd:b9:
52:80:3d:41:51:42:3e:e7:43:8a:7a:51:6f:9d:a9:61:a0:45:
8e:39:5a:0c:32:40:fe:21:62:7e:48:23:b4:67:26:09:69:dd:
b9:91:84:52:9a:df:3c:62:4e:e9:6e:4f:5b:d8:07:99:3a:b7:
ea:c2:12:3b:9b:7f:d1:86:f7:1a:83:15:73:81:19:f8:8a:73:
ac:94:c6:96:a1:4b:a9:1d:2b:58:1a:f9:80:33:49:74:d0:43:
b8:f7:d9:39:5b:a4:ae:dd:97:97:ec:b3:3a:63:14:b9:4a:5c:
35:f1:9a:7a:99:f0:98:ef:b1:1d:8e:63:cc:96:5b:85:5a:bd:
fd:f0:77:f6:1d:be:05:d2:a9:63:04:47:bc:23:b4:72:24:00:
d9:4e:9d:d7:2d:f8:aa:6a:24:0e:2e:15:63:53:be:30:7b:fb:
2b:60:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:33 2026 by rpki-client