Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: 36C6+zOFbYNDKi785whprMIRpy5YzcdFpAQuZgpfMNU=
Subject key identifier: D9:A0:0D:B1:98:AD:E8:7C:6E:34:85:5D:F3:5A:33:F3:31:BF:49:86
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 019E205A4B831A2E011AC122943A13CD0A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 0AAE
Signing time: Wed 13 May 2026 08:00:48 +0000
Manifest this update: Wed 13 May 2026 08:00:48 +0000
Manifest next update: Thu 14 May 2026 08:00:48 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: 3WG/lWGx1eyDFD/uP8MnzRMOD8XKBhS04CpmmkT4u4A=)
2: nTSOIsFCXPktLiPKU0rpSqAxP9c.roa (hash: p4pPo4o8ji9IxG+yykgVyf22JPwriVlViBGbSDBIE2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:4b:83:1a:2e:01:1a:c1:22:94:3a:13:cd:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: May 13 08:00:48 2026 GMT
Not After : May 14 08:00:48 2026 GMT
Subject: CN=d9a00db198ade87c6e34855df35a33f331bf4986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:77:0e:c9:00:75:f7:72:64:db:2d:58:7f:
01:50:48:bd:b7:50:5c:fa:cf:3e:2c:3d:f0:04:4e:
94:1b:8c:ae:81:0c:29:b3:06:6a:70:38:47:8f:0b:
9e:ba:ca:a4:c0:34:1a:85:cd:30:ff:d4:6d:8b:8a:
e7:f6:49:63:91:c3:31:67:22:5b:8b:63:a6:17:d3:
f6:48:44:ea:4f:85:81:02:67:28:2c:4d:fe:aa:4f:
ee:de:75:ac:53:15:98:bb:50:31:51:63:ac:d2:32:
f4:a6:ca:1b:e9:d0:7d:97:21:85:2c:ac:4e:08:fe:
bb:75:83:6e:c4:e9:9d:d1:38:18:33:cc:10:bd:d8:
34:c7:82:67:21:87:75:51:c0:0f:3d:1a:d3:76:40:
cd:cf:fa:24:9e:d8:f1:f1:f0:bb:44:c4:69:cf:e1:
58:3f:10:7b:97:c0:f4:20:09:16:d4:f2:70:ce:a7:
dd:89:aa:d5:cf:72:d6:1d:71:16:fa:e4:cf:2a:fa:
90:b1:37:e4:98:d7:6a:77:9e:06:0e:d4:aa:30:f9:
3a:fd:67:f9:d7:1b:07:e9:09:f7:2d:bd:d6:0a:a7:
76:62:de:a2:a3:97:e0:4b:7c:81:8d:ec:e5:12:2e:
cd:16:96:39:c4:c7:af:42:f8:00:37:96:08:4c:23:
d9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A0:0D:B1:98:AD:E8:7C:6E:34:85:5D:F3:5A:33:F3:31:BF:49:86
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:41:ee:da:dd:89:c8:06:57:77:9b:ce:3b:0d:11:1f:fe:f9:
e7:1a:e4:fd:0a:a6:0c:80:b0:56:5b:92:de:cb:10:39:9f:8d:
a2:ab:72:aa:35:c3:54:3d:bc:e0:4c:b3:4a:9b:13:51:23:d6:
ad:3c:5f:a2:59:29:d8:f5:66:3b:f7:0c:c8:5d:9c:c1:f0:ab:
e3:c2:95:f3:fd:ec:b9:61:12:62:b1:b2:85:d8:b6:c7:aa:7f:
f2:d4:68:3a:a1:73:b2:02:70:cd:f2:c0:86:e5:7c:71:47:b5:
85:79:69:b0:2f:b7:e9:33:6a:f5:44:e0:35:6c:f2:fc:de:d0:
3a:6b:a4:02:66:ed:68:b0:da:05:3a:4f:14:0a:b9:a6:b2:6f:
ff:0c:b4:9a:53:b9:74:44:c8:ed:ea:bd:a0:84:0d:3e:e8:64:
37:7e:99:8b:43:04:ae:8c:10:bb:bb:e7:57:5c:87:d5:d7:b8:
8a:6b:fb:62:a2:cc:a1:0e:b2:17:59:98:53:fb:91:50:98:c4:
cb:c9:bb:30:a1:62:0c:6e:31:9a:54:02:d7:09:e3:aa:cb:08:
35:e0:e6:35:df:12:3f:64:cf:20:02:63:15:f5:ae:92:f6:01:
18:ae:08:59:65:04:73:cd:62:75:be:91:d8:f4:7d:26:3d:52:
12:6a:ab:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWkuDGi4BGsEilDoTzQoAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZGMyMzUyMTE3NjAyMzIyZDc0MWM1MTM2OGNhOGI4ZGQx
YTNlYWEwHhcNMjYwNTEzMDgwMDQ4WhcNMjYwNTE0MDgwMDQ4WjAzMTEwLwYDVQQD
EyhkOWEwMGRiMTk4YWRlODdjNmUzNDg1NWRmMzVhMzNmMzMxYmY0OTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtId3DskAdfdyZNstWH8BUEi9t1Bc
+s8+LD3wBE6UG4yugQwpswZqcDhHjwueusqkwDQahc0w/9Rti4rn9kljkcMxZyJb
i2OmF9P2SETqT4WBAmcoLE3+qk/u3nWsUxWYu1AxUWOs0jL0psob6dB9lyGFLKxO
CP67dYNuxOmd0TgYM8wQvdg0x4JnIYd1UcAPPRrTdkDNz/okntjx8fC7RMRpz+FY
PxB7l8D0IAkW1PJwzqfdiarVz3LWHXEW+uTPKvqQsTfkmNdqd54GDtSqMPk6/Wf5
1xsH6Qn3Lb3WCqd2Yt6io5fgS3yBjezlEi7NFpY5xMevQvgAN5YITCPZXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmgDbGYreh8bjSFXfNaM/Mxv0mGMB8GA1UdIwQY
MBaAFBjcI1IRdgIyLXQcUTaMqLjdGj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2Mt
ZDdjMGU5MzkzZWEwLzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8wMTQzY2QtYTgxNC00ZDQ4LWE4N2MtZDdjMGU5MzkzZWEw
LzEvR053alVoRjJBakl0ZEJ4Uk5veW91TjBhUHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEHu2t2J
yAZXd5vOOw0RH/755xrk/QqmDICwVluS3ssQOZ+NoqtyqjXDVD284EyzSpsTUSPW
rTxfolkp2PVmO/cMyF2cwfCr48KV8/3suWESYrGyhdi2x6p/8tRoOqFzsgJwzfLA
huV8cUe1hXlpsC+36TNq9UTgNWzy/N7QOmukAmbtaLDaBTpPFAq5prJv/wy0mlO5
dETI7eq9oIQNPuhkN36Zi0MErowQu7vnV1yH1de4imv7YqLMoQ6yF1mYU/uRUJjE
y8m7MKFiDG4xmlQC1wnjqssINeDmNd8SP2TPIAJjFfWukvYBGK4IWWUEc81idb6R
2PR9Jj1SEmqr8w==
-----END CERTIFICATE-----
Generated at Wed May 13 15:12:16 2026 by rpki-client