Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: kGBH/ke/QwuX3voiQe1w2p7wOZhDzauZhwlfzGAmSMM=
Subject key identifier: C3:00:85:AF:3F:B8:80:FC:ED:51:06:6D:44:77:19:94:5B:05:79:1A
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 019E1F1091968215918D4EC16EFC7C83AA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 02:00:39 +0000
Manifest this update: Wed 13 May 2026 02:00:39 +0000
Manifest next update: Thu 14 May 2026 02:00:39 +0000
Files and hashes: 1: 1YAm7d6nHHlsRDgw1O6_EUuzw9U.roa (hash: riRb4iPkDBtyw2U0WQzBeSsFtt3y8g90iqUigaVwK4I=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: UtgaOG+fYmwC6XgF9e8tdgRSOlMdFX1auZqx3gl5jt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:91:96:82:15:91:8d:4e:c1:6e:fc:7c:83:aa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: May 13 02:00:39 2026 GMT
Not After : May 14 02:00:39 2026 GMT
Subject: CN=c30085af3fb880fced51066d447719945b05791a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:79:ef:66:a6:fc:77:26:a7:d3:26:80:39:7a:
38:8c:e9:7f:52:9e:9d:8e:64:21:66:58:e8:5a:fa:
78:6a:fd:86:d8:e0:23:eb:f4:ee:ea:6d:c7:ef:be:
3a:6f:db:66:30:88:3c:56:20:74:05:7b:15:dc:3b:
c6:79:a6:b9:85:8e:c0:0a:5d:01:9a:29:f3:a3:12:
17:ae:a0:e6:58:95:3b:b1:37:b8:d4:2d:56:7f:97:
81:2a:f4:f9:89:8b:d6:d3:4f:46:0d:f9:1c:c4:d4:
f1:29:f8:14:98:3c:1b:1d:43:f9:f3:da:6e:f2:1a:
67:c4:34:a1:a8:e2:12:10:a4:a1:36:49:0f:44:58:
5c:af:c5:e1:81:ad:67:17:16:77:b8:91:69:57:56:
a6:ea:c4:ea:4b:8f:48:7f:86:1c:f7:a8:cd:ca:fe:
8c:11:d2:16:ba:18:e3:54:c8:8b:3d:51:df:8e:b9:
84:7d:e5:1d:5b:ba:91:70:6c:7b:e9:66:39:71:77:
6a:91:ec:e8:e4:f8:ac:7a:ea:fc:71:40:4b:e7:4e:
b0:45:44:fb:2a:06:db:ff:47:fe:b5:ad:6c:46:4b:
89:17:9f:aa:44:b7:e7:cb:47:ed:a6:9f:d7:26:70:
f2:be:41:e3:5f:41:f7:72:d2:29:92:63:9f:2a:25:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:00:85:AF:3F:B8:80:FC:ED:51:06:6D:44:77:19:94:5B:05:79:1A
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4f:37:88:5f:0a:5b:2b:d7:ca:ba:8b:ed:8e:3e:27:5f:72:
a6:0b:27:f6:b8:be:2b:b2:ca:6e:a5:19:c9:7c:5c:95:07:e6:
4a:11:c5:e0:61:9a:a3:bb:e7:f7:02:75:a0:52:f1:81:96:c6:
5f:05:a4:2b:e4:be:bf:75:b7:ab:85:c5:bf:c9:bb:35:c4:94:
c5:61:47:d3:ab:ec:57:23:e5:6c:b9:2a:aa:57:04:96:f0:5d:
5e:38:8e:27:67:0d:1e:f6:06:07:52:45:be:70:a7:43:02:d5:
86:bd:73:90:85:85:c5:8c:12:cb:b3:df:54:f7:ae:e3:3b:84:
3f:88:97:6b:ae:e4:7c:d7:36:21:0c:89:8e:7d:20:60:7d:9f:
e1:f9:0f:df:7f:a6:13:4b:80:ea:c1:ad:42:94:38:c3:eb:66:
72:10:ef:74:52:9a:fb:0c:34:07:1e:d2:79:08:16:6b:02:1a:
58:f5:50:79:a9:9a:22:57:29:7b:2d:04:a6:12:5e:e9:1f:27:
b1:86:58:e8:a7:a4:4e:c1:9c:4f:21:6a:07:9e:f1:d2:81:27:
71:f0:5b:46:05:d5:bb:50:4f:a7:6c:d0:de:8d:93:dc:e5:94:
6e:66:89:7a:ad:ae:97:83:f4:ce:28:85:80:85:11:0a:b5:60:
7a:bf:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:27 2026 by rpki-client