Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: hUs+5Y2E6HMCgGZoYpIM/n8CPPcWQl8CJWeI5fIXsvo=
Subject key identifier: 56:D8:08:2E:A1:BB:96:07:A1:15:ED:89:1D:38:E3:40:50:44:1B:52
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 019E1EA2F6DF0A93A85DF493D343BF399D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0B2A
Signing time: Wed 13 May 2026 00:00:56 +0000
Manifest this update: Wed 13 May 2026 00:00:56 +0000
Manifest next update: Thu 14 May 2026 00:00:56 +0000
Files and hashes: 1: 9juOHHvd5RFbMo7YpBoEDVPCe1k.roa (hash: Np2xOmc+WOwvwwk8juGM7WJDeqa+XWYrYA4kRq6ZgRQ=)
2: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: AG5RlYvj0BhpXIPva9OcLNh8CqsXxUpfLmiyPdO9z5Y=)
3: dEFpqvjQA0JxyxJprch9jCnyPtQ.roa (hash: YlQsoVluRkz7sHf6N39+KpsENZK1ax6g2ruQYAyFf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:f6:df:0a:93:a8:5d:f4:93:d3:43:bf:39:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: May 13 00:00:56 2026 GMT
Not After : May 14 00:00:56 2026 GMT
Subject: CN=56d8082ea1bb9607a115ed891d38e34050441b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:bd:af:43:60:16:5b:1a:33:ee:fa:11:1e:
1d:95:3c:47:5e:2e:69:d5:32:e6:4e:ae:03:1a:58:
79:2f:c4:f5:5f:7b:b1:2f:38:d6:a2:d7:4c:17:34:
5a:e0:5f:6b:e6:5a:eb:c1:df:5b:f0:d1:e5:e4:65:
19:04:81:46:b3:76:d9:1f:7b:06:91:c2:6d:b5:d0:
1d:58:6f:66:66:ef:20:cf:27:45:94:80:a6:30:04:
40:0d:1f:d7:c6:a9:67:7e:b1:bd:88:02:f9:46:a0:
ca:67:f9:7b:aa:5e:c4:a7:52:e8:52:d0:69:8a:24:
33:7b:6c:b8:58:98:d9:87:bf:68:16:18:59:a0:57:
c0:88:6e:9a:6c:e4:3f:81:e7:08:e3:ba:07:cb:0c:
7d:a9:82:4d:d2:23:c0:2c:99:da:fc:27:60:b6:b5:
de:e4:7b:94:8e:c3:aa:67:c9:5a:e1:f5:85:25:33:
cd:cd:09:4c:f1:81:84:fc:52:7f:dc:3a:ba:f6:8c:
5a:cf:27:83:8a:30:ae:67:d1:ce:d7:42:a4:83:87:
e2:b9:ba:07:29:f6:6e:42:d2:10:ab:be:91:83:1f:
99:99:f4:5c:7b:63:b3:8a:94:03:d0:c4:dc:c9:aa:
b0:4c:5c:15:bc:7d:0c:63:73:39:bc:0b:5a:c0:c2:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D8:08:2E:A1:BB:96:07:A1:15:ED:89:1D:38:E3:40:50:44:1B:52
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:19:3e:cb:05:34:bc:14:17:2a:be:f6:a2:0e:6a:98:98:5c:
6a:5b:68:60:7a:43:72:65:6b:92:14:7f:45:fe:b7:43:39:f6:
f6:02:5e:1d:d4:7a:14:79:9a:38:99:bf:ea:ef:be:ab:d3:da:
56:8f:89:b2:ff:7e:62:93:84:a3:d8:ba:70:f6:1d:14:ea:2b:
c1:7c:db:2c:41:a2:dc:18:ec:e9:06:d9:d9:22:da:8f:11:06:
44:eb:78:d9:ff:5a:7a:a6:da:1d:36:0f:2b:a3:43:e5:21:40:
5f:2d:fb:8e:0e:4d:b6:bb:d8:74:96:5e:5d:ab:3c:06:dc:a6:
b6:01:eb:96:1e:8e:21:b8:e2:05:e5:75:bc:13:f9:db:db:29:
c8:e0:45:f0:d3:da:59:06:bb:ed:8b:6c:f5:7e:53:88:cc:38:
0a:dd:02:0a:6f:15:02:a6:24:bb:09:7e:37:d9:9e:b3:53:56:
9f:99:62:ef:10:8a:dc:03:2c:b6:c6:9d:dc:24:ba:ce:1f:cc:
37:d3:da:1e:59:08:d5:3a:02:50:a7:2d:35:59:09:71:af:6e:
12:25:b6:80:0a:59:95:2c:b8:42:2d:8c:73:e1:4f:04:f9:ca:
8b:23:c4:78:5a:c3:43:e0:6f:d2:eb:d0:78:df:bc:d9:4b:ab:
00:ff:98:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eovbfCpOoXfST00O/OZ1qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NWEyZjY3ZDI0NWNiYTk1MThiMDE3MDYxYTcxNjkyZWU3
OWU3ZmYwHhcNMjYwNTEzMDAwMDU2WhcNMjYwNTE0MDAwMDU2WjAzMTEwLwYDVQQD
Eyg1NmQ4MDgyZWExYmI5NjA3YTExNWVkODkxZDM4ZTM0MDUwNDQxYjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyS9r0NgFlsaM+76ER4dlTxHXi5p
1TLmTq4DGlh5L8T1X3uxLzjWotdMFzRa4F9r5lrrwd9b8NHl5GUZBIFGs3bZH3sG
kcJttdAdWG9mZu8gzydFlICmMARADR/XxqlnfrG9iAL5RqDKZ/l7ql7Ep1LoUtBp
iiQze2y4WJjZh79oFhhZoFfAiG6abOQ/gecI47oHywx9qYJN0iPALJna/CdgtrXe
5HuUjsOqZ8la4fWFJTPNzQlM8YGE/FJ/3Dq69oxazyeDijCuZ9HO10Kkg4fiuboH
KfZuQtIQq76Rgx+ZmfRce2OzipQD0MTcyaqwTFwVvH0MY3M5vAtawMJrKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbYCC6hu5YHoRXtiR0440BQRBtSMB8GA1UdIwQY
MBaAFBhaL2fSRcupUYsBcGGnFpLueef/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTkt
YmIwMThjZmJlYWEyLzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTktYmIwMThjZmJlYWEy
LzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhk+ywU0
vBQXKr72og5qmJhcaltoYHpDcmVrkhR/Rf63Qzn29gJeHdR6FHmaOJm/6u++q9Pa
Vo+Jsv9+YpOEo9i6cPYdFOorwXzbLEGi3Bjs6QbZ2SLajxEGROt42f9aeqbaHTYP
K6ND5SFAXy37jg5NtrvYdJZeXas8BtymtgHrlh6OIbjiBeV1vBP529spyOBF8NPa
WQa77Yts9X5TiMw4Ct0CCm8VAqYkuwl+N9mes1NWn5li7xCK3AMstsad3CS6zh/M
N9PaHlkI1ToCUKctNVkJca9uEiW2gApZlSy4Qi2Mc+FPBPnKiyPEeFrDQ+Bv0uvQ
eN+82UurAP+YvA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:33:01 2026 by rpki-client