Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: v/x3IPQG/YInAEq168eGiC0jKVKL1Aorxd+GQSIiGb4=
Subject key identifier: 98:08:42:EF:E5:C7:D2:9E:C9:C6:C7:BE:1B:95:A0:2E:17:F1:D5:0A
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 019E1CEB608D99A4246A7AD78D64225A642B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 119C
Signing time: Tue 12 May 2026 16:00:47 +0000
Manifest this update: Tue 12 May 2026 16:00:47 +0000
Manifest next update: Wed 13 May 2026 16:00:47 +0000
Files and hashes: 1: ENz0VTcEnPSXBE5Znpjw7lUaAwA.roa (hash: DP27/a5o1Ym+vesDLFqV0Tua4ny+ds0/pH34jhmErS8=)
2: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: +bW80Pc3hmVqADiMr9pcRQ01QUqvgF8lnHJ0WjLnLiA=)
3: Y-eJmA6TDVKIS1tuOw2dm1_Jqdc.roa (hash: KqQ8TKxBYl3JumzrSj+0qt5zeDJPsxKpAnGsc38qwpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:60:8d:99:a4:24:6a:7a:d7:8d:64:22:5a:64:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: May 12 16:00:47 2026 GMT
Not After : May 13 16:00:47 2026 GMT
Subject: CN=980842efe5c7d29ec9c6c7be1b95a02e17f1d50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:ae:9f:9b:6d:dd:2f:24:f3:fc:d5:19:22:
71:d3:52:4d:0e:9e:18:6b:98:3c:04:95:bd:ad:93:
ae:b2:7a:64:83:b9:ce:e3:6d:c8:1e:8c:04:7f:b6:
df:f9:f6:7e:61:6e:14:d8:90:0d:79:54:c4:d6:07:
1e:bc:7d:b9:2a:96:d0:e2:1e:1b:af:dd:67:30:f1:
2c:60:68:e4:f3:f7:81:89:c7:2e:9e:46:58:91:65:
86:8d:18:92:af:08:a0:7f:8c:63:34:a8:ff:60:53:
7d:da:e7:9a:7b:fa:de:3b:05:49:32:6c:10:17:27:
60:51:2d:b2:96:26:6c:f2:49:18:fd:b8:e7:9f:01:
28:fd:60:45:1e:e1:e2:30:0b:2b:53:5d:2e:c8:cf:
73:11:74:12:a3:a9:d7:e5:8e:e0:36:19:eb:bd:88:
d3:b8:56:05:2f:56:1f:a8:1b:7d:e8:57:29:64:7a:
45:44:84:d0:51:f4:7a:9c:77:8e:46:ff:d5:67:8e:
8b:c4:8f:39:b6:44:66:bf:d1:2f:04:58:77:b6:5d:
46:91:8f:2e:04:02:8f:3d:d0:ce:6d:97:33:85:63:
2d:a4:be:16:0e:9e:18:25:71:78:ea:95:de:a9:2b:
09:f2:10:16:41:8a:c6:ab:13:a8:f6:b7:49:e5:ca:
69:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:08:42:EF:E5:C7:D2:9E:C9:C6:C7:BE:1B:95:A0:2E:17:F1:D5:0A
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:16:67:9c:5c:63:9a:11:fa:0d:19:ca:17:58:d7:8b:a4:fe:
64:07:07:6c:68:bb:b0:c3:77:86:5b:16:27:6b:8f:ce:e3:f0:
e3:fa:db:18:67:f3:50:8c:9b:af:dd:ab:b8:f3:ca:24:ff:f5:
90:fd:a5:ba:77:f8:c2:e0:ea:44:70:77:7d:d8:8d:34:98:bc:
88:09:78:a2:2f:7a:b6:43:4e:c2:14:95:08:aa:ec:54:a6:8d:
ef:74:5f:cd:13:51:de:e7:dd:af:41:9a:25:05:dd:69:94:c0:
a0:70:80:e3:64:5b:04:f0:36:03:85:54:1e:cd:9e:95:cf:b1:
e1:44:6b:03:71:f0:19:f4:73:85:84:c8:08:9a:a8:fd:76:c7:
d2:7e:ec:fe:bf:32:e6:ba:6e:cf:b8:58:f2:e3:ed:5d:0e:2f:
40:12:6e:45:b5:fe:28:57:82:32:0c:03:16:32:ee:07:de:85:
6f:64:04:fe:b6:7f:16:b6:0b:97:82:97:78:b9:f9:50:91:94:
53:ec:79:d8:48:59:27:a0:6c:9c:d7:9d:da:d9:7d:dd:50:4f:
86:f7:39:19:f0:e2:d1:db:8a:3c:0a:95:d3:04:23:c8:8b:b3:
f2:31:95:74:c0:e6:f1:e8:55:e3:a3:55:0c:6d:26:33:ae:71:
9b:66:3b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:16 2026 by rpki-client