Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier: hY+LwEwDnTyQrXWy8bCmJlG/lkj22Q8ohWyxwaCcfVY=
Subject key identifier: FE:57:14:63:E2:A0:3D:CC:21:F6:F4:90:BB:1C:A7:B0:08:D6:02:D4
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 019E1FECCEF8A5C3A24B3B0CB2810167AB57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 06:01:13 +0000
Manifest this update: Wed 13 May 2026 06:01:13 +0000
Manifest next update: Thu 14 May 2026 06:01:13 +0000
Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: r4NeISs1dI1sG+qP78IbVikboOyIqfKQLbQ+ssyHhyI=)
2: TF0dSC0QLLTkTEwt9luFemTVApI.roa (hash: diyfKwUJkYthuVIKND7w8w0AKfmlP8CVwmqLuMhQpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:ce:f8:a5:c3:a2:4b:3b:0c:b2:81:01:67:ab:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: May 13 06:01:13 2026 GMT
Not After : May 14 06:01:13 2026 GMT
Subject: CN=fe571463e2a03dcc21f6f490bb1ca7b008d602d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:fd:e3:19:d6:56:ea:ef:34:3f:0e:5d:f8:
66:9c:91:e5:25:18:c2:f3:11:75:73:9b:3a:f1:9a:
8e:e4:c0:fd:f1:cc:64:f5:75:47:0e:6d:02:29:55:
e6:92:ed:31:5b:65:88:10:a4:af:93:93:b7:0f:f9:
0d:93:34:e4:03:b0:bb:ed:f8:50:ee:4e:84:a4:13:
14:18:ae:88:33:df:3a:3a:88:6c:e7:06:18:e1:cc:
3a:78:b7:5f:c5:8c:17:76:e4:55:c3:07:54:d5:34:
f8:9b:53:3b:87:c2:e4:9f:1e:a4:af:67:9f:68:04:
e0:40:d4:00:44:51:77:16:fb:8d:a4:c0:7c:2b:5c:
f8:ff:e0:98:1d:71:9d:c9:14:6f:ae:65:75:fa:dd:
56:55:be:f8:c2:4b:a0:51:aa:7c:b5:08:a7:62:4b:
39:fb:5f:09:a7:47:6d:58:4f:c7:ab:b6:0e:16:cc:
42:e6:e4:95:7d:7c:88:0d:2d:dc:2f:b3:7f:ca:63:
50:a5:0e:be:bb:6d:6e:80:73:d1:95:cd:59:3e:e7:
58:08:6c:63:38:eb:f4:ef:24:21:95:83:89:7d:4b:
a3:38:15:67:b9:32:42:99:48:bb:7b:7e:e7:be:69:
e5:d2:7d:af:9d:49:17:d2:d1:01:42:ec:ca:93:9c:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:57:14:63:E2:A0:3D:CC:21:F6:F4:90:BB:1C:A7:B0:08:D6:02:D4
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7e:c2:84:b2:f8:04:dc:3a:28:c7:eb:3a:29:c7:45:97:58:
1c:d3:0a:40:c8:0c:c7:72:23:fd:60:7b:c7:71:79:38:d4:ac:
22:cc:27:d3:67:b2:af:9f:95:af:01:63:70:91:aa:43:4d:be:
aa:34:a5:d1:22:a0:44:56:41:04:b7:91:45:88:47:e3:79:b5:
da:26:24:58:a7:28:43:df:f1:06:a5:64:d4:22:14:96:94:6d:
74:07:f3:17:93:8c:ae:ec:95:52:b5:50:85:8b:59:af:57:8a:
66:43:13:6f:ba:ae:2d:fa:fa:57:fa:cb:84:2c:e1:11:09:87:
ff:1b:39:3a:23:4d:5d:b1:6c:2f:0f:91:c7:93:a3:d9:51:0e:
41:c5:96:d0:8f:3a:22:ca:6c:9a:84:eb:00:02:f1:46:28:11:
71:41:1f:f1:7d:d5:f9:a8:03:cb:5e:b8:12:fa:0a:2d:40:2a:
96:b4:02:7f:de:ab:98:33:48:f4:94:3f:8d:a2:7a:69:71:4a:
72:36:05:03:23:39:47:e7:87:64:5e:86:bc:22:44:48:24:a1:
34:1a:df:9d:ba:eb:6f:6c:18:9f:9b:53:ff:bf:91:77:4d:69:
74:30:45:d0:11:a2:d5:74:09:75:d7:82:90:2e:d6:c0:97:67:
40:9c:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:27:21 2026 by rpki-client