
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: VdbkB1SIYXZnCVfNvQcEyxvQQsI+LTVOuRVvqYJu460=
Subject key identifier: 47:3F:D7:26:9C:62:3D:19:1A:64:EC:6D:48:F2:A9:90:F3:D8:E4:04
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 019E20FF9CD6EE0A34A532E9219162BC110B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 1429
Signing time: Wed 13 May 2026 11:01:23 +0000
Manifest this update: Wed 13 May 2026 11:01:23 +0000
Manifest next update: Thu 14 May 2026 11:01:23 +0000
Files and hashes: 1: MKLnBwEoTvJQ6Ll9HAStk_6b-lo.roa (hash: UcMYN8ihICS5eRjwAvcwUGC2jCQeNNKHfqsuNIFnBhE=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: lDT5bDh+q6Z6SzeA4H5vBnMtA2wNv85HG4DOU5ijC3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:9c:d6:ee:0a:34:a5:32:e9:21:91:62:bc:11:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: May 13 11:01:23 2026 GMT
Not After : May 14 11:01:23 2026 GMT
Subject: CN=473fd7269c623d191a64ec6d48f2a990f3d8e404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:3b:b0:a4:c8:cf:1e:3f:e0:7a:6c:95:cf:
60:ae:e7:93:b3:4d:db:e9:6f:ae:da:a4:81:d2:93:
e8:a3:58:1f:6c:04:1d:ec:2c:70:b6:2f:f9:63:49:
04:f4:95:1f:98:2a:71:46:40:aa:fa:e4:84:34:e9:
90:ab:42:11:65:61:c0:87:d0:dd:01:49:10:45:80:
b4:b7:36:8a:4e:09:72:b4:ac:0c:c1:aa:46:a1:36:
8c:30:8b:6e:27:0d:1d:07:6c:95:0f:8a:a6:ec:50:
3d:b6:ea:a5:91:0c:3b:e2:31:ef:b1:da:7b:ef:72:
1b:5c:98:fd:d6:bf:62:6f:d7:bd:84:43:d6:c1:a5:
aa:29:a5:c3:81:d1:39:b5:f5:1e:7b:b7:77:a5:6b:
ed:ca:f4:9a:20:34:0a:2e:a2:8c:38:96:26:25:32:
fa:1b:ac:85:2f:4e:7c:5d:5d:0b:80:fb:fe:07:00:
5e:18:1b:a7:5d:b5:46:69:20:c9:93:53:ae:a0:2b:
5a:c7:f5:ea:d4:36:92:dd:bd:2b:7b:09:f6:ae:a6:
d9:e8:ed:06:bd:5a:ff:30:19:b8:2b:7c:8f:b1:b2:
3c:ee:c7:c2:93:a1:2e:23:68:6a:a6:c2:e0:02:b8:
2a:c5:cd:91:97:7b:25:6f:15:18:c7:87:e3:a4:94:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3F:D7:26:9C:62:3D:19:1A:64:EC:6D:48:F2:A9:90:F3:D8:E4:04
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:78:a4:7a:84:5e:20:ca:11:5e:fe:34:64:ad:fe:6e:ef:9a:
74:b4:3b:89:df:79:d0:12:a5:a8:29:24:d2:26:55:3a:dc:3c:
21:00:15:56:c2:dc:ed:d1:c0:6b:1a:8f:c9:07:d3:5f:14:6e:
5c:7a:49:cc:56:3f:47:0e:f8:de:75:22:6f:ea:3f:7e:af:db:
39:cc:a1:db:08:af:e2:e3:11:b6:9b:5a:3e:41:e6:1a:e4:b2:
de:8b:87:ce:30:12:ce:02:5e:5a:11:cf:fc:8f:01:33:75:99:
ad:db:57:22:dd:10:46:4d:b9:4c:6a:4f:1d:d3:e1:e9:11:9a:
34:33:cf:26:fd:97:78:4c:41:74:49:f2:45:8b:c9:07:6b:72:
72:24:7e:85:b4:df:3c:ec:dd:b9:43:8d:2e:8d:6c:c2:77:70:
29:f3:a0:c1:89:a4:ec:24:fe:a0:56:bb:de:a4:05:3d:29:34:
ea:5f:25:57:3f:2f:c9:d6:e2:7d:24:63:14:2e:0c:e3:44:e0:
2b:81:02:3c:12:f2:31:7d:da:61:bc:2f:ed:4a:81:7f:c5:cc:
5f:4b:f9:67:07:dc:48:51:a5:c4:8b:9b:c4:b6:39:b0:40:15:
e2:9f:5d:56:7f:93:69:e8:6d:2e:3a:5b:4d:99:23:99:0c:e2:
d9:9f:fe:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:40 2026 by rpki-client