Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
File: GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json)
Hash identifier: ZSftIXayoPAxNKnzg6WK3zuONAn9UQNCeRn91097LPg=
Subject key identifier: B0:DA:CB:BF:CF:BA:C1:D7:42:E6:E8:69:9E:63:4A:FB:0B:78:98:D5
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 019E20235F574AEBF933C1CE9C8807470525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 07:00:49 +0000
Manifest this update: Wed 13 May 2026 07:00:49 +0000
Manifest next update: Thu 14 May 2026 07:00:49 +0000
Files and hashes: 1: CX4SjTdi-WVaIel19sRIG6HUUUw.roa (hash: UDsW/lOEequNbC4ieUO0oqmh57jt4K+cQMjTjOFaxBs=)
2: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: LXjOGw77PzY3RCDL95MVJphhyhCjCoY18AofXeV9Us0=)
3: Lh8IZMqEqiAwn2VYmeg9sVGCFEo.roa (hash: 3Z8PMQ8sh56/aP3O9W1H0byuePE1WYuRdcvV9nD8Q2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:5f:57:4a:eb:f9:33:c1:ce:9c:88:07:47:05:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: May 13 07:00:49 2026 GMT
Not After : May 14 07:00:49 2026 GMT
Subject: CN=b0dacbbfcfbac1d742e6e8699e634afb0b7898d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:bd:7b:c4:12:aa:7a:02:25:fd:bb:66:31:
b7:3f:c8:e9:b4:f9:11:0c:0e:86:81:04:60:f1:63:
38:30:cb:4a:6e:4b:b1:ad:d6:39:15:e8:5a:ae:80:
01:89:79:ca:a8:49:69:52:22:dc:6f:c7:38:4d:95:
00:03:53:2d:03:5e:93:11:36:ab:6e:36:64:78:0b:
ff:59:e8:68:f1:af:9b:03:95:a1:93:82:41:7f:e6:
05:41:b4:87:9d:97:0d:cf:ca:ae:99:35:4b:2d:ee:
d5:18:79:ba:53:82:b7:e8:64:2c:15:20:6d:b2:19:
90:b9:a4:56:8e:32:97:60:19:38:65:aa:8e:38:15:
40:4d:83:67:fd:a2:4f:8d:eb:70:cf:82:5f:7e:a1:
ab:e4:ef:be:0e:19:8c:aa:83:14:02:0f:78:5f:77:
71:9a:47:8a:70:16:ef:98:ad:bf:35:3b:ab:68:a6:
01:98:cd:50:55:35:f9:94:f3:b4:e7:98:bc:df:01:
7d:42:57:b1:ec:e1:65:68:c5:50:bc:60:d5:a5:be:
58:bd:4f:7b:5a:49:cc:d4:dc:f9:72:ae:da:26:f4:
b1:a9:e8:bb:d1:14:a6:48:0f:9c:ca:5d:99:02:27:
21:c7:34:a1:9f:28:a6:a6:79:d5:67:50:2b:19:39:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DA:CB:BF:CF:BA:C1:D7:42:E6:E8:69:9E:63:4A:FB:0B:78:98:D5
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b1:2a:97:35:49:a9:cb:35:6b:e3:0a:5d:ab:c6:e9:1f:af:
fc:95:c1:4d:07:38:40:03:0b:19:bc:e6:e9:df:ba:e5:69:da:
92:06:16:71:e9:84:5f:1c:02:32:d8:b4:62:e9:a5:82:40:9e:
28:c6:96:ae:92:9f:c9:73:db:d7:24:08:50:02:39:a5:6d:b2:
02:f5:40:44:c3:2d:e4:6e:f5:66:3a:03:64:56:a5:f4:b0:4e:
fc:ca:8a:1b:74:c1:05:13:94:94:c0:55:0c:90:d7:6e:e5:8c:
e1:fc:a2:0b:8c:7d:a7:13:97:e2:19:c8:0c:01:ed:8a:31:fa:
d5:34:7d:df:1e:da:4c:d6:2f:05:04:3f:3a:e9:a3:ef:76:5d:
d9:3e:d4:4f:40:49:5a:f8:c6:69:9d:05:2d:48:7c:20:a6:94:
b3:ae:a2:85:a5:41:5c:28:d2:8b:ca:39:2d:65:b8:d1:61:f8:
05:fb:58:87:f5:cc:69:91:36:96:da:d8:ec:b0:fb:c1:99:b0:
28:ea:78:08:60:62:28:0c:c6:82:07:37:9c:1f:a3:b6:32:2e:
4a:ef:2c:3c:d2:f3:24:2a:25:36:0d:a8:f7:c9:6f:6c:f9:a3:
2e:8f:2d:93:0f:22:30:0e:c7:95:24:3c:d8:b5:f6:68:7e:49:
45:7b:44:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:02:27 2026 by rpki-client