Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
File: GXYcuDMg_8ugH9gHoG6InMMdhec.mft (raw, json)
Hash identifier: pjN9u9FHyYgONU1c4lr8xf2jpyxdNhvfKPrxfsN815s=
Subject key identifier: A0:D5:2E:DC:47:C2:7A:58:11:C4:D9:49:EB:5E:20:83:9D:02:6C:E6
Authority key identifier: 19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7
Certificate issuer: /CN=19761cb83320ffcba01fd807a06e889cc31d85e7
Certificate serial: 019E1FB60AFC31905778FFB04F92907D7F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
Manifest number: 0558
Signing time: Wed 13 May 2026 05:01:24 +0000
Manifest this update: Wed 13 May 2026 05:01:24 +0000
Manifest next update: Thu 14 May 2026 05:01:24 +0000
Files and hashes: 1: GXYcuDMg_8ugH9gHoG6InMMdhec.crl (hash: wh5xgwNKamzE+5/7yG5U7/2obn7GC0ncZUsihGXjuWA=)
2: oQ6UjA4POa_8uXATGFU457jPcNs.roa (hash: CGsZfbDOUFoB/m6p7m3E+q6k/tVWNbDEit0J2C57V8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b6:0a:fc:31:90:57:78:ff:b0:4f:92:90:7d:7f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19761cb83320ffcba01fd807a06e889cc31d85e7
Validity
Not Before: May 13 05:01:24 2026 GMT
Not After : May 14 05:01:24 2026 GMT
Subject: CN=a0d52edc47c27a5811c4d949eb5e20839d026ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:e3:39:ab:4e:33:a3:36:91:6a:86:d0:53:
e6:25:6c:a2:b8:8d:88:26:e6:18:de:79:e7:bf:ef:
25:6c:07:b1:fc:38:17:c5:70:36:69:f1:86:9f:33:
9b:08:30:e0:88:f9:da:91:08:f4:fc:59:f0:9c:9e:
8b:0d:f8:77:92:df:b4:bb:25:58:d1:bf:5b:5e:0e:
45:31:6d:28:88:9f:e7:4e:86:bd:0a:f9:1f:b2:10:
bc:44:94:3d:f6:b0:7f:93:3f:8e:aa:57:84:ae:6d:
21:4f:5a:3f:20:bc:01:2a:9d:e5:58:e1:fc:30:e8:
c7:5f:14:33:72:a1:4c:57:30:66:49:1c:4d:2d:f7:
ee:7c:75:c3:5a:5a:27:b2:29:f2:33:74:2f:a8:59:
7a:cc:b6:2c:d8:85:31:b9:6e:0f:9a:42:7f:1d:f7:
33:6f:72:d4:b8:fc:00:d4:06:90:dc:e5:71:9e:f6:
d8:d4:31:3d:64:6c:4e:a2:f1:66:ae:73:8c:91:8e:
05:0a:48:bc:85:b9:f5:cd:0d:80:93:e6:84:3c:d0:
f7:50:68:28:54:7c:f5:79:a7:3c:89:14:9a:a8:37:
57:28:c4:90:40:a3:f0:6e:22:6a:38:de:8b:27:9a:
e2:b1:0a:da:d0:57:53:3a:0a:89:1b:8c:2c:aa:f0:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D5:2E:DC:47:C2:7A:58:11:C4:D9:49:EB:5E:20:83:9D:02:6C:E6
X509v3 Authority Key Identifier:
keyid:19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:97:49:ff:7a:74:53:39:45:31:a7:0e:da:24:36:72:20:65:
7c:0e:3e:0d:d6:0a:14:a0:d3:f2:bd:38:fb:85:eb:7d:0d:3c:
49:95:7d:bf:9e:da:22:b1:97:c7:6d:d8:06:60:92:ac:cb:0a:
ac:19:0e:ae:c5:63:df:b1:04:b5:a6:56:4c:f5:3b:cc:ca:cd:
fe:e1:76:50:6f:56:43:7c:99:b6:d8:bd:f1:2d:4d:0c:41:e7:
ef:c8:1a:d6:45:b9:78:48:a2:cb:3e:7e:d3:6e:9e:d8:97:e9:
d7:a2:a6:74:07:fa:15:75:e8:54:d6:33:ac:34:24:90:2d:0a:
ac:e1:64:c3:56:a4:48:01:35:2b:09:85:b1:51:de:3b:a4:9b:
02:c6:fd:7c:58:bc:b6:26:4c:ca:9a:72:26:bd:e1:c3:06:cc:
23:ee:61:63:ce:e0:1a:b3:51:16:84:71:d6:ea:9c:bb:0e:15:
b2:c3:e0:8e:5a:24:4d:fa:d4:93:50:c2:46:8c:5d:4d:cc:6e:
7b:36:71:71:49:c0:b7:eb:52:40:51:e4:12:97:e9:b0:96:56:
2f:fc:b4:10:81:9e:5e:62:41:79:02:09:a9:7c:7a:53:91:d1:
d5:3a:54:50:45:e5:8b:6c:1c:7f:11:f0:09:ef:bd:2e:77:53:
b6:38:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:40:47 2026 by rpki-client