Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier: 6WWX+wnEWdPw5dxKpmQ7e3hlXiF4K72zAVK3cY96/gA=
Subject key identifier: 3F:77:BD:3A:9E:22:25:90:F5:73:51:55:FA:B4:29:03:D7:EC:97:ED
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 019E1F47D686FCD2F07075F358A01D8E97B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 03:01:02 +0000
Manifest this update: Wed 13 May 2026 03:01:02 +0000
Manifest next update: Thu 14 May 2026 03:01:02 +0000
Files and hashes: 1: FRyXsiFg-6BIhEw2ARWH0DNGSnM.roa (hash: HOwOr4bTuIB/KNZWR5lcxrrwlrEvRwNSNG9O5oAt0bs=)
2: M_VtU7f5fPlDKkVKH-oBTR-MfOc.roa (hash: INw4W70ov+0DIQom+PoiFmtJQ/A7yUcxsfN1Ujem6fA=)
3: kkaW2PybyMFtKIudjGW5zNwrUVA.roa (hash: q2dHdK2+xshlUtyI1McPweg9tnAFSg39WkJ96aCsEe8=)
4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: RiVGln20Qz11RBlvzMdwGrvaod5j7mwkgvnRN+Y6tJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:d6:86:fc:d2:f0:70:75:f3:58:a0:1d:8e:97:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: May 13 03:01:02 2026 GMT
Not After : May 14 03:01:02 2026 GMT
Subject: CN=3f77bd3a9e222590f5735155fab42903d7ec97ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:07:a2:ca:5b:f4:6b:ee:38:05:61:12:91:
cf:62:60:31:ae:59:cf:ff:e3:8b:1f:9b:df:fe:b9:
a3:19:6d:54:38:f4:0e:1e:b5:9d:1a:1f:0e:34:ff:
11:ce:6e:65:85:da:63:84:fb:e7:90:67:be:d9:d5:
ae:36:af:f7:ae:60:be:c3:6d:01:f5:66:91:00:a0:
d8:ca:9d:2f:0b:55:61:24:d0:1c:84:7e:5e:0c:ac:
23:70:cb:ae:a0:97:9b:18:5c:be:7f:c2:6d:5b:5c:
8b:6d:d9:c2:8c:b7:83:40:56:5d:70:2f:d2:fe:e5:
aa:60:45:7c:0d:f5:25:e0:d4:6e:b3:d4:04:d4:b6:
28:15:34:5e:64:bc:53:bc:41:cd:43:a9:d3:16:4c:
56:ad:49:2b:99:3d:8f:d5:77:f3:93:d7:67:18:5f:
40:cc:56:5f:ae:58:9b:bb:a2:ad:e4:39:53:af:86:
ef:47:c1:fc:67:f2:9e:fa:c4:7e:90:6a:82:c8:b3:
58:00:2f:2c:1e:05:c6:d1:69:37:44:67:a2:97:06:
0c:f0:b0:a6:00:d7:21:cb:fb:54:bd:ee:f9:a2:49:
6d:66:41:20:94:45:e4:e6:7a:29:32:70:de:50:e8:
1a:36:8c:a9:cc:5f:92:3e:a2:53:f5:f5:cf:28:a4:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:77:BD:3A:9E:22:25:90:F5:73:51:55:FA:B4:29:03:D7:EC:97:ED
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d4:e0:b4:98:e6:38:93:47:c9:95:4d:c9:0f:1f:4d:42:ed:
67:15:6c:d5:7a:ea:08:cc:d0:dc:b5:6b:9e:d0:ba:6a:04:f0:
b4:67:50:68:59:56:e9:60:e7:24:8b:fa:dc:90:81:f2:89:7d:
aa:84:0f:bd:31:fd:68:c7:7a:36:9a:3d:ff:e8:a2:d2:6b:65:
89:2c:44:e3:df:60:de:e8:94:27:ea:29:51:ca:fc:f2:47:67:
69:41:4c:d2:81:e6:46:14:47:a4:0b:a3:e0:4e:3b:ea:29:fc:
40:2f:17:5a:a8:da:00:04:1a:df:f8:d9:b6:b0:35:f5:4e:a4:
26:6e:2e:ee:23:c9:8e:82:fe:61:95:16:da:62:c8:e4:13:1a:
55:1c:81:b2:9e:10:91:3d:97:f7:73:67:1e:32:63:62:5a:cd:
8a:cd:d4:8b:af:bf:f0:4f:c7:d8:1c:64:91:da:f3:77:e4:dc:
b0:54:cd:9e:d9:57:37:a5:2f:a4:42:41:ed:75:4f:d8:74:69:
9a:78:6e:90:a9:86:91:3e:6a:ae:41:28:07:b9:0e:79:f3:33:
d1:bd:a7:78:c6:4b:b5:4b:20:bf:9a:84:8c:05:5d:96:a7:80:
df:4b:8e:34:75:7f:f4:c3:3d:6b:92:74:78:d2:07:5b:26:7f:
9d:cd:de:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:18 2026 by rpki-client