Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: aFKtlNWBra2UqqjN/U28G+DXt+9NZT8JgOS8F5+Ps5g=
Subject key identifier: 3E:76:0B:AD:95:34:D1:EB:DA:1D:6A:BB:15:53:A7:85:51:1B:6C:BF
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 019E202430CB9F389292AB885EACDDDD2465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 1553
Signing time: Wed 13 May 2026 07:01:43 +0000
Manifest this update: Wed 13 May 2026 07:01:43 +0000
Manifest next update: Thu 14 May 2026 07:01:43 +0000
Files and hashes: 1: 5m2yB9NEeUbzh_RrMBbFTl87vZI.roa (hash: +gJzTRd7yfkb9lyTBCKq01A8haFjWWwRmaKWjp0RAm0=)
2: Opf2QA1qNa28jjAr8yKuXu_bAbY.roa (hash: ovjEoKocSUBnOUVIGPdI/qSQMjayKXITtpelF2L20jw=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: 5qfEkx5IOw0lwKOp38jF55q+QQ4AaqBjj1oQdQSvbyQ=)
4: yvE1riQnzN8M1_ohncQ6e5yrX4w.roa (hash: Bi2CKtLlem3xa/y5EAdM8w4Q0JN6Uyw6zRxbHmseyms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:30:cb:9f:38:92:92:ab:88:5e:ac:dd:dd:24:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: May 13 07:01:43 2026 GMT
Not After : May 14 07:01:43 2026 GMT
Subject: CN=3e760bad9534d1ebda1d6abb1553a785511b6cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:5c:3a:89:dc:46:d9:da:6d:20:33:c2:4e:
29:e7:42:57:fb:44:da:d0:fa:bd:44:56:b6:17:87:
7c:38:c2:9e:07:75:2d:3f:8d:f6:9b:42:79:d7:f4:
ec:c5:6e:0b:31:1b:b1:be:09:3c:41:af:7f:19:45:
a8:7c:09:87:17:9a:e3:89:c0:8c:26:e2:98:8c:85:
9a:4f:36:d9:39:14:17:5d:16:98:82:43:e1:1f:30:
a4:5b:e1:ab:14:37:b9:06:89:34:6c:3e:af:3c:8a:
76:0d:0b:1d:cd:40:e8:14:97:e4:c0:b8:81:da:1c:
09:d0:82:8b:44:15:93:2b:d8:3a:d6:88:aa:05:bd:
f9:f3:18:d5:08:8a:9d:66:b5:d1:ad:68:6a:09:a5:
3f:01:fe:51:b9:0d:a2:0e:e0:33:ad:c3:5d:67:c2:
d7:ac:56:d5:5a:79:a8:80:7c:10:af:e6:70:50:1e:
e4:38:42:bf:af:be:1c:7b:24:e7:2f:49:05:a8:1a:
6b:59:b0:2c:5a:0d:5c:92:34:09:69:55:76:a3:bb:
3e:0e:66:05:33:6f:86:14:e9:fb:8e:e4:88:d6:e6:
0b:ba:ff:f3:d3:67:d9:5f:9c:68:3a:1a:3e:14:26:
37:45:65:8b:52:03:5c:4e:8d:43:d9:5a:f5:5c:4b:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:76:0B:AD:95:34:D1:EB:DA:1D:6A:BB:15:53:A7:85:51:1B:6C:BF
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:38:e7:96:c3:57:39:bc:3c:42:ad:8b:99:0c:d5:33:be:3c:
17:9e:cc:ff:16:9a:2a:42:b5:91:a1:61:73:05:d0:03:8b:6b:
32:ac:00:fe:63:5a:3b:bc:2e:7a:20:ff:10:74:8f:e5:65:5c:
a3:ba:43:5d:e0:c9:63:c5:c7:01:63:de:ad:d1:8e:74:a9:cd:
d8:7d:a5:66:b2:bb:cd:dd:96:e8:cb:f8:d6:7e:ef:7a:e5:0d:
70:f7:f8:7a:34:6f:1a:e0:7a:3f:0e:eb:3e:e3:e1:07:f2:3d:
f5:4b:75:0c:75:f4:a0:96:bc:6f:ec:3c:f4:8c:ba:2d:4d:68:
e1:2c:3e:db:98:a2:ab:52:b1:42:3b:34:7c:2f:57:8a:24:75:
56:1c:9b:5e:9c:f8:4b:af:db:f7:5c:66:a8:76:ba:89:df:88:
5a:ac:12:5d:f5:cb:5a:ed:79:c5:e2:ad:46:35:9a:84:ae:28:
c5:7c:9e:41:dd:5b:e2:26:d5:1e:46:fd:86:d2:9c:90:91:fc:
a1:fc:f7:e3:c3:8b:69:62:15:b6:22:d2:fe:14:de:9a:29:b8:
84:ce:f8:72:54:3d:43:d6:e2:9b:8e:7c:2b:1e:6a:16:04:26:
2a:85:cb:36:e5:31:2e:43:fd:00:1d:6a:dd:81:f1:08:a0:c3:
8b:b0:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:56:30 2026 by rpki-client