Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json)
Hash identifier: d+bkbm2Y09QukyHZQg1stZgqFx05qkQy0Jz58sJngeM=
Subject key identifier: 4A:A5:25:FB:A0:0D:5C:C8:6E:45:8F:5F:CB:6F:5A:81:89:31:E1:C6
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 019E1ED9D5F5E93EC118B3DA2F87A761AC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
Manifest number: 0D49
Signing time: Wed 13 May 2026 01:00:53 +0000
Manifest this update: Wed 13 May 2026 01:00:53 +0000
Manifest next update: Thu 14 May 2026 01:00:53 +0000
Files and hashes: 1: DBuCDMr-eMpkAR_hikUInL2urKQ.roa (hash: kBMh2uve9H6ZGJ+wBBoi4Snq4VxIhSy8cm7vuFkDv3U=)
2: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: Mi7gq8kNLGZJaO9r48xp9CSKkVJ02krRsS+39oxpucE=)
3: S6miaNucSa6NeEC_GGS4tq2izFo.roa (hash: 8+03nZylwUV80dXnpI8qfIF5rMZUoFiALmnLIt2o7b8=)
4: SMhGdBkdywnevpYEWhKr1IzaM4M.roa (hash: m3kf4ZVSNKzUhBPVSBlYDUaNyUcw0siodBs/T4U83BA=)
5: dq5CDSDynme_I6tx9l_wxsIV2U0.roa (hash: WMzruvQFZXWiXvDSQTooQX87fCzt7f6WZXrH0D61P7E=)
6: gPl4qnviZ8X01lQ5Z0ysSwANF8I.roa (hash: 3PftaD58PWAe1nqPJMST42Vt40zBG+AVvzxMfB6cylU=)
7: iVDK6PCtMfpuZKgZWoFycnHMVRw.roa (hash: GeJfT/LpcdK0hbYcqcrlMnAuUaNLyo2x8WoLR5cuzUY=)
8: ohLWgfGRLPEKw04h0DLfOIlNhog.roa (hash: K98aaZcn2W9HA9Zia29dMsLJX/i+ewGU4FK1Pvj0Z10=)
9: w9-s1rg8ZZyOOyxtduxCw6s1Z18.roa (hash: SjJ+kgcVTjrARPsmt0o25UIbqtkMvNHn5HJI2G5k1Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:d5:f5:e9:3e:c1:18:b3:da:2f:87:a7:61:ac:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: May 13 01:00:53 2026 GMT
Not After : May 14 01:00:53 2026 GMT
Subject: CN=4aa525fba00d5cc86e458f5fcb6f5a818931e1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:3d:38:63:1c:01:59:e1:49:d1:a8:9d:cd:
46:1f:d5:03:cc:c5:68:6b:72:41:63:65:0c:94:7e:
27:bf:bc:b3:3c:cb:5b:56:06:67:11:f0:b2:5e:da:
a2:22:70:52:c1:d6:96:40:f8:ad:3a:a1:0d:73:35:
c6:99:dd:bb:f9:f3:80:ea:2e:64:1f:2e:6e:a5:ab:
80:fe:1c:44:0b:67:06:a8:a7:16:37:8c:63:b1:10:
58:32:76:e6:46:ac:dd:78:56:79:ad:91:ad:b8:18:
c0:c7:52:8b:73:ff:6b:74:3d:9d:fe:b1:9b:92:4e:
39:b5:c1:73:d1:8d:24:69:d2:24:0d:50:eb:8f:e5:
fd:56:46:d3:9c:5b:5f:58:8c:77:c2:49:f7:91:11:
1f:0b:a4:d6:eb:22:44:0c:54:30:86:62:75:67:22:
bb:96:ff:6e:04:3b:0e:04:93:ee:73:e1:b8:67:5c:
75:0b:86:e7:07:0e:e6:c5:54:d6:5a:7a:77:a5:78:
33:f5:ef:70:9d:b3:79:18:b9:83:46:fe:2f:dc:19:
10:06:72:fe:ae:6c:44:25:f8:4a:43:d4:1e:4b:a7:
e3:b7:1a:2b:4e:89:9d:2b:23:83:03:db:36:f4:26:
31:a7:7e:fb:03:c3:74:97:7b:52:cb:c7:8d:d3:09:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A5:25:FB:A0:0D:5C:C8:6E:45:8F:5F:CB:6F:5A:81:89:31:E1:C6
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e8:a5:f1:d4:e8:39:a9:1a:1d:e7:c4:58:4b:0e:07:25:13:
7e:d0:cb:e0:6a:83:df:cd:ac:7b:a1:26:20:cd:1d:be:5f:da:
a6:e7:e6:e3:2d:67:a1:71:2c:aa:33:ff:c5:89:a8:3c:a5:24:
3e:c6:01:30:d8:a0:a0:21:70:cb:75:5d:63:50:9d:3d:78:83:
45:28:96:94:a5:59:54:59:31:a8:ae:dd:cc:f2:25:c2:e3:34:
86:28:f6:bd:28:2c:f8:01:7c:50:58:04:4f:74:52:79:85:65:
5b:8e:4f:4c:ed:6e:7d:41:b4:0a:82:4a:17:a8:f4:ad:b5:3d:
34:b9:96:1e:c6:80:c4:cf:58:04:f8:4d:96:16:37:9a:17:8f:
a1:cb:e0:e4:ea:79:28:fd:68:a0:4b:23:48:72:94:bb:58:08:
ef:83:56:79:0b:af:02:0e:cf:e5:e2:1f:59:3e:58:54:d5:20:
21:67:4f:35:f2:5c:cc:aa:8c:b9:21:08:d6:00:f5:83:f0:72:
ce:6e:56:e4:23:42:f6:bb:36:66:99:b5:0f:42:3d:2c:24:bf:
91:76:87:89:c0:c5:0a:e0:a1:67:12:e5:9b:b2:5b:66:3f:7c:
b4:b5:75:3f:99:a3:ba:22:81:0f:19:9d:9d:f5:5f:13:ef:88:
c8:dd:63:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:58 2026 by rpki-client