
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
File: gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft (raw, json)
Hash identifier: x1PmtmPw7LtkNXNw/wgYpD+VUMuNaGdBJSDFYNHgcwU=
Subject key identifier: 4C:54:13:8C:9D:12:76:6C:AB:0E:91:D9:D1:31:44:70:AC:E8:91:A5
Authority key identifier: 80:A9:21:40:84:33:B6:6E:A5:0A:40:00:AA:CE:10:D2:AD:D0:6A:85
Certificate issuer: /CN=80a921408433b66ea50a4000aace10d2add06a85
Certificate serial: 019E216D419DE495262C5B3CB5593C0453CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKkhQIQztm6lCkAAqs4Q0q3QaoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
Manifest number: 0760
Signing time: Wed 13 May 2026 13:01:08 +0000
Manifest this update: Wed 13 May 2026 13:01:08 +0000
Manifest next update: Thu 14 May 2026 13:01:08 +0000
Files and hashes: 1: TADovInnVhImIAMNLhy833dYeyU.roa (hash: f/dalF6vRD8VNn9XqvAc5SALl8hYeWv1uoN4z7iWDuo=)
2: gKkhQIQztm6lCkAAqs4Q0q3QaoU.crl (hash: H7ajecnIokLHiYQMMNHVWuvP72pqSxEhWrTnVbwZnUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKkhQIQztm6lCkAAqs4Q0q3QaoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:41:9d:e4:95:26:2c:5b:3c:b5:59:3c:04:53:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a921408433b66ea50a4000aace10d2add06a85
Validity
Not Before: May 13 13:01:08 2026 GMT
Not After : May 14 13:01:08 2026 GMT
Subject: CN=4c54138c9d12766cab0e91d9d1314470ace891a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:9e:cc:94:f7:3f:ea:8b:a0:92:62:b2:d7:
b2:ba:eb:5f:c5:96:ac:91:c5:38:2c:0f:f0:ca:4d:
a9:31:e5:d4:c5:e9:1d:87:ec:26:31:74:38:bc:06:
5c:4d:f3:af:a7:84:b3:35:62:88:0f:20:c2:f0:7e:
aa:0a:7d:cf:72:0f:d8:52:c1:45:54:1c:43:d5:f9:
9b:12:3a:1c:d8:18:d9:7a:95:d9:c2:9f:12:7b:f7:
5f:ae:47:5e:d4:4a:d5:c2:0a:17:30:42:1b:01:2e:
fa:ea:25:9a:0b:4a:61:09:55:bf:a4:37:2e:4e:f7:
fb:dd:71:5e:2a:3f:48:26:6d:46:dd:66:7a:03:7d:
c8:9b:cd:98:9c:0f:d8:f8:dc:4a:93:28:5a:d8:77:
1a:82:17:3b:c7:4e:f5:6f:9f:ef:8b:33:3f:60:d7:
aa:ff:58:0c:cc:22:1f:3d:b7:11:19:d2:ea:04:d3:
b2:c2:af:17:b4:e0:33:3d:54:e6:93:97:35:fc:7c:
1c:a2:83:4e:f2:0f:cb:cc:6d:90:10:59:7b:3b:21:
39:4f:6b:70:f3:fc:c9:66:61:90:00:6f:4b:82:9c:
8f:1a:f0:5e:97:3a:ca:bd:dd:bc:61:17:20:30:11:
61:e2:04:a9:c4:0d:b5:54:5e:4a:ec:8d:22:f1:86:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:54:13:8C:9D:12:76:6C:AB:0E:91:D9:D1:31:44:70:AC:E8:91:A5
X509v3 Authority Key Identifier:
keyid:80:A9:21:40:84:33:B6:6E:A5:0A:40:00:AA:CE:10:D2:AD:D0:6A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKkhQIQztm6lCkAAqs4Q0q3QaoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c5:53:a3:d8:c8:df:1e:f8:39:c4:15:cf:53:88:e6:22:2f:
bd:61:3c:1f:c5:31:5f:6f:58:48:8c:d3:95:e5:c4:44:47:06:
16:46:a3:cd:56:53:dc:92:f9:e4:00:e9:f2:df:7b:1c:ae:b9:
7f:33:0c:16:22:27:55:9d:b9:ea:62:26:15:d2:98:99:6e:86:
3e:68:86:76:37:d7:52:62:9d:d5:3c:0f:5a:9c:76:da:ca:0c:
aa:3b:a0:24:cc:ec:91:87:82:f8:ee:f6:eb:97:10:fc:f8:f2:
52:43:b5:1c:9a:dd:9b:fe:42:98:72:4d:95:9b:55:5f:f1:e2:
8c:76:65:ec:95:72:0c:b4:77:a7:1c:9e:d9:52:0a:06:4e:08:
43:c5:63:95:69:7f:0a:3c:58:af:6f:12:a9:1a:e1:dc:e1:be:
a0:f0:02:41:94:ab:e6:de:b2:05:b2:f0:ff:41:7b:2c:89:f0:
4b:48:32:87:15:71:f7:88:0e:04:37:5a:ab:15:c3:a3:f5:03:
90:aa:d6:d5:c5:7d:74:ee:7b:17:a3:c6:c2:f9:4a:1c:70:ce:
75:1b:bf:f0:87:a5:f9:38:f1:c0:15:e0:4b:84:64:13:68:fa:
7f:80:50:35:e3:bd:97:1e:f4:93:8c:ac:b7:36:2f:dc:20:b2:
62:12:13:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:28:35 2026 by rpki-client