Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: VkeQyYjASJcv0lWaT8eINQoyM6+nU8VPIWZCxxvDmCg=
Subject key identifier: F4:32:77:90:18:39:08:92:D8:FF:4B:49:AD:8A:86:F6:5A:2E:E8:F6
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 019E1EA3AD37CF429247BC1E3A263268888C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 00:01:43 +0000
Manifest this update: Wed 13 May 2026 00:01:43 +0000
Manifest next update: Thu 14 May 2026 00:01:43 +0000
Files and hashes: 1: 84Vy4QZqvQZUIRmhoX03xS6PmHg.asa (hash: mu6fp0Fipel740MCIXuJN9FB1rFnZw35tGJ95/rLm3o=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: ZnWiCgRprWRXA1GxEV1qm6hRgxup5l7XJP1D/otRTEE=)
3: zfQjLRUyouMoxd3eQ6QBiqQWAMo.roa (hash: fytzxgaA8VilTty70xA4ueAmIkMerr/peaUGm58YXCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:ad:37:cf:42:92:47:bc:1e:3a:26:32:68:88:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: May 13 00:01:43 2026 GMT
Not After : May 14 00:01:43 2026 GMT
Subject: CN=f432779018390892d8ff4b49ad8a86f65a2ee8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:d7:ec:b0:5e:a7:48:c1:b1:9c:b7:ca:19:
f5:5e:f2:49:ef:34:35:55:62:bf:15:a0:df:34:24:
54:a5:fe:c8:d4:c8:8e:3a:97:42:d0:89:19:a5:e9:
3e:d8:a2:7b:5f:72:55:ea:25:16:f6:49:53:c5:73:
11:4c:bc:01:55:67:df:c2:c7:47:56:6b:76:4c:fc:
66:cf:13:45:38:c7:a4:f8:d6:39:e4:6a:bf:04:e1:
3a:89:ab:b1:8d:26:a2:51:3d:0d:de:78:96:21:ad:
9f:3d:78:56:aa:3b:4f:60:51:95:95:9d:0a:ce:02:
4c:ab:dc:3e:a1:22:31:36:95:02:43:84:c3:50:2b:
b7:c4:dd:1f:6d:13:46:aa:7c:bc:5e:b4:65:b8:6b:
f9:ea:f5:ff:7f:28:76:41:f8:5e:3f:7b:25:bb:a5:
97:84:54:0d:ff:97:a8:33:f1:5d:5f:d4:ec:5e:75:
25:29:99:29:ac:ed:5e:c6:48:31:90:b4:33:a0:ce:
4c:b9:88:a2:82:71:50:31:da:dc:a1:29:28:22:53:
aa:fa:69:48:84:7e:06:af:5c:d8:30:3b:24:73:36:
bc:db:e5:ef:14:30:d9:fe:60:e9:c5:45:50:67:8b:
06:31:a3:3e:19:c0:b2:1d:86:14:24:26:1d:56:35:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:32:77:90:18:39:08:92:D8:FF:4B:49:AD:8A:86:F6:5A:2E:E8:F6
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1a:1c:e0:03:88:7d:b3:2f:97:ba:7b:a4:32:57:b3:27:ee:
13:cb:f0:a3:78:e5:06:4f:80:a0:c0:20:aa:e9:7a:3c:8d:a7:
7f:d8:4b:a2:a8:ce:60:bb:a0:ae:16:93:30:cb:2a:ca:3b:0a:
04:55:d0:61:fa:6b:50:40:5a:30:6f:a3:bf:6b:94:b5:20:fd:
28:90:a4:2f:52:f5:ee:59:15:7e:ce:8f:59:e4:94:18:5b:62:
5b:8b:1e:42:15:22:94:42:7b:dd:30:c2:8f:8a:4d:19:3f:c7:
ee:87:78:9d:8a:12:d8:65:cb:6e:6d:4f:c9:81:e3:41:7e:02:
bd:b5:bc:20:f6:34:16:99:ee:d0:63:e7:b9:5b:75:9d:54:55:
7b:8c:e8:5f:57:21:ef:45:3b:2b:dc:1d:07:05:83:ec:a1:3d:
36:3e:43:0d:60:5c:f0:df:f9:9e:23:23:96:79:cf:7a:1d:f6:
03:c1:b7:09:41:9d:b4:db:5e:09:5d:79:c4:98:8d:60:fe:7f:
aa:16:92:b7:04:ad:30:7f:ac:62:0f:bc:99:4f:d0:47:aa:76:
55:e8:2b:7a:63:c5:40:06:5a:80:bb:74:09:c4:b9:ab:64:3d:
94:f2:b1:2a:4f:d6:87:84:76:66:9c:14:3c:f1:7f:1a:e9:c0:
70:3c:44:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:53 2026 by rpki-client