Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: 1JkzpXZnGUFrKbjrUT61FtksJ9o6Jgyh5JZ1D9z6khs=
Subject key identifier: 35:3C:7E:02:03:2A:DE:6D:25:E1:95:BD:43:52:F1:C5:A7:AA:52:04
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 019E1EA3DA2CD0C796E5557EEF4912DD1855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 00:01:54 +0000
Manifest this update: Wed 13 May 2026 00:01:54 +0000
Manifest next update: Thu 14 May 2026 00:01:54 +0000
Files and hashes: 1: ZWUErCoRp6n3sDfUTwWNxFlFwkE.roa (hash: 8RNREI6ryiba9fmNE0nRRUczZpr0WTS3WDo4j3F1+PE=)
2: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: izZtXFhbJN3jQ+mW/G9g/3NUIzyJ/rgoLqJ9rYxLI68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:da:2c:d0:c7:96:e5:55:7e:ef:49:12:dd:18:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: May 13 00:01:54 2026 GMT
Not After : May 14 00:01:54 2026 GMT
Subject: CN=353c7e02032ade6d25e195bd4352f1c5a7aa5204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5e:28:31:a3:aa:fa:91:95:07:b7:ab:80:06:
73:aa:c4:b8:56:92:0e:3b:4c:b4:2f:e6:27:5c:29:
5d:aa:a0:fe:be:07:11:bd:57:41:a0:ef:ea:fc:4f:
47:59:c3:3f:b5:86:0b:b5:72:4c:04:c0:96:33:61:
5d:2a:63:24:dd:7e:18:4c:cd:d4:60:42:67:73:ff:
12:c1:d1:27:8a:13:f6:d1:ca:dc:61:77:33:d5:98:
82:c8:55:ad:cd:05:38:c8:98:78:6b:6e:87:07:22:
30:ed:c1:4a:d4:8d:0a:d0:27:da:db:ae:e1:ba:b8:
7d:01:6e:66:73:56:01:d7:bd:1f:97:7d:c1:e3:6f:
4b:be:cf:7d:f4:b8:64:e1:f1:f2:f9:35:13:f2:31:
16:70:55:aa:8a:5c:af:1f:32:da:08:eb:a3:1a:a6:
ac:fe:93:c4:4c:f0:33:8c:dd:f7:e5:f3:85:69:bd:
43:50:99:aa:00:55:5d:49:9b:f9:ac:fe:02:b2:de:
62:f2:e9:a9:ec:e5:3b:d2:85:fb:34:66:e9:b8:57:
17:65:0a:58:9b:a0:0f:51:30:c8:5c:f4:7a:ee:81:
a1:84:53:eb:1d:b4:d2:9f:55:ac:13:c7:77:20:d7:
d6:b5:ef:c8:10:07:a5:88:43:cc:71:88:cd:41:87:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3C:7E:02:03:2A:DE:6D:25:E1:95:BD:43:52:F1:C5:A7:AA:52:04
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:56:aa:c0:59:b8:76:fb:65:9e:92:4f:52:08:58:c4:0a:c1:
8a:cb:c6:f2:11:4f:f9:6f:32:74:c4:fc:2e:ad:4b:7b:83:42:
d3:7c:2c:1e:16:b4:e5:8b:16:34:6e:4d:24:03:f3:1d:75:38:
31:52:5a:35:47:db:45:b5:b9:75:fc:7d:fb:3a:e8:fb:fe:43:
0e:cf:9e:8c:ca:6c:2b:f9:a1:d4:67:2d:1d:b6:d2:a6:12:59:
48:12:4e:91:ed:8b:c5:28:04:fc:59:ad:34:0e:13:d8:db:f7:
26:86:3c:f5:62:38:fd:7f:be:eb:45:56:84:1c:a1:bb:81:f0:
2f:c5:e2:90:c7:36:c5:b0:8f:76:aa:17:75:1b:ff:00:d8:57:
5a:ad:86:db:fb:40:f4:bb:1e:2b:bf:7f:6d:e1:28:e4:e0:33:
f5:8f:ca:09:83:db:70:17:2c:27:27:b6:92:fb:ff:6e:82:3e:
1c:b4:95:f1:a7:81:ee:66:ea:d5:e8:b1:06:ff:4f:19:12:79:
4e:79:71:a9:3d:7c:5e:b8:fb:81:ec:9c:a8:9e:70:1b:a5:a6:
c8:12:13:a8:56:07:64:e4:b6:f8:bf:b6:4b:50:46:c0:46:70:
41:ab:55:6c:48:31:1d:6a:4f:37:0d:21:bd:84:bd:26:4f:18:
da:f0:a1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:10 2026 by rpki-client