Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
File: GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json)
Hash identifier: nmVTDWxx0sdc8fTqhn5vvqd7Ap9Loa6Kj5Uoea/z+vo=
Subject key identifier: 38:9B:76:F0:75:64:CD:EF:74:C3:9F:38:3E:67:A0:ED:30:51:53:8B
Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
Certificate issuer: /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Certificate serial: 019E1DFEABEC8D883D789485D7F422B26D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
Manifest number: 0DE3
Signing time: Tue 12 May 2026 21:01:29 +0000
Manifest this update: Tue 12 May 2026 21:01:29 +0000
Manifest next update: Wed 13 May 2026 21:01:29 +0000
Files and hashes: 1: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: Dq05RxbPWFenxMRUoOxp6prMK7nNfBDamyRBeImmFCM=)
2: SkKZfC38ghmrpySCpGvRpFixxKU.roa (hash: o3RJWOBJfQjmbxei+seF+/aOYTLshRFp1ICoacA0zAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:ab:ec:8d:88:3d:78:94:85:d7:f4:22:b2:6d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Validity
Not Before: May 12 21:01:29 2026 GMT
Not After : May 13 21:01:29 2026 GMT
Subject: CN=389b76f07564cdef74c39f383e67a0ed3051538b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:35:19:74:2e:3a:13:75:9e:98:a1:8c:27:
87:2a:d6:2d:ab:4b:c7:e2:70:3a:92:01:8c:65:2f:
bc:de:7b:3b:b8:79:17:f7:a5:b8:64:f2:1c:1d:fe:
2a:69:2c:8b:04:45:7f:c4:cb:a0:c9:2d:89:ef:4a:
05:84:b8:45:d4:d7:80:b0:91:ad:af:fa:f3:21:ea:
56:c9:c8:3f:41:d6:75:a8:fa:08:17:2e:24:f6:b0:
84:39:3b:fb:87:2b:62:b1:24:47:90:36:fc:2c:15:
52:c6:e8:ef:76:e9:bd:bb:c9:71:62:6b:b1:2c:a0:
ea:f0:82:c2:89:1c:39:30:58:7a:e1:d2:8a:10:0c:
b3:23:57:a2:18:47:31:be:79:88:2c:e1:16:50:28:
e4:23:99:50:f5:12:51:16:04:5f:54:d7:fb:fe:cc:
9c:2c:3c:f7:f3:d9:75:f5:3e:31:02:2b:09:be:67:
f2:51:e3:eb:f6:84:75:d9:69:18:6b:e2:11:d9:0b:
7b:44:69:13:45:95:10:e2:dc:78:5a:8f:01:9a:1d:
aa:02:a0:52:62:4a:bf:e8:4f:1d:0d:65:f0:33:64:
ed:9f:38:e0:93:09:4c:42:1c:46:de:5b:ac:19:01:
06:5a:78:c7:b3:dc:67:7f:96:35:41:62:0a:59:15:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:76:F0:75:64:CD:EF:74:C3:9F:38:3E:67:A0:ED:30:51:53:8B
X509v3 Authority Key Identifier:
keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:83:83:e5:1f:57:69:6f:ea:55:6c:21:09:08:39:a8:c9:06:
42:e3:72:b9:9c:43:43:1e:b1:ba:2a:1b:b1:d3:6f:89:e5:1e:
c4:c3:8e:bb:fd:a5:be:e9:3f:c1:ec:bb:a4:62:8c:bd:53:ba:
88:3f:a9:f6:96:c2:65:60:2e:3e:bc:a2:85:49:11:50:c1:c9:
13:ed:5c:7a:7a:0e:68:61:52:54:25:e9:40:8e:d7:b6:1d:d8:
7f:0f:0b:93:5c:fe:46:69:f0:78:49:2b:46:3c:c1:53:6e:4a:
29:32:10:a8:a3:67:c1:08:4e:99:fd:7d:c7:7f:f1:3c:ea:d3:
1d:2c:07:a6:9f:2f:82:ee:18:25:0a:f7:f8:09:44:52:c4:22:
c1:03:ad:87:f2:15:42:fb:24:dd:ec:0e:b1:df:18:bb:1d:74:
6c:65:f6:bc:2f:e6:5f:4c:c0:3e:a9:e1:c8:6d:58:39:45:86:
f4:06:17:ec:d7:48:70:7f:48:ce:0b:d1:13:b5:36:09:bf:88:
9d:e6:c9:99:3f:04:35:a6:07:d2:8a:14:e2:17:08:1b:81:bc:
ac:57:db:f1:bd:42:ce:dc:8c:ad:d2:10:d3:10:0e:9a:24:fe:
e7:45:03:8d:71:90:34:de:4b:6d:14:b7:38:61:ff:66:5b:3a:
03:51:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:49 2026 by rpki-client