Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
File: gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json)
Hash identifier: OYvK8Mv6dPRbsxlYDWQLkhZCbZcdlLn/I5aW/7oIM4M=
Subject key identifier: A6:36:ED:66:F2:81:94:D6:B5:5B:F0:4F:38:B5:DA:01:63:C7:75:BD
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 019E1DFEB38B269ECDF85780AE26DB102539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
Manifest number: 0FEC
Signing time: Tue 12 May 2026 21:01:31 +0000
Manifest this update: Tue 12 May 2026 21:01:31 +0000
Manifest next update: Wed 13 May 2026 21:01:31 +0000
Files and hashes: 1: M16NJT8ocHcFhdxLajdl5OmYfWg.roa (hash: OCbF5Tgm3E71OlvzY1cYnxinuqaWID2lU/O06sRIcAE=)
2: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: s38E2b6LrF9PKi8iD9g0o3PNM1Hx7N/gphMnwTba9DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:b3:8b:26:9e:cd:f8:57:80:ae:26:db:10:25:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: May 12 21:01:31 2026 GMT
Not After : May 13 21:01:31 2026 GMT
Subject: CN=a636ed66f28194d6b55bf04f38b5da0163c775bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:26:87:82:f7:5e:5c:17:69:d8:42:a9:9a:
33:c2:77:52:08:15:f6:9c:5b:0f:e0:62:71:eb:00:
c0:25:f9:83:71:55:90:04:20:7d:a3:65:f6:f3:34:
db:51:eb:a4:ad:7d:a0:02:e9:f5:ab:20:cd:03:60:
3c:f2:7c:43:36:96:ab:0a:a6:62:b1:ec:61:dd:5e:
f2:4d:a8:b4:1e:4c:80:9b:ae:d8:b1:40:a0:be:cc:
79:cc:e0:90:3d:99:77:d6:ab:e7:d5:fb:58:72:ec:
d1:1c:91:a1:9a:90:a9:2c:ae:47:27:c0:fa:02:54:
24:95:0c:70:fb:7c:85:44:e5:58:68:5c:39:96:62:
a2:ea:46:79:d3:95:30:dd:bb:ad:42:d7:c9:4d:5c:
3b:92:ee:8c:7d:7d:98:eb:33:73:6d:7b:04:b0:0f:
54:eb:e8:14:27:30:92:91:fe:8a:a1:ab:3e:9b:ed:
c4:80:e6:a0:78:1d:b6:97:84:4a:5d:bb:79:4e:ac:
49:f9:2f:ae:11:0c:d2:8a:ac:f1:10:54:06:63:ae:
83:3a:8a:79:9a:e7:49:94:9f:28:40:59:47:e1:45:
6e:27:69:e9:10:14:ca:5f:d0:24:60:80:80:b9:5b:
45:da:0b:b3:17:9a:fc:7a:74:da:ed:8f:11:be:c7:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:36:ED:66:F2:81:94:D6:B5:5B:F0:4F:38:B5:DA:01:63:C7:75:BD
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cd:f6:fd:b6:f8:e5:d1:b9:d6:5a:94:08:67:36:2d:e5:59:
87:f0:fe:f9:b9:d6:e0:cb:57:23:4f:bd:83:6f:6d:18:01:de:
e3:00:1d:ac:11:1b:ab:64:64:3e:1a:dd:ec:e3:6c:56:b6:7a:
65:4a:08:38:39:5c:4c:62:84:43:c8:af:db:f0:fd:0b:90:8e:
9b:10:0a:36:65:24:de:89:f2:20:27:40:c7:1d:c4:85:a0:22:
23:ff:23:0d:6b:a1:f6:78:4b:c5:38:e0:c3:d6:10:86:f8:74:
6f:46:78:d9:53:8e:34:69:f6:23:32:33:4e:10:48:8a:b9:f3:
4c:a4:1d:29:7d:3b:95:9f:53:52:4e:02:1d:53:04:e5:51:21:
bf:fb:bc:f4:a8:de:cf:a3:80:3f:69:bf:67:f0:68:8e:09:bd:
df:b5:f2:8c:c8:2f:83:9a:71:92:71:37:fb:87:b7:06:99:6b:
66:c0:9f:15:2f:52:d5:16:9d:2d:7c:3f:69:c2:3e:e9:12:b7:
b3:76:a9:11:9a:da:d4:f4:41:55:13:ca:87:53:d7:58:91:01:
87:7b:19:6e:bc:ff:cd:f5:40:0b:2b:a4:ef:59:12:11:d7:6b:
fe:2a:95:a4:ff:8c:db:ba:55:f2:33:17:d8:5d:95:b1:f9:a2:
a1:44:05:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/rOLJp7N+FeAribbECU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMjA1ZWYzOWIwZDNmNWQ3MmZhMWQ5NzFkNDE5MWUwYmEy
Njg2YmYwHhcNMjYwNTEyMjEwMTMxWhcNMjYwNTEzMjEwMTMxWjAzMTEwLwYDVQQD
EyhhNjM2ZWQ2NmYyODE5NGQ2YjU1YmYwNGYzOGI1ZGEwMTYzYzc3NWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhAmh4L3XlwXadhCqZozwndSCBX2
nFsP4GJx6wDAJfmDcVWQBCB9o2X28zTbUeukrX2gAun1qyDNA2A88nxDNparCqZi
sexh3V7yTai0HkyAm67YsUCgvsx5zOCQPZl31qvn1ftYcuzRHJGhmpCpLK5HJ8D6
AlQklQxw+3yFROVYaFw5lmKi6kZ505Uw3butQtfJTVw7ku6MfX2Y6zNzbXsEsA9U
6+gUJzCSkf6Koas+m+3EgOageB22l4RKXbt5TqxJ+S+uEQzSiqzxEFQGY66DOop5
mudJlJ8oQFlH4UVuJ2npEBTKX9AkYICAuVtF2guzF5r8enTa7Y8RvsdzXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKY27WbygZTWtVvwTzi12gFjx3W9MB8GA1UdIwQY
MBaAFIEgXvObDT9dcvodlx1BkeC6Joa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMt
ODlhOTAyMzI2MWYxLzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMtODlhOTAyMzI2MWYx
LzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWc32/bb4
5dG51lqUCGc2LeVZh/D++bnW4MtXI0+9g29tGAHe4wAdrBEbq2RkPhrd7ONsVrZ6
ZUoIODlcTGKEQ8iv2/D9C5COmxAKNmUk3onyICdAxx3EhaAiI/8jDWuh9nhLxTjg
w9YQhvh0b0Z42VOONGn2IzIzThBIirnzTKQdKX07lZ9TUk4CHVME5VEhv/u89Kje
z6OAP2m/Z/Bojgm937XyjMgvg5pxknE3+4e3BplrZsCfFS9S1RadLXw/acI+6RK3
s3apEZra1PRBVRPKh1PXWJEBh3sZbrz/zfVACyuk71kSEddr/iqVpP+M27pV8jMX
2F2VsfmioUQF2A==
-----END CERTIFICATE-----
Generated at Wed May 13 05:31:26 2026 by rpki-client