
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: WEeL/X6OQsjoHBKrO7/xy8smTTw2LDQm6Qkvi4eANUA=
Subject key identifier: D0:5A:CE:A8:19:E8:89:92:BC:0E:A2:84:8C:BF:48:86:97:37:19:A6
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 019E1CEBF741963A0C5CDF8A2FED9A435BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 1899
Signing time: Tue 12 May 2026 16:01:26 +0000
Manifest this update: Tue 12 May 2026 16:01:26 +0000
Manifest next update: Wed 13 May 2026 16:01:26 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: RxofGmi8Q15mvMO4lIdX0eTcyUmWJJcroxB4BZ+VijY=)
2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:f7:41:96:3a:0c:5c:df:8a:2f:ed:9a:43:5b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: May 12 16:01:26 2026 GMT
Not After : May 13 16:01:26 2026 GMT
Subject: CN=d05acea819e88992bc0ea2848cbf4886973719a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:d8:ce:6a:63:ee:94:00:5e:30:a9:f3:82:
37:ba:ab:8f:0b:7f:80:2b:0b:d4:70:cb:da:fa:3a:
b3:be:4e:66:76:fa:f6:ab:bf:16:22:c6:fc:ae:12:
c6:38:a5:e8:bb:f5:f1:a1:44:c1:9c:07:3b:25:a1:
91:55:f6:d5:4e:ee:d0:30:34:78:fb:8c:00:1a:7d:
91:57:b3:fe:88:d1:36:56:c3:27:83:c9:7b:68:dd:
c7:eb:33:2c:db:dd:07:b6:45:a2:53:0f:ed:0c:75:
8d:59:1c:73:62:53:eb:ae:a0:ef:70:36:31:bf:ce:
a3:a5:fa:1b:1d:b9:6b:a7:89:26:c1:c8:49:a7:54:
c0:30:cc:3d:cd:03:c6:40:35:1f:8e:6a:38:89:44:
db:bc:50:de:00:6f:c5:84:94:80:95:6c:9b:f9:0b:
a4:35:20:af:49:4b:a0:25:c2:cf:a8:dc:db:6f:7e:
3c:53:c0:ae:3a:1c:ce:9b:51:ff:41:8b:f1:fd:79:
33:13:2b:e3:12:bc:4c:cb:2f:f2:38:29:85:3a:39:
31:f8:d8:7b:ad:03:47:d2:16:a2:1f:ac:1f:4b:50:
98:0c:f9:c3:d8:0a:99:f1:dd:2e:fc:0a:0b:c4:5f:
68:7f:a2:e8:20:b9:57:a2:34:a6:d1:50:0a:b5:95:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5A:CE:A8:19:E8:89:92:BC:0E:A2:84:8C:BF:48:86:97:37:19:A6
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:79:a1:dd:e6:b8:fa:b9:bb:de:f1:9e:53:1e:ab:ee:3f:8a:
12:61:f6:89:47:0f:37:5a:8a:15:b3:7b:3e:68:56:49:bd:f0:
1b:29:0a:69:29:d3:1c:a3:e6:02:36:c1:e0:e2:74:d2:12:f7:
28:2b:e1:13:e9:60:88:2b:9d:5f:01:fb:3a:72:5e:86:e4:81:
ae:56:da:c3:c9:9b:3b:29:01:e2:2e:2a:46:8f:8d:d6:cf:bf:
64:db:a7:b0:f0:9e:86:e6:56:3d:e6:b1:33:e3:58:f1:69:b9:
bf:a6:a0:b6:3d:d8:19:d8:1d:2b:4d:fc:27:46:ee:fc:e0:71:
fb:4b:29:53:fe:85:22:ca:87:15:4d:37:e3:cd:44:95:55:d5:
62:91:5e:2a:fd:26:0e:14:58:06:77:9d:59:e9:7c:b1:f9:4c:
be:01:6b:d1:ff:b9:59:5e:13:5e:95:3f:9e:0b:fe:9e:1c:e0:
17:94:a4:20:8f:4e:91:6d:d4:00:62:17:c0:f5:44:fa:b8:41:
48:df:60:09:1a:5d:3a:77:87:c2:f8:a9:87:52:70:ba:01:53:
27:0d:5f:2a:c8:ae:05:b4:72:7c:a9:74:fd:09:8b:26:08:a4:
9b:46:48:e1:a4:0f:11:74:c5:21:56:e4:c0:f3:9f:49:d8:0f:
e5:57:48:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6/dBljoMXN+KL+2aQ1uqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDkwZWQwMDI3ZjBlMzNhNzU0YzI1OWY3ZGM4OGJiN2E3
MmZmYTgwHhcNMjYwNTEyMTYwMTI2WhcNMjYwNTEzMTYwMTI2WjAzMTEwLwYDVQQD
EyhkMDVhY2VhODE5ZTg4OTkyYmMwZWEyODQ4Y2JmNDg4Njk3MzcxOWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4nYzmpj7pQAXjCp84I3uquPC3+A
KwvUcMva+jqzvk5mdvr2q78WIsb8rhLGOKXou/XxoUTBnAc7JaGRVfbVTu7QMDR4
+4wAGn2RV7P+iNE2VsMng8l7aN3H6zMs290HtkWiUw/tDHWNWRxzYlPrrqDvcDYx
v86jpfobHblrp4kmwchJp1TAMMw9zQPGQDUfjmo4iUTbvFDeAG/FhJSAlWyb+Quk
NSCvSUugJcLPqNzbb348U8CuOhzOm1H/QYvx/XkzEyvjErxMyy/yOCmFOjkx+Nh7
rQNH0haiH6wfS1CYDPnD2AqZ8d0u/AoLxF9of6LoILlXojSm0VAKtZXqBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBazqgZ6ImSvA6ihIy/SIaXNxmmMB8GA1UdIwQY
MBaAFBgJDtACfw4zp1TCWffciLt6cv+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjIt
Y2ZmYWQ1MzI5MmNlLzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xMGRkN2YtNWVkNy00NGRkLWJlYjItY2ZmYWQ1MzI5MmNl
LzEvR0FrTzBBSl9Eak9uVk1KWjk5eUl1M3B5XzZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXmh3ea4
+rm73vGeUx6r7j+KEmH2iUcPN1qKFbN7PmhWSb3wGykKaSnTHKPmAjbB4OJ00hL3
KCvhE+lgiCudXwH7OnJehuSBrlbaw8mbOykB4i4qRo+N1s+/ZNunsPCehuZWPeax
M+NY8Wm5v6agtj3YGdgdK038J0bu/OBx+0spU/6FIsqHFU03481ElVXVYpFeKv0m
DhRYBnedWel8sflMvgFr0f+5WV4TXpU/ngv+nhzgF5SkII9OkW3UAGIXwPVE+rhB
SN9gCRpdOneHwviph1JwugFTJw1fKsiuBbRyfKl0/QmLJgikm0ZI4aQPEXTFIVbk
wPOfSdgP5VdIiA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:09:50 2026 by rpki-client