Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: pnrRr/lmSCwfg1tidKwnsTiYFyNxVkZBy44C76CNaOs=
Subject key identifier: 54:EF:4E:2E:8E:62:DC:82:20:45:2C:13:D8:F1:FA:31:AD:7D:30:90
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 019E1DFE944569037F9DA2CA011EF1921A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 15A4
Signing time: Tue 12 May 2026 21:01:23 +0000
Manifest this update: Tue 12 May 2026 21:01:23 +0000
Manifest next update: Wed 13 May 2026 21:01:23 +0000
Files and hashes: 1: 1-nxOwcqKJT0K-u0XDjOtyS0LoY0.roa (hash: nATa+n5oWjMZXiwMho7tjE9Rx2x+4yb18TAu52HSqiY=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: qBf1fFrpDk1BeEWqRU9AgdT0hvmYqhU0+F7V3WZQPGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:94:45:69:03:7f:9d:a2:ca:01:1e:f1:92:1a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: May 12 21:01:23 2026 GMT
Not After : May 13 21:01:23 2026 GMT
Subject: CN=54ef4e2e8e62dc8220452c13d8f1fa31ad7d3090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:11:ea:47:12:da:f8:b0:ef:8c:1c:a7:85:
e4:38:dd:7f:74:0c:e6:c7:3f:56:f3:ef:f8:53:e7:
06:06:31:b8:2a:66:32:9e:65:58:36:e6:97:48:b0:
4c:1f:b1:59:23:1d:8c:c6:f6:8f:57:90:3a:47:54:
d5:98:15:28:b9:02:03:e7:e9:06:20:6b:8a:b2:2c:
42:d1:f5:06:c2:26:2e:b2:5d:61:77:43:1a:17:eb:
42:3a:a3:20:5a:76:86:d6:1e:93:17:33:49:42:9f:
b7:3d:a8:5f:09:17:4e:48:00:ef:5d:6c:b0:74:34:
82:ab:bf:79:b3:18:a6:29:d3:6c:ba:63:3e:70:06:
01:76:7d:3e:3d:5e:f2:d0:25:0e:a6:e4:b5:d8:ac:
8a:c6:81:ef:6f:a0:9d:60:1c:59:04:f3:e2:a8:e0:
1c:61:bb:30:ec:d2:11:93:9c:ab:3e:98:8f:eb:68:
9e:95:bf:2b:62:6b:11:c4:35:12:9d:43:17:04:0e:
86:67:41:3c:96:82:77:68:b5:87:cb:97:d9:25:6d:
12:d0:3b:9f:74:5a:5c:82:18:ec:7d:58:db:36:d9:
49:c8:75:3b:67:ca:8a:ce:ed:dc:4c:d7:6f:4f:81:
15:0c:f9:fd:e1:65:d4:d5:f2:0e:97:ed:02:98:31:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EF:4E:2E:8E:62:DC:82:20:45:2C:13:D8:F1:FA:31:AD:7D:30:90
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:23:72:72:70:7d:e2:fd:4a:e0:5f:fe:81:ad:e7:e8:b7:61:
8e:c1:b0:cd:61:75:82:84:06:8a:f7:60:a2:61:94:09:46:5f:
86:7e:35:38:a7:ef:0d:cb:15:80:f4:b7:2e:e5:b3:ef:32:b9:
b4:82:6e:f1:aa:00:14:4a:c7:a9:36:80:9e:14:2c:c9:23:18:
2c:2c:36:c4:ce:09:1e:79:12:64:74:24:18:07:e2:c8:da:90:
a3:36:72:ca:5a:97:05:a3:2b:8e:c9:3b:5c:82:ed:01:ce:0b:
96:02:19:58:55:a1:76:fa:40:3a:1d:84:0d:b9:8e:2a:af:14:
89:29:77:30:be:48:8e:5d:30:73:85:9f:ca:ad:b4:16:0c:24:
fa:0c:fc:38:f4:32:b8:60:8c:49:1c:ec:7a:fd:ad:a2:3f:21:
49:50:53:a1:e5:b7:8a:00:99:bf:d7:9c:9f:4a:a3:7d:fa:43:
55:cf:4e:8b:29:f6:25:41:e6:fa:61:57:94:87:5d:a7:f7:7a:
76:ca:3d:86:22:5b:58:18:db:e1:4f:48:4c:48:dc:c4:9d:ad:
f2:61:75:91:e3:d1:7a:0d:18:cd:83:71:cb:85:e8:15:51:db:
b9:88:1b:b8:4a:3b:72:b9:48:02:b6:ab:d3:0d:af:47:ed:e2:
34:d1:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:28 2026 by rpki-client