Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: qfm5tJ43XTmdLsEe0ENZsBXHTTQkRt/lRyqSflQlRDY=
Subject key identifier: 72:7C:AD:FC:D5:BB:4C:F8:28:D8:6F:F1:7C:80:37:B8:54:DB:F1:A4
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019E1DFEA212BD59B99652DA3185CFF4D6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0CC3
Signing time: Tue 12 May 2026 21:01:27 +0000
Manifest this update: Tue 12 May 2026 21:01:27 +0000
Manifest next update: Wed 13 May 2026 21:01:27 +0000
Files and hashes: 1: 6T9BKd54hJP6Az2gee30qNYKZhg.roa (hash: FQ2bfaefB9lrSQK6srbzQ/MAtltaRhAf33U3BjcCTGg=)
2: HY2WPJ0Uun9_vextwPwhe9YdvGE.roa (hash: hJllkHl4C9w6RJ5gWDAIZKn//zzxDrKmlm5iU05r/YE=)
3: KuK6-wFPrJ724Q1SLDPvK2Lc3Ho.roa (hash: p7wyvd5ycUkjLFvRTx+q1prd9mAfzhU6jfV9QHe5B5Y=)
4: YyAPMznQWzoSlVfARHi4KzDlm2o.roa (hash: mo5EWirxEPAEzXObtP9TGIkgyFxanfDzSVXHrCRaKA8=)
5: bgNIlCaYdXC-jvWNp_PZUF5Wjv8.roa (hash: HOrOgGxOBWyo+S8wn7jt9DAC9QdGgJNYdRMb72H+pWc=)
6: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: jYlH9cX089djbGbWATPKgtHKJQJMyFnpTs2XvaTLrRs=)
7: kMQMIFFfz9dDImfwz8m7mtdpugQ.roa (hash: hBaL6GBKYyDCaTVjdM3YLuqqOTSlZ1kpqqMVd30MX+Y=)
8: uYasmJoepPuLradS4mEgKfSf0xM.roa (hash: fRNiAZAXUYcJwmt3jwA2fE27+dN1LEmb0ljniL/HxDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:a2:12:bd:59:b9:96:52:da:31:85:cf:f4:d6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: May 12 21:01:27 2026 GMT
Not After : May 13 21:01:27 2026 GMT
Subject: CN=727cadfcd5bb4cf828d86ff17c8037b854dbf1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:09:9c:5b:70:71:b9:80:0a:ef:84:21:a5:
00:5b:09:c2:45:83:0e:ca:96:3d:0c:db:da:b9:a9:
32:6a:8a:89:82:b2:62:3e:b1:f3:e0:86:3c:bd:7a:
0a:6a:4e:41:e8:57:0a:5d:fa:50:6e:e0:9b:85:ce:
c9:7a:2d:18:db:6e:c6:0d:36:e5:30:3b:f4:b5:3d:
fc:80:a3:fc:3e:5d:67:1b:f3:91:64:78:1d:6f:03:
ba:d0:69:62:46:0a:85:ac:a5:cc:96:14:09:a5:8c:
58:8e:62:8b:0d:f2:f8:56:3c:f5:da:44:c3:94:8a:
99:0a:93:c0:5e:a2:09:83:db:25:f0:5d:19:ec:80:
d7:1f:3d:f3:ef:ef:7a:2a:85:e9:c4:91:d7:a4:2d:
c3:b2:16:a7:24:3f:e9:66:dc:0c:6e:25:37:17:8f:
bf:26:ca:67:12:03:d9:f3:9d:ca:34:67:06:ac:56:
f4:e9:db:c7:8c:e4:42:96:de:19:36:d0:9c:ee:9a:
c0:81:af:2c:a1:2a:47:1f:86:d7:d3:66:81:60:27:
5d:40:88:ca:fd:02:64:7d:a2:f1:07:b1:b5:38:41:
b1:46:71:4c:81:4e:1c:e7:83:93:23:d6:d4:30:01:
f0:8c:d9:a9:9c:81:95:0b:d5:ec:4a:42:d4:07:48:
1d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7C:AD:FC:D5:BB:4C:F8:28:D8:6F:F1:7C:80:37:B8:54:DB:F1:A4
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d4:36:1b:b1:e8:7f:fc:dd:bf:67:e4:77:09:fc:53:e4:21:
22:8e:ae:b4:f7:15:b5:13:92:ba:f1:b2:03:78:d0:c8:b9:87:
72:f1:ca:06:6e:2d:79:f5:6d:09:de:79:19:68:dc:1d:28:30:
aa:e7:3a:06:c9:2c:47:93:75:43:64:40:aa:67:5e:9f:de:a4:
68:33:33:2f:ee:a7:1b:c3:dd:37:24:cd:39:38:f8:53:c6:84:
50:b3:3e:64:30:fa:26:30:ca:7e:ed:13:db:0d:98:c9:a5:75:
7a:46:28:89:35:a9:49:a4:da:94:50:95:4a:43:d7:53:d4:64:
c3:23:ff:15:bd:54:18:96:5f:c5:f5:5f:89:27:0d:8d:4a:fa:
93:64:d7:fe:cf:64:dc:95:48:b2:93:8a:1e:a1:77:09:eb:99:
5b:b5:ff:53:ad:58:fd:e2:6b:9d:bb:b4:c4:54:fb:00:c1:da:
ef:b4:3a:fd:3b:c0:8e:36:0b:e7:c8:b5:ac:19:0a:d4:83:3d:
2c:f0:1c:f2:98:db:a9:93:63:c2:61:ce:90:01:95:97:07:cf:
e9:cd:1f:fb:43:ba:aa:0b:f2:ed:aa:ce:37:4a:15:1b:93:40:
77:2d:f9:61:f1:67:35:88:77:f8:5e:f2:a9:1a:6e:94:3b:3e:
97:03:f7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:07 2026 by rpki-client