Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: 4cZHOHCur4r1SizE5arreoRGsPiqoVmayUoM+m3pe2g=
Subject key identifier: AC:87:F9:1D:B8:C3:ED:71:D9:54:90:B4:E1:09:4A:7F:3F:7F:AE:49
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 019E23246BE22A120CE76D3D3E48912B33AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 07D1
Signing time: Wed 13 May 2026 21:00:49 +0000
Manifest this update: Wed 13 May 2026 21:00:49 +0000
Manifest next update: Thu 14 May 2026 21:00:49 +0000
Files and hashes: 1: QcGVhryX4x7bfWIgC0U3JlcZMH0.roa (hash: Bat9oEb0UFv1zJKscTa1DuwM+XuSb3SLfJDIXRZHQRs=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: B31RLFLzPUM0HhVnTZZsmT8u0AHEssYkMs5JOZUDoWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:23:24:6b:e2:2a:12:0c:e7:6d:3d:3e:48:91:2b:33:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: May 13 21:00:49 2026 GMT
Not After : May 14 21:00:49 2026 GMT
Subject: CN=ac87f91db8c3ed71d95490b4e1094a7f3f7fae49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:69:58:47:1e:44:d2:0b:3f:30:7f:64:b5:
ac:69:8a:ec:2c:9c:a0:01:12:1a:db:a8:55:b9:05:
7b:94:34:e9:7a:52:13:90:63:ba:a4:e7:1c:88:5a:
90:38:9e:61:71:ea:8e:56:f6:fb:52:63:c2:0c:4f:
4c:69:15:63:62:f7:b3:d4:ee:1b:0d:b8:0a:be:08:
cf:55:8e:d4:af:b1:9c:78:83:79:98:7a:41:1a:93:
3f:a5:d2:d1:9b:6e:72:68:10:1d:21:91:27:5d:c8:
d0:d1:ce:c6:2d:45:ec:60:9e:77:a4:14:92:ae:18:
a3:0b:0b:b0:d5:cf:4a:01:23:f5:ff:37:99:4f:22:
1c:9b:62:16:99:3f:01:bc:37:84:00:e4:96:8b:07:
75:33:ad:c6:4d:62:cd:8e:41:39:09:37:17:2d:81:
8e:ac:b5:f4:2a:41:26:25:9f:be:ea:a8:be:ba:bb:
56:76:f2:46:3a:f1:92:41:36:4c:1e:26:17:48:4d:
e9:0c:87:d0:a4:9b:50:6a:e9:fe:58:6c:7b:e9:62:
8e:2e:cd:62:85:79:70:45:3e:72:35:5e:f6:35:28:
b1:41:54:8c:e0:f4:fb:f9:38:cd:6c:22:25:c4:4c:
3b:18:e3:1c:8d:50:90:13:b9:a5:04:cb:19:eb:87:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:87:F9:1D:B8:C3:ED:71:D9:54:90:B4:E1:09:4A:7F:3F:7F:AE:49
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:49:2f:9a:69:6a:88:eb:3c:69:00:7f:32:d1:91:d3:3a:d8:
62:af:20:78:49:7b:e9:c4:17:e9:f0:95:b9:12:7d:55:54:c1:
5f:81:33:bd:0c:7c:08:57:7e:45:07:96:32:2d:75:93:de:fa:
8a:e2:da:5c:5c:cd:c8:26:b1:f8:3f:ad:41:7e:95:67:b6:5f:
97:00:6b:04:f4:b0:1f:50:8e:a1:c6:02:16:90:df:5e:d5:b3:
a7:31:fa:73:1c:df:df:b1:15:db:fa:11:5e:e3:38:cf:57:03:
85:8c:d4:bb:91:8c:6b:2c:91:47:98:e8:d9:c6:08:db:3c:3f:
1f:db:7c:9a:bc:50:dc:25:45:f0:e2:0b:35:3c:a7:66:9d:0d:
e0:a1:c1:48:6f:39:ff:7c:17:0b:ff:4c:38:6f:88:5b:0a:c6:
8d:2d:b8:cd:58:10:e1:92:df:31:66:48:76:cb:7a:39:42:88:
c1:20:1f:7f:fb:99:54:74:e7:1f:fa:77:22:77:17:dc:28:d9:
99:1c:25:66:31:ed:30:a9:0d:23:67:bb:05:f7:26:42:2f:66:
ec:4f:27:0f:3f:cc:0a:7d:d1:98:33:f3:ed:b4:cb:40:e2:d0:
ed:03:4d:c5:13:f2:0a:5d:3b:2c:33:43:45:b8:e8:e3:27:f3:
b3:29:ec:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 00:38:27 2026 by rpki-client