
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
File: GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json)
Hash identifier: tUs1KWG9C0LEvou6lmdhe7LlOcV8EXTYa1hSk8BXWhk=
Subject key identifier: D1:CE:DE:59:BC:AE:C6:0D:98:7D:DE:7E:8E:94:79:54:B6:CC:70:42
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Certificate issuer: /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial: 019E1F7F2FD93F4507D06591C75BF1618B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 04:01:29 +0000
Manifest this update: Wed 13 May 2026 04:01:29 +0000
Manifest next update: Thu 14 May 2026 04:01:29 +0000
Files and hashes: 1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: GLx/8M/AQ2TKIQwQwxn5jmZeBdBwzKKawcaAIzn+2ac=)
2: H00Omd7RPitereQtVkcKdJ7rvQE.roa (hash: P3INZZ+wxZ5iAVG5bG8aZrx0nXJci1wMPc5cl04gndw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:2f:d9:3f:45:07:d0:65:91:c7:5b:f1:61:8b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Validity
Not Before: May 13 04:01:29 2026 GMT
Not After : May 14 04:01:29 2026 GMT
Subject: CN=d1cede59bcaec60d987dde7e8e947954b6cc7042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:f8:00:a4:a5:6b:c1:af:84:c1:e6:24:8d:
bc:8e:36:9b:8f:b8:60:d5:99:51:96:64:42:53:23:
36:3e:14:31:f8:97:0e:7e:43:ad:e3:9c:c0:c6:75:
f6:c2:42:44:5f:02:e8:9f:fa:04:e2:f8:3b:cb:93:
df:63:49:b4:7e:a6:31:77:c8:3c:a2:8c:56:d2:1f:
b3:06:3d:fc:e0:0b:55:fe:ea:a4:6b:79:6d:c7:b9:
b4:15:d6:27:f0:cf:1c:8a:32:b3:9c:84:89:8b:90:
38:66:a2:1d:5f:5d:06:fd:5d:d2:db:3c:25:70:5a:
7b:06:74:bb:6f:6c:07:50:aa:55:43:b3:14:35:7b:
d1:64:cd:04:eb:92:ac:e3:31:cf:12:88:15:1e:0d:
11:93:c0:53:0f:d3:68:85:5f:ea:d3:e2:4c:5f:17:
5a:9e:01:19:c8:1c:79:aa:4d:bf:a3:e0:50:23:cb:
b9:5b:5c:cb:18:99:80:3d:39:1d:98:d6:62:1a:0a:
6f:ea:a7:2d:c6:20:c3:a8:c7:5e:ca:e4:4f:4e:10:
2b:d5:a1:79:24:e1:b8:d4:db:a8:a7:c9:e3:c7:3d:
a4:28:dc:42:ca:c2:37:5d:1f:33:6a:30:c7:64:a0:
3d:aa:d8:6e:5e:5a:05:4a:dd:71:31:c7:66:6c:84:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CE:DE:59:BC:AE:C6:0D:98:7D:DE:7E:8E:94:79:54:B6:CC:70:42
X509v3 Authority Key Identifier:
keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:01:40:b0:d3:46:92:ba:ab:19:07:99:89:2d:3f:c3:7b:06:
8a:a0:e6:76:26:68:00:a4:74:83:57:0f:ce:ad:6f:f0:6e:4f:
24:fc:2b:bb:ca:63:00:91:2f:8d:16:5e:3d:57:0c:c5:ff:cd:
40:84:92:ad:35:73:ff:a4:35:bb:6d:1d:4e:43:9b:46:d2:c3:
15:76:dc:75:e3:d9:e4:bb:09:2a:d1:b1:a9:ca:95:56:68:3d:
5d:77:1e:d3:5e:2b:1f:bb:08:5a:25:f2:e9:f8:e6:21:31:d7:
bc:64:c4:4c:33:f6:fc:73:b2:73:36:45:20:40:d9:2c:44:2a:
8c:ff:17:f4:65:97:e4:a8:f6:8f:14:d8:74:5a:ea:2a:96:ef:
f4:2a:ac:b9:3d:b4:1d:4e:15:7d:2d:e6:5a:e2:96:bd:22:3e:
b2:d9:ad:ff:19:5a:50:6d:4a:69:9d:39:5a:47:04:c0:6b:32:
4c:f0:84:c2:0e:5e:a9:0b:50:ac:4b:8d:42:b0:2e:b2:c1:43:
da:75:66:48:b1:04:b8:5e:bd:f0:b1:08:d1:05:75:86:66:54:
04:88:7b:aa:b2:54:93:fd:a9:ff:6d:ce:8b:ed:b8:53:e6:9e:
67:e1:55:07:58:e3:ec:1d:14:69:88:bd:5d:39:3f:e2:ef:7c:
79:64:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:57:38 2026 by rpki-client