Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: tC6ehqftJ+d2jCy1PtF8mYAP6Uv6jgpDja060MRNe6k=
Subject key identifier: 9A:43:F2:C3:29:63:13:F3:3D:B5:2F:A3:A0:B5:A4:32:5F:F5:D3:29
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 019E1F10A9D4971DC3CE8525E12A9D972BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0E8C
Signing time: Wed 13 May 2026 02:00:46 +0000
Manifest this update: Wed 13 May 2026 02:00:46 +0000
Manifest next update: Thu 14 May 2026 02:00:46 +0000
Files and hashes: 1: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: PEZ/GW4UzOh8XI6vv7uu9fN/R2r0g6guG31J0v06dEU=)
2: ioSKJKkF_4HM_F6u6RJnkLY1uWU.roa (hash: WbXNH1FTymiYyoPgw712is108gr5GM8N98thfxq0yjg=)
3: s7B9p4vTJAow4sBYhbnToQXwFKo.roa (hash: nHDCoe/MNgEdbVoOhEHnJFTP5BTnyS6pKwNLw3+w7aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:a9:d4:97:1d:c3:ce:85:25:e1:2a:9d:97:2b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: May 13 02:00:46 2026 GMT
Not After : May 14 02:00:46 2026 GMT
Subject: CN=9a43f2c3296313f33db52fa3a0b5a4325ff5d329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:78:21:29:10:93:d7:b3:31:86:65:9c:d4:
c6:4a:bf:f4:9f:f9:7c:82:1e:a3:ca:d1:b6:06:85:
09:44:6c:37:52:0d:82:ad:f9:b3:c2:41:7a:fe:d8:
69:29:4d:62:17:dc:05:04:b0:5c:5e:8f:86:6c:27:
48:3c:e1:7f:4f:e9:c9:f6:72:74:2f:4f:89:4a:4f:
fa:4d:7a:25:98:b6:fa:94:da:11:40:1f:cf:fa:4f:
88:9a:31:77:02:67:fe:31:b7:c5:ea:58:f1:b5:79:
6a:9a:87:43:e4:d2:e7:a3:f1:a2:3d:3a:8a:79:47:
ca:58:03:be:a7:fe:23:81:96:a8:40:14:86:06:28:
6c:2d:ab:f2:80:49:42:fc:ed:ea:c0:99:8d:9f:20:
b7:5b:19:8f:44:8d:54:0d:b2:b9:e9:fb:62:72:44:
2f:a9:23:7b:a4:7b:0a:cc:ea:91:59:87:4f:8b:04:
b2:ae:c5:b2:3a:97:6c:6e:ad:96:da:94:e7:e7:db:
93:29:70:0e:cb:c8:9e:3a:90:04:d6:65:59:ee:30:
49:67:5b:c3:bc:e7:58:68:d6:69:3a:b1:7f:cb:ca:
e6:b6:46:bd:df:ac:45:f7:de:de:37:cb:e9:50:69:
56:35:e3:65:96:80:15:9b:59:23:9f:30:d8:d0:00:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:43:F2:C3:29:63:13:F3:3D:B5:2F:A3:A0:B5:A4:32:5F:F5:D3:29
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7d:db:e6:1d:49:f1:87:3c:d3:b4:b4:cb:9f:9a:f4:c3:bd:
6a:9c:0c:eb:cb:6c:32:99:c1:85:29:df:1f:48:f5:68:ab:46:
e3:d0:cc:43:7d:a1:9d:2c:4e:f4:ab:c5:c9:ef:95:d9:89:db:
aa:82:15:55:85:f2:e1:4e:f0:ec:63:a1:4b:29:e9:0d:0b:66:
da:71:c1:6f:61:8a:25:a5:9d:a8:3f:5e:1f:d4:25:fc:d8:62:
4f:3f:a5:00:55:5a:eb:92:b2:4c:35:f4:51:62:d4:44:39:37:
f6:66:56:32:9e:25:b5:3a:02:fc:49:53:fd:02:84:0d:65:13:
db:31:f0:88:0b:de:41:87:74:e7:15:2a:c1:bb:12:bb:12:c7:
3b:10:59:6c:1e:8f:63:f0:6b:b9:23:a3:76:24:ee:8a:4e:e9:
9a:43:81:c1:d0:f6:cd:db:4f:dc:fb:2e:bd:09:d2:42:90:9b:
3f:0f:60:aa:8a:c9:e5:7a:a8:20:35:ba:b2:15:56:c8:ee:e4:
d4:a3:a6:a6:5a:27:76:6b:6c:4a:9f:db:dc:7a:b4:15:50:b2:
a8:42:ab:f4:af:80:cb:b3:94:d8:f2:46:9a:86:c8:c2:9e:46:
89:6e:17:c3:8a:01:ea:b9:5f:81:60:8b:a0:ca:df:8d:ea:95:
37:5b:b9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:54 2026 by rpki-client