Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: 6cadD9bYrwIfac1f+Mnabf5IgRRnz2oOb/ntQVT+1Vc=
Subject key identifier: 46:A8:85:D2:5D:DF:C1:87:79:30:90:CE:46:6C:42:B2:B3:91:69:4D
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 019E1FB57A2F92CECF1DC79F9408ED4E0F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0AEC
Signing time: Wed 13 May 2026 05:00:47 +0000
Manifest this update: Wed 13 May 2026 05:00:47 +0000
Manifest next update: Thu 14 May 2026 05:00:47 +0000
Files and hashes: 1: GQ44FZo45uadx5xa67VPxM3MWOc.roa (hash: uTq3D6bK0frbt9f5N6hf9Vhq6zN5k3gerfpDd5Jzok8=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: /COij9k65gZNxS5Ua6T1gNzII9UYrBFlJBb920D7DIk=)
3: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (hash: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:7a:2f:92:ce:cf:1d:c7:9f:94:08:ed:4e:0f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: May 13 05:00:47 2026 GMT
Not After : May 14 05:00:47 2026 GMT
Subject: CN=46a885d25ddfc187793090ce466c42b2b391694d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:51:1b:2f:0a:7b:0b:b1:33:d0:aa:12:90:
08:89:74:f3:e1:f7:20:57:7e:bf:87:41:94:42:4d:
ef:05:16:c2:b1:38:86:ab:ee:27:9c:af:4e:6c:fe:
a8:36:11:bb:2e:13:ee:35:b7:27:6f:65:36:e6:6f:
1a:57:35:fe:f3:ed:9f:bc:68:50:a9:37:40:f9:ac:
45:a0:30:2c:ee:a1:0f:bc:63:58:54:2b:f5:1b:dd:
c3:f2:51:cb:39:f1:c3:b2:df:b6:70:1f:bc:ea:d1:
a9:8f:a5:fc:89:42:f2:cb:2e:3f:d2:b1:74:a8:71:
af:f5:cc:48:b1:64:9d:b8:d6:c6:1b:58:21:ac:d8:
b4:80:23:0c:f6:bd:de:65:13:b8:49:45:9a:89:6d:
ca:a1:2a:2d:70:cb:ea:91:4f:60:87:61:21:1b:a0:
41:0d:04:24:96:95:21:3f:54:c2:fe:48:41:85:d2:
b4:6c:a7:d8:02:91:37:b5:75:1c:04:89:ef:49:c9:
0b:3c:a0:2b:32:5d:31:61:32:b0:81:62:00:e5:cc:
0a:fc:ad:a2:60:11:d3:6b:56:d0:db:48:44:57:d8:
b6:13:fd:68:9a:01:58:ec:9c:3e:d6:60:8a:1f:70:
1f:a2:e6:9f:43:c3:a3:48:b9:a0:b7:77:ad:52:49:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A8:85:D2:5D:DF:C1:87:79:30:90:CE:46:6C:42:B2:B3:91:69:4D
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c1:cd:64:c4:3e:1f:99:67:ec:20:f2:99:9c:9c:50:56:4f:
24:21:1e:e5:1d:f7:9d:76:9f:e2:69:f7:52:7d:a1:77:7f:74:
cb:c1:44:b2:51:94:ab:60:e8:11:99:b5:ae:b8:4f:93:56:0b:
e1:64:b1:81:01:9b:6b:5e:13:be:ed:2c:96:c0:66:ab:e2:b9:
14:0c:77:8c:2f:4f:9d:32:ce:4a:27:a1:ce:f4:21:24:b5:16:
8d:4e:d7:14:60:7a:f5:1b:52:fe:00:9d:78:0c:03:c9:c5:e5:
0a:9d:c1:b9:65:82:e2:67:46:2d:71:9f:b5:a9:37:d3:79:b9:
6d:97:e8:43:fe:91:e9:af:d0:c4:bd:36:f5:eb:30:e4:31:68:
bd:75:ae:36:62:7a:6f:0e:ee:c3:54:12:d7:92:77:92:44:06:
aa:1b:c0:e8:44:c9:6f:6e:20:7e:ec:ed:9d:1b:d6:7f:34:7c:
2f:08:81:43:5d:7f:08:64:c0:62:b0:6b:c2:57:0d:e7:cc:98:
ac:a2:06:77:b0:51:86:47:27:e5:af:db:3b:2b:e5:e4:86:87:
43:40:2c:45:ca:fe:cb:14:79:d7:eb:6f:76:3b:3f:3b:13:97:
54:65:15:97:04:fc:62:36:a8:73:86:8f:9f:b0:74:b8:24:c4:
9b:3c:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:37 2026 by rpki-client