Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
File: gIBkPxusC6RJkhdbr7bFlTxz3iw.mft (raw, json)
Hash identifier: TeuVcLPLfxixQy/Lg2IG+gmmHDCWaNZe7YGXR4/j/SQ=
Subject key identifier: A2:2B:15:C2:30:C7:A2:A1:29:64:72:26:06:07:B7:88:C6:C9:C7:26
Authority key identifier: 80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
Certificate issuer: /CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Certificate serial: 019E1D59A04C3441ACB1867145D6D28D3E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
Manifest number: 01C5
Signing time: Tue 12 May 2026 18:01:13 +0000
Manifest this update: Tue 12 May 2026 18:01:13 +0000
Manifest next update: Wed 13 May 2026 18:01:13 +0000
Files and hashes: 1: gIBkPxusC6RJkhdbr7bFlTxz3iw.crl (hash: VWiv20ufy530J7jcPC+WK85E4oraLYVxrWSVbpPD6y8=)
2: yeVF8Df3VPcnjSBNmqzoVDfx_BA.asa (hash: q/aLmgYWUuh1D94V+T+v2Y5wHbMtBtOfdm/5xzlYGS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:a0:4c:34:41:ac:b1:86:71:45:d6:d2:8d:3e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Validity
Not Before: May 12 18:01:13 2026 GMT
Not After : May 13 18:01:13 2026 GMT
Subject: CN=a22b15c230c7a2a1296472260607b788c6c9c726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:5e:b1:bb:b6:04:9b:41:78:42:e2:3c:39:
ed:61:6e:43:b8:bd:f5:04:85:6a:1c:56:9f:ed:06:
52:3a:2d:a0:f0:c5:42:32:64:57:a1:43:20:74:93:
72:61:6b:14:97:3c:5d:52:25:40:21:b5:ce:ac:1c:
86:4c:ba:95:4d:7c:84:91:71:2b:cc:7c:d7:a7:50:
81:4c:6b:2d:58:08:4c:db:a2:a9:a5:70:6e:e5:1c:
dd:69:94:92:24:44:cb:48:14:07:7b:50:e1:3e:65:
26:b7:9e:6e:6f:c5:e0:be:80:7e:d1:4b:bb:ee:47:
87:13:5c:fc:dd:09:e1:e8:05:b6:bb:5d:a7:d0:01:
3a:7f:ff:c0:1f:87:57:f2:43:23:d3:d7:b5:e6:3e:
40:6a:d4:4f:c7:8b:de:3f:3e:c0:00:98:f2:70:df:
d9:31:e8:99:72:52:3a:ea:f9:2b:65:9e:54:b0:e6:
cf:70:7d:1d:64:11:51:0c:01:26:e0:cd:85:d1:49:
da:93:cc:f4:e1:c5:4c:b2:a2:c2:7d:05:5c:82:17:
eb:df:ec:6b:78:36:bf:28:43:71:42:6b:7f:0c:4f:
9f:06:82:36:d3:2c:fe:5e:4d:f0:b9:4b:10:52:51:
43:ba:85:d5:5d:f5:ad:a0:00:18:26:f1:c7:56:7d:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2B:15:C2:30:C7:A2:A1:29:64:72:26:06:07:B7:88:C6:C9:C7:26
X509v3 Authority Key Identifier:
keyid:80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:28:6a:f3:e7:ab:05:dc:d9:f1:78:59:27:ea:da:07:e7:5d:
ca:63:f8:40:fd:00:1c:ca:11:5c:46:78:cb:da:38:14:7f:90:
b8:67:d9:1c:7a:3c:c8:16:96:e4:09:94:46:d7:ac:25:73:21:
d7:26:f3:b6:c0:96:18:65:18:9f:fb:5b:e2:7d:c6:2d:b9:85:
cd:fd:af:e7:0b:be:c5:01:bf:bc:93:f5:80:c8:31:cb:7d:da:
10:40:6f:ac:dc:8d:e8:ad:98:ca:53:ee:72:39:f7:07:2d:2c:
db:b0:9f:ec:5a:a8:c8:8d:37:bc:81:7c:e0:ff:8a:53:47:27:
89:02:d6:3b:32:26:65:cd:f2:d1:f5:a3:b8:cf:19:d8:3f:53:
7e:d4:eb:86:c1:50:3e:9b:70:1a:6b:2f:ec:f4:66:23:e4:8c:
b1:09:e1:e0:4d:82:e8:3f:80:87:5c:a9:7a:8b:e6:69:7a:25:
9f:f5:30:3f:41:53:66:86:58:08:a9:1a:50:60:1e:b2:26:dc:
cd:88:3e:ff:29:01:f9:e5:9b:32:11:94:1d:da:97:51:8b:5d:
db:78:f3:b0:d7:c2:d8:e7:2b:63:13:64:e0:b0:d5:b7:22:66:
45:7c:8b:29:7b:25:a5:d0:a4:ec:43:af:25:af:c7:26:7e:90:
f7:bd:10:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:51:59 2026 by rpki-client